CVE-2024-1253

CVE-2024-1253 affects Beijing Baichuo/Byzoro Smart S40 Management Platform up to 20240126. The issue is in the Import Handler’s file_upload handling for /useratte/web.php, where improper handling can cause unrestricted file upload. This enables remote exploitation with high impact to confidential...

CVE-2024-1252

Tongda OA 2017 up to v11.9 contains a SQL injection in /general/attendance/manage/ask_duty/delete.php via the ASK_DUTY_ID parameter. The vulnerability is described as critical; exploit has been disclosed publicly. Upgrading to v11.10 mitigates the issue. As a workaround, restrict access to the af...

CVE-2023-43482

TP-Link ER7206 Omada Gigabit VPN Router (1.3.0 build 20230322 Rel.70591) is vulnerable to a command injection in the uhttpd guest-resource flow (CVE-2023-43482). A specially crafted, authenticated HTTP POST to the guest resource endpoint can trigger arbitrary command execution, potentially gainin...

CVE-2023-36498

Summary: CVE-2023-36498 affects the Tp-Link ER7206 Omada Gigabit VPN Router (1.3.0 build 20230322 Rel.70591). Talos’ report details a post-authentication command injection vulnerability in the PPTP client exposed via the web interface (PPTP Client page). A specially crafted authenticated HTTP req...

CVE-2023-47209

CVE-2023-47209 affects the TP-Link ER7206 Omada Gigabit VPN Router (1.3.0, build 20230322 Rel.70591). Talos reports a post-authentication command-injection vulnerability in the ipsec policy workflow triggered by a crafted HTTP request to the uhttpd-backed web UI (VPN → IPsec → IPsec Policy). Expl...

CVE-2023-42664

CVE-2023-42664 affects the Tp-Link ER7206 Omada Gigabit VPN Router (1.3.0 build 20230322 Rel.70591). A post-authentication command-injection exists in the PPTP global configuration web page; a specially crafted HTTP POST to the device can trigger arbitrary commands via the vulnerable uhttpd CGI e...

CVE-2023-47617

Cisco Talos reports a post-authentication command injection in TP-Link ER7206 Omada Router (1.3.0, build 20230322 Rel.70591) via the uhttpd web interface when adding a web group member. The vulnerability stems from unsanitized input used as an argument to a shell command in the websort/web group ...

CVE-2023-46683

CVE-2023-46683 affects TP-Link ER7206 Omada Gigabit VPN Router (1.3.0 build 20230322 Rel.70591). Talos documents a post-authentication command injection in the uhttpd-based web interface when configuring the WireGuard VPN, triggered by crafted HTTP requests after login. Impact is arbitrary comman...

CVE-2023-47618

CVE-2023-47618 affects the Tp-Link ER7206 Omada Gigabit VPN Router (1.3.0 build 20230322 Rel.70591). Talos documents a post-authentication command execution vulnerability in the web filtering web UI (webfilter) triggered by adding a web filtering policy, via an HTTP POST to /cgi-bin/luci/;stok=…/...

Remote code execution

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

Design/Logic Flaw

jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, and the biz parameter can be spliced into the upload path, resulting in arbitrary file uploads with controllable paths...

Sql injection

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /general/email/outbox/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

Sql injection

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit...

Design/Logic Flaw

An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...

Authentication flaw

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get access to restricted information when a process validates the permissions of multiple users e.g. mail notifications. This issue has been patched in version 15.4.99.140 of Tuleap...

CVE-2023-46183

IBM PowerVM Hypervisor vulnerability CVE-2023-46183 discloses sensitive partition information to a sysadmin via the Hypervisor in affected firmware. Affected products and versions: FW950.00–FW950.90, FW1020.00–FW1020.40, and FW1030.00–FW1030.30. Root cause: information disclosure within PowerVM H...

CVE-2023-35188

CVE-2023-35188 is a SQL Injection with Remote Code Execution in the SolarWinds Platform (SolarWinds Orion Platform). The flaw exists in the AppendCreatePrimary path and, when authenticated, allows crafting SQL queries to execute code with SYSTEM-level privileges. Affected products/versions includ...

CVE-2024-1251

CVE-2024-1251 affects Tongda OA 2017 up to version 11.10. The vulnerable component is the file /general/email/outbox/delete.php, where manipulation of the parameter DELETE_STR enables a SQL injection. The vulnerability is described as critical with public exploit availability and has a high impac...

CVE-2023-50395

CVE-2023-50395 concerns the SolarWinds Platform (Orion Platform) with a SQL Injection leading to Remote Code Execution via an update statement. Exploitation requires user authentication; impact is described as high (C/H/I/A) with CVSS v3.1 base score 8.0. Public references indicate multiple sourc...

CVE-2024-23344

CVE-2024-23344 describes an information-disclosure risk in Tuleap where, during a multi-user permission validation, some users could access restricted information (e.g., contents of artifacts or email notifications). The issue is categorized as an authorization/bypass-type disclosure affecting Tu...