CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm

mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. Attackers can exploit this vulnerability by manipulating the logo filename to reference files outside of the restricted directory. This can...

PsiTransfer: Violation of the integrity of file distribution

Summary The absence of restrictions on the endpoint, which allows you to create a path for uploading a file in a file distribution, allows an attacker to add arbitrary files to the distribution. Details Vulnerable endpoint: POST /files PoC 1. Create a file distribution. 2. Go to the link address ...

Anchor 安全漏洞

Anchor is an open source lightweight blogging system. A security vulnerability exists in Anchor version v0.12.7, which stems from a cross-site request forgery CSRF in /anchor/admin/categories/delete/2...

CIGESv2 SQL注入漏洞

CIGESv2 is a queue and reservation management system from CIGESv2. CIGESv2 suffers from an SQL injection vulnerability that stems from an SQL injection vulnerability in the parameter idServicio of /ajaxServiciosAtencion.php...

CVE-2024-2634 Multiple vulnerabilities on Meta4 HR from Cegid

A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier. The endpoint '/ssegenerico/genericologin.jsp' is vulnerable to XSS attack via 'lang' query, i.e. '/ssegenerico/genericologin.jsp?lang=%27%3balert%27BLEUSS%27%2f%2f&params='...

CVE-2024-2633

CVE-2024-2633 affects Meta4 HR versions 819.001.022 and earlier. The vulnerability is a Cross-Site Scripting (XSS) in the endpoint /sitetest/english/dumpenv.jsp, exploitable via the lang query parameter (example: /dumpenv.jsp?snoop=yes&lang=%27%3Cimg%20src/onerror=alert(1)%3E&params). Affects the...

PT-2024-21183 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue allows SQL injection through the "/amssplus/modules/book/main/bookdetail school person.php" endpoint, in multiple parameters. This could allow a remote attacker to send a specially crafted SQL query ...

PT-2024-21212 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue allows SQL injection through the /amssplus/modules/person/pic show.php endpoint, in the person id parameter. This could enable a remote attacker to send a specially crafted SQL query to the server an...

PT-2024-17486 · Papercut · Papercut Ng/Mf

Name of the Vulnerable Software and Affected Versions: PaperCut NG/MF affected versions not specified Description: This issue potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some...

SourceCodester Online Mobile Management Store Cross-Site Scripting Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Online Mobile Management Store version 1.0, which stems from a cross-site scripting issue in the...

Indu-Sol PROFINET-INspektor NT Security Vulnerability

The Indu-Sol PROFINET-INspektor NT is an analysis and test set for PROFINET communication verification, acceptance, quality checking and monitoring from Indu-Sol, Germany. A security vulnerability exists in Indu-Sol PROFINET-INspektor NT version 2.4.0 and earlier, which stems from a path traversa...

CVE-2023-37177

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...

CVE-2024-22107

An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php is vulnerable to command injection via the /old/react/v1/api/system/dns/data endpoint. An authenticated attacker can...

Trellix Endpoint Security Security Vulnerabilities

Trellix Endpoint Security ENS is an endpoint security solution from FireEye USA Trellix. A security vulnerability exists in Trellix Endpoint Security version 5.2.0.958244, which stems from an improper cleanup vulnerability in thrown exceptions. The vulnerability could allow an attacker to send...

CVE-2023-5118

The CVE-2023-5118 issue affects Kofax Capture’s SaveAnnotation endpoint (/sofer/DocumentService.asc/SaveAnnotation), where POST parameters author and text were not properly sanitized, enabling Stored XSS. Core impact is Cross-Site Scripting due to insufficient input validation in the annotation-a...

PT-2023-31185 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi versions up to v4.6 Description: The issue is a SQL injection vulnerability. It can be exploited via the "/system/dept/edit" API endpoint. Recommendations: For versions up to v4.6, as a temporary workaround, consider restricting access ...

PT-2023-32665 · Unknown · Bigprof Online Invoicing System

Name of the Vulnerable Software and Affected Versions: BigProf Online Invoicing System version 2.6 Description: A vulnerability has been discovered in the system, which does not sufficiently encode user-controlled input, resulting in persistent XSS through the "/inventory/batches view.php" API...

The vulnerability of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) endpoint security mechanism, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client endpoint security mechanism is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

CVE-2023-46730 Server-Side Request Forgery in groupoffice

Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery SSRF vulnerability in the /api/upload.php endpoint. The /api/upload.php endpoint does not filter URLs which allows a malicious user to cause the server to make resource requests to...

Hitachi Energy MACH System Software Path Traversal Vulnerability

Hitachi Energy MACH System Software is a MACH real-time high-performance control system platform from Hitachi, Japan. A security vulnerability exists in Hitachi Energy MACH System Software that originates from a McFeeder server that allows an attacker to upload a carefully crafted ZIP archive to ...