CVE-2024-25469

CVE-2024-25469 affects CRMEB crmeb_java prior to and including v1.3.4. The vulnerability is a SQL Injection in the api/front/store/list component, exploitable via the latitude and longitude parameters. Impact per sources: potential exposure of sensitive information. Exploitation details are not d...

Fedora: Security Advisory for rust-vergen (FEDORA-2024-993d3a78dd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-25730

The CVE-2024-25730 issue affects Hitron CODA-4582 and CODA-4589 devices where default PSKs are derived from a 5-digit hex value concatenated with the string “Hitron,” producing very low entropy (roughly one million possibilities). This has been documented across multiple sources (NVD, Red Hat, CN...

CVE-2024-22988

CVE-2024-22988 – ZKTeco ZKBio WDMS : Affects ZKBio WDMS prior to 9.0.2 Build 20250526. The vulnerability allows an attacker to download a database backup via the /files/backup/ component because the backup filename is based on a predictable timestamp, enabling unauthorized access to backups. Red ...

CVE-2024-24681

The CVE-2024-24681 entry concerns Yealink Configuration Encrypt Tool: AES version and RSA versions before 1.2 use a single hardcoded AES key to encrypt provisioning documents, shared across customers. This weak key handling is the root cause and can compromise confidentiality of provisioning data...

Stack overflow

A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the formWifiBasicSet function...

Stack overflow

A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the fromSetIpMacBind function...

Design/Logic Flaw

Summary On all Label Studio versions prior to 1.11.0, data imported via file upload feature is not properly sanitized prior to being rendered within a Choices or Labels tag, resulting in an XSS vulnerability. Details Need permission to use the "data import" function. This was reproduced on Label...

Stack overflow

Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the addwhitenode function...

CVE-2024-26152

CVE-2024-26152 affects Label Studio versions before 1.11.0. Data imported via the file-upload feature is not properly sanitized before rendering in Choices or Labels, enabling an XSS vulnerability through injected HTML/JS in the imported data (e.g., image tags with onload handlers). Reproduced on...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...

Cross site scripting

A reflected Cross-Site Scripting XSS vulnerability in FUEL CMS 1.5.2allows attackers to run arbitrary code via crafted string after the groupid parameter...

CVE-2024-1749

CVE-2024-1749 concerns Bdtask Bhojon Best Restaurant Management Software 2.9. The issue is a Cross-Site Scripting in the Message Page component (file /dashboard/message) triggered by manipulation of the Title argument, with network-based remote potential and user interaction required. Affects unk...

Design/Logic Flaw

An issue in flvmeta v.1.2.2 allows a local attacker to cause a denial of service via the flvmeta/src/flv.c:375:21 function in flvclose...

Cross site scripting

WayOS IBR-7150 17.06.23 is vulnerable to Cross Site Scripting XSS...

CVE-2024-26151

The CVE-2024-26151 issue affects the mjml-python package (FelixSchwarz/mjml-python), an unofficial Python port of MJML. The root cause is that untrusted input can be rendered as HTML in the final output when injected into mjml templates, allowing an attacker to influence email contents sent to ot...

CVE-2024-26128

CVE-2024-26128 applies to baserCMS. A cross-site scripting vulnerability exists in the Content Management feature in versions prior to 5.0.9. The issue is mitigated by upgrading to 5.0.9 or later, which includes the fix. Connected sources also reference fixes in 5.0.10 per later advisories. The v...

CVE-2024-24817

CVE-2024-24817 concerns the Discourse Calendar plugin. Prior to version 0.4, event invitees created in topics in private categories or private messages could be retrieved by anyone, even when not logged in. The issue is resolved in version 0.4 of the discourse-calendar plugin. Some partial mitiga...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlparmemoryremovebyindex may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index. When the search fails,...

Null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix re-attachment branch in bpftracingprogattach The following case can cause a crash due to missing attachbtf: 1 load rawtp program 2 load fentry program with rawtp as targetfd 3 create tracing link for fentry program with...