Ubiquiti EdgeMAX EdgeSwitch 安全漏洞

Ubiquiti EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti USA. A security vulnerability exists in Ubiquiti EdgeMAX EdgeSwitch version 1.10.4 and prior versions, which stems from improper input validation and could lead to command injection...

favorites-web 代码问题漏洞

favorites-web cloudfavorites is a cloudfavorites open source website built with Spring Boot. A code issue vulnerability exists in favorites-web version 1.3.0 and earlier, which stems from an incorrect manipulation of the parameter url resulting in a server-side request forgery...

Sourceforge LibrettoCMS 安全漏洞

Sourceforge LibrettoCMS is an open source content management system from Sourceforge. A security vulnerability exists in Sourceforge LibrettoCMS 1.1.7 and earlier versions, which stems from a file manager plugin that does not properly validate file extensions, and could lead to remote code...

LocalSend 安全漏洞

LocalSend is an open source cross-platform alternative to AirDrop by LocalSend Open Source. A security vulnerability exists in LocalSend 1.16.1 and earlier versions, which stems from the discovery of a man-in-the-middle attack vulnerability in the protocol that could lead to file transfer...

MiniWeb HTTP server 安全漏洞

MiniWeb HTTP server is an HTTP server by stanleyhuang individual developer. A security vulnerability exists in MiniWeb HTTP server Build 300 and earlier versions, which stems from improper handling of file uploads and can lead to remote code execution...

Lingdang CRM SQL注入漏洞

Lingdang CRM Lingdang CRM is a customer relationship management system from the Chinese company Lingdang Lingdang. A security vulnerability exists in Lingdang CRM version 8.6.4.7 and earlier versions, which is caused by SQL injection due to incorrect operation of the parameter function in the fil...

branch-names 命令注入漏洞

branch-names is an open source tool from tj-actions for retrieving branch or tag names. A command injection vulnerability exists in branch-names version 8.2.1 and earlier, which stems from insufficient input cleanup and output escaping, and could lead to arbitrary command execution...

DbGate 安全漏洞

DbGate is a database manager from the DbGate open source. A security vulnerability exists in DbGate 6.6.0 and earlier versions, which stems from insufficient file path validation and could lead to unauthorized file access...

Anubis 安全漏洞

Anubis is a tool for Xe Iaso Individual Developers. A security vulnerability exists in Anubis 1.21.2 and earlier versions that originates from a malicious pass-challenge page could lead to the execution of arbitrary JavaScript code...

PublicCMS 输入验证错误漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS 5.202506.a and earlier versions, which stems from an open redirect due to incorrect manipulation of the parameter url in the file preview.html...

WordPress plugin Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability exists ...

GPAC 安全漏洞

GPAC is an open source multimedia framework from GPAC Open Source. A security vulnerability exists in GPAC 2.4 and earlier versions, which stems from a null pointer dereference due to incorrect manipulation of the parameter baseiniturl in the file src/mediatools/dashclient.c. The vulnerability is...

WordPress plugin Ruven Themes: Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

wx-discuz 代码注入漏洞

wx-discuz is descreekert individual developer of a microsoft public docking discuz forum software. Code injection vulnerability exists in wx-discuz 12bd4745c63ec203cb32119bf77ead4a923bf277 and previous versions, which stems from a cross-site scripting attack due to incorrect operation of the...

DEBIAN-CVE-2024-41148

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python...

UBUNTU-CVE-2025-3753

A code execution vulnerability has been identified in the Robot Operating System ROS 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval function to process unsanitized, user-supplied input in the 'rosbag filter' command. This...

WordPress plugin YaySMTP SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin Restrict File Access 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

ZITADEL 安全漏洞

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era from the Swiss ZITADEL open source. A security vulnerability exists in ZITADEL versions 4.0.0-rc.2, 3.3.2, 2.71.13, and prior to 2.70.14, which stems from a la...

jshERP 路径遍历漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. jshERP 3.5 and previous versions of path traversal vulnerability, the vulnerability stems from improper operation of the parameter Title in the file SystemConfigController.java, which may lead to pat...