CVE-2026-53555

SQLBot , an intelligent Text-to-SQL system based on large language models and RAG, is vulnerable to a stored cross-site scripting (XSS) flaw prior to version 1.9.0 . An authenticated user can upload an image/svg+xml file as the assistant UI logo via PATCH /api/v1/system/assistant/ui. SQLBot store...

CVE-2026-53555: Improper Neutralization of Input During Web Page Generation

SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...

PT-2026-95137

Name of the Vulnerable Software and Affected Versions SQLBot versions prior to 1.9.0 Description An authenticated uploader can upload an image/svg+xml assistant UI logo via the 'PATCH /api/v1/system/assistant/ui' endpoint. The system stores the SVG without sanitizing or validating embedded active...

CVE-2024-12880

A vulnerability in infiniflow/ragflow version RAGFlow-0.13.0 allows for partial account takeover via insecure data querying. The issue arises from the way tenant IDs are handled in the application. If a user has access to multiple tenants, they can manipulate their tenant access to query and acce...

Command injection

ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...

CVE-2023-43322: Improper Neutralization of Special Elements used in a Command

ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...

SourceCodester Storage Unit Rental Management System SQL Injection Vulnerability

SourceCodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. sourceCodester Storage Unit Rental Management A SQL injection vulnerability exists in the v1 version of the System. The...

CVE-2019-19995

A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user...

PT-2019-16037

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.8.7 Description An issue allows remote attackers to cause a denial of service, resulting in a device reboot. This can be achieved by sending a malformed login request, specifically by misparsing the " string in JS...

PT-2019-16036

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.8.7 Description A CSRF issue was discovered, allowing for complete control of the router. The issue is demonstrated by the "/v1/system/user" API endpoint. Recommendations For Intelbras IWR 3000N version 1.8.7, as ...

CVE-2019-19996: Undefined Security Weakness

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...

CVE-2019-19995: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user...

CVE-2019-19007: Exposure of Sensitive Information to an Unauthorized Actor

Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600...

PT-2019-15750

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.8.7 Description The issue allows disclosure of the administrator login name and password due to mishandling of the "v1/system/user" API endpoint. Recommendations For Intelbras IWR 3000N version 1.8.7, consider...

CVE-2019-17600

Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled...

PT-2019-15221

Name of the Vulnerable Software and Affected Versions Intelbras IWR 1000N version 1.6.4 Description The issue allows disclosure of the administrator login name and password due to mishandling of the "v1/system/user" API endpoint. Recommendations For Intelbras IWR 1000N version 1.6.4, consider...

CVE-2019-17600: Cross-Site Request Forgery (CSRF)

Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled...

CVE-2019-11415: Undefined Security Weakness

An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...

PT-2019-12301

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.5.0 Description A CSRF issue allows for complete control of the router. The issue can be demonstrated by accessing the "v1/system/user" API endpoint. Recommendations For Intelbras IWR 3000N version 1.5.0, as a...

PT-2019-12300

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.5.0 Description An issue allows remote attackers to cause a denial of service, resulting in a device reboot. This can be achieved by sending a malformed login request, specifically by misparsing the " string to th...