CVE-2022-20699

CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

chromium-browser: angle: Insufficient validation of untrusted input in ANGLE

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=40073848...

chromium-browser: angle: Insufficient validation of untrusted input in ANGLE

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513135862...

chromium-browser: angle: Insufficient validation of untrusted input in ANGLE

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495373657...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496526419...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...

CVE-2026-85532

Apache WSS4J is vulnerable to a security issue where it accepts attacker-controlled derived-key lengths and offsets without adequate bounds. This flaw allows for the generation of cryptographically weak keys or may lead to excessive CPU and memory consumption when the software processes crafted W...

swagger-ui

Introduction: The Role of Swagger UI Swagger UI is a widely used library that renders OpenAPI formerly Swagger specifications into an interactive web interface. It enables developers and integrators to explore and test APIs without having the backend implementation in place. CVE‑2018‑25031 Detail...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

Travelpayouts <= 1.1.16 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0337...

CVE-2026-14382

CVE-2026-14382 Bin trigger Bug fix $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 The root cause of this vulnerability appears to be similar to that of CVE-2025-6558. Based on my current analysis, I suspect that it ma...

CVE-2025-57833

Django FilteredRelation Alias SQL Injection Vulnerability CVE-2025-57833 A SQL injection vulnerability in Django that emerged after about a year, at first glance it appears to be caused by an alias since aliases cannot be precompiled. This vulnerability affects the FilteredRelation feature in the...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3 Description: A critical vulnerability exists in the System Settings module's file upload functionality within the Car Rental Management System versions 1.0 to 1.3, allowing low-privileged users to upload arbitrary...

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform Arbitrary File Read Vulnerability CVE-2024-41713 Due to an authentication bypass vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab software, and insufficient input validation, an unauthenticated remote...

CVE-2022-40471

CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data, which allows a hacker to trigger a service failure.

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...