CVE-2024-49706: URL Redirection to Untrusted Site

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent in a POST request to one of the endpoints. This vulnerability has been patched in version 79.0...

CVE-2024-49708: Improper Neutralization of Input During Web Page Generation

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context. This vulnerability...

CVE-2024-49705: Uncaught Exception

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise DoS attacks. An attacker might trick a user into using an URL with a d parameter set to an unhandled value. All the subsequent requests will not be accepted as the server returns an error...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.10.0, <=4.10.2), org.apache.camel.springboot:camel-undertow-starter (>=4.10.0, <=4.10.2) +2 more potentially affected by CVE-2025-27636 +2 more via org.apache.camel:camel-undertow (>=4.10.0, <=4.10.2)

org.apache.camel:camel-undertow MAVEN version =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.2 Source cves: CVE-2025-27636, CVE-2025-29891, CVE-2025-30177 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-9598038...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.10.0, <=4.10.2), org.apache.camel.springboot:camel-undertow-starter (>=4.10.0, <=4.10.2) +2 more potentially affected by CVE-2025-30177 via org.apache.camel:camel-undertow (>=4.10.0, <=4.10.2)

org.apache.camel:camel-undertow MAVEN version =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.2 Source cves: CVE-2025-30177 Source advisory: MEND:CVE-2025-30177...

Hackathon Starter Security Vulnerabilities

Hackathon Starter is a sample Node.js web application by the individual developer Sahat Yalkabov. A security vulnerability exists in Hackathon Starter version 8.1.0, which stems from a user.js component that could lead to elevation of privilege...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

The hackathon-starter application (version 8.1.0 ) contains a vulnerability in the user.js component. This flaw allows a remote attacker to achieve privilege escalation , potentially gaining higher access levels and enabling further exploitation of the system. As a workaround, it is recommended t...

PT-2025-14381 · Unknown · Hackathon-Starter

Name of the Vulnerable Software and Affected Versions: hackathon-starter version 8.1.0 Description: The issue allows a remote attacker to escalate privileges via the user.js component. This enables the attacker to gain higher access levels, potentially leading to further exploitation of the syste...

CVE-2024-12189: Improper Neutralization of Input During Web Page Generation

The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This...

CVE-2025-29036: Incorrect Privilege Assignment

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

org.apache.camel.springboot:camel-infinispan-embedded-starter (3.8.0), org.infinispan:infinispan-javadoc-all (11.0.8.final) +9 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.8.final)

org.infinispan:infinispan-query MAVEN version 11.0.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter 3.8.0 -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.9.0, <=3.10.0), org.infinispan:infinispan-javadoc-all (11.0.10.final) +9 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.10.final)

org.infinispan:infinispan-query MAVEN version 11.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.9.0, =3.10.0 -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (4.6.0), org.infinispan:infinispan-distribution (14.0.27.final) +14 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (14.0.27.final)

org.infinispan:infinispan-query MAVEN version 14.0.27.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter 4.6.0 -...