277901 matches found
Altenergy Power Control Software - SQL Injection
A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function getstatuszigbee of the file /index.php/display/statuszigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated...
Jan v0.4.12 - Arbitrary File Upload
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. id: CVE-2024-36858 info: name: Jan v0.4.12 - Arbitrary File Upload author: pussycat0x severity: critical description: | An arbitrar...
AstrBot <= 4.22.1 - Command Injection
AstrBot versions up to and including 4.22.1 contain a command injection vulnerability in the MCP server configuration endpoint. The /api/tools/mcp/add endpoint accepts arbitrary command and args fields that are passed directly to subprocess execution during the connection test, without any...
PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting
A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. The identifier...
D-Link Central WifiManager - Server-Side Request Forgery
D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...
Cobub Razor 0.8.0 - Information Disclosure
Cobub Razor 0.8.0 is susceptible to information disclosure via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php, controllers/postusinglogTest.ph...
GHSA-CR32-G25G-VXJJ vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
GHSA-Q496-Q274-JGH9 vulnerabilities
Vulnerabilities for packages: exim...
cve-2026-59287 - MEDIUM - Spring for GraphQL WebSocket Client Denial of Service
cve-2026-59287 - MEDIUM - Spring for GraphQL WebSocket Client Denial of Service...
cve-2026-59288 - HIGH - Spring for GraphQL Information Exposure in GraphiQL support
cve-2026-59288 - HIGH - Spring for GraphQL Information Exposure in GraphiQL support...
cve-2026-47892 - MEDIUM - Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
cve-2026-47892 - MEDIUM - Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints...
cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages
cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages...
cve-2026-59282 - MEDIUM - Spring Framework Denial of Service via Unbounded List Growth in Data Binding
cve-2026-59282 - MEDIUM - Spring Framework Denial of Service via Unbounded List Growth in Data Binding...
cve-2026-59285 - HIGH - Spring for GraphQL Unsafe Deserialization in pagination support
cve-2026-59285 - HIGH - Spring for GraphQL Unsafe Deserialization in pagination support...
cve-2026-59286 - HIGH - Spring for GraphQL loads Untrusted Resources in GraphiQL support
cve-2026-59286 - HIGH - Spring for GraphQL loads Untrusted Resources in GraphiQL support...
cve-2026-59283 - MEDIUM - Spring Framework Safety Guard Bypass via SpEL Expression Compilation
cve-2026-59283 - MEDIUM - Spring Framework Safety Guard Bypass via SpEL Expression Compilation...
cve-2026-59281 - MEDIUM - Spring Framework Cross-site Scripting via EscapedErrors
cve-2026-59281 - MEDIUM - Spring Framework Cross-site Scripting via EscapedErrors...
MINI-MH3H-3VPQ-MC63
Bulletin has no description...