GHSA-23RH-XW42-FQ82 Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

engeman-web-language-combobox-sqli

Engeman Web = 12.0.0.2 密码恢复页面加载未授权SQL注入 关于CVE-2025-8220 中所述漏洞的利用概念验证，该漏洞涉及在Engeman Web 软件密码恢复页面加载过程中存在SQL注入 的可能性。 描述 在Engeman Web 软件中发现了一个漏洞，该漏洞允许操作密码恢复页面加载时执行的SQL 查询。此漏洞可由未持有任何有效凭证的访问者（即未授权方式）利用，从而危及应用程序数据库中存储的数据的机密性和完整性，并可能通过修改关键表中的值在组件层面造成拒绝服务。 供应商网站 https://engeman.com/en/ 漏洞利用...

PT-2026-89680

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reports config permission can inject...

PT-2026-89734

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reports config permission can inject...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the composite_setup() function in the drivers/usb/gadget/composite.c module of the Linux USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compositesetup function in the drivers/usb/gadget/composite.c module of the Linux USB device driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 SAP NetWeaver 开发基础设施中的服务端请求伪造漏洞 root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL: https://sap.com/ Bug: SSRF Date of Public...

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway relates to bypassing the authentication process by using an alternative path or channel...

The vulnerability of the sctp_sf_do_5_2_6_stale() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the tunPutUser() function in the drivers/net/tun.c file of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tunPutUser function in the drivers/net/tun.c file of the Linux kernel network device driver is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the tegra124_emc_prepare_timing_change() function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system-on-chip driver software, which affects the Linux operating system kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the pn532_receive_buf() function in the drivers/nfc/pn533/uart.c module of the Linux NFC kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pn532receivebuf function in the drivers/nfc/pn533/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ext4_ext_map_blocks() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4extmapblocks function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the usbip_pack_ret_submit() function in the drivers/usb/usbip/usbip_common.c file of the Linux operating system’s device driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbippackretsubmit function in the drivers/usb/usbip/usbipcommon.c file of the Linux device driver module is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the functions nf_conntrack_helper_register() and nf_conntrack_helper_fini() in the net/netfilter/nf_conntrack_helper.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions nfconntrackhelperregister and nfconntrackhelperfini in the net/netfilter/nfconntrackhelper.c module of the netfilter component of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the cdc_ncm_rx_verify_ndp16() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp16 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver relates to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the dpaa2_switch_irq0_handler_thread() function in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c module of the Ethernet network adapter driver for the FreeScale Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dpaa2switchirq0handlerthread function in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c module of the Ethernet network adapter driver for the FreeScale Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting thi...