Siemens RUGGEDCOM CROSSBOW authorization issue vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have an authorization issue vulnerability. This vulnerability stems from improper access restrictions on database queries used for subnet management. It may allow authenticated attackers to read, modify, or delete subnet configurations, resulting ...

NSPC911 rovr command injection vulnerability

NSPC911 rovr 0.10.3 and earlier versions have a command injection vulnerability. This vulnerability occurs when opening malicious file names on Windows that contain shell metacharacters like "&" via openfile, potentially leading to OS command injection and execution with user privileges...

The-40-Thieves obsidian-tc backend link vulnerability

The The-40-Thieves obsidian-tc versions before 1.3.1 have a security vulnerability. This vulnerability stems from reading the access control list, where the check for lexical paths includes checking resolved paths as well. This allows symbolic links within libraries that are allowed by wildcarded...

WordPress Pay for Payment for WooCommerce authorization issue vulnerability

WordPress Pay for Payment in WooCommerce 3.0.1 and earlier versions has an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

KeePassXC resource management error vulnerability

Versions of KeePassXC prior to 2.8.0-beta1 contain a resource management vulnerability. This vulnerability arises from the import of older versions of KeePass1/KDB, which retains the original Entry pointer after deleting metastream entries. When a specially crafted .kdb file contains a...

Ikaros Projects Ikaros Authorization Issues Vulnerabilities

Ikaros Projects: Versions 1.2.0 to 1.2.5 have authorization-related vulnerabilities. These vulnerabilities stem from authentication bypasses, allowing attackers with valid passwords to circumvent TOTP verification by reusing login temporary tokens. As a result, they can obtain full account access...

Natural Language Toolkit path traversal vulnerability

NLTK versions 3.10.3 and earlier have a path traversal vulnerability. This vulnerability arises from WekaClassifier not verifying the model path. Attackers can bypass the nltk.pathsec restriction by controlling the modelfilename or model parameter, allowing for path traversal. This may result in...

The-40-Thieves obsidian-tc information leakage vulnerability

The The-40-Thieves obsidian-tc version prior to 1.3.1 has security vulnerabilities. These vulnerabilities stem from the bridge tool not applying a read access control list to each returned field consistently. The tasksfilter tool exposes the group count for notes that are denied access. The...

NETGEAR CBR40 has a vulnerability related to input validation errors.

NETGEAR CBR40, R7000 v1.0.11.130 earlier versions, R7000P V1.3.3.152 earlier versions, and RAX40 V1.0.3.64 earlier versions have a vulnerability related to input validation errors. This vulnerability stems from insufficient input validation in the Time Server NTP settings. It may allow attackers...

WordPress FluentBoards authorization issue vulnerability

WordPress FluentBoards versions 2.1.0 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

Jumpserver code injection vulnerability

Versions of Jumpserver 4.10.17-lts and earlier contain a code injection vulnerability. This vulnerability stems from automated rendering based on Ansible, which allows attackers to evaluate template expressions under their control. Attackers with permission to create or execute affected automated...

Mateaix MateCloud authorization issue vulnerability

Mateaix MateCloud 5.0.8 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of an authorization check. Any authenticated user can manage object storage by calling the unprotected/api/v1/admin/storage endpoint in StorageController. Users with low...

OpenCATS arbitrary file upload vulnerability

Versions of OpenCATS prior to 0.10.0 have a vulnerability related to arbitrary file uploads. This vulnerability stems from the Import module, specifically modules/import/ImportUI.php. This file retains the original name of the uploaded file and places it in a temporary directory accessible to the...

LeapWorx Premium Addons for Elementor: Authorization Issues and Vulnerabilities

LeapWorx Premium Addons for Elementor 4.11.110 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization, which may lead to exploitation by incorrectly configured access control levels...

Siemens RUGGEDCOM CROSSBOW SQL injection vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a SQL injection vulnerability. This vulnerability stems from improper validation or cleaning of the filename of the uploaded firmware. It may allow authenticated attackers with specific privileges to execute arbitrary SQL commands on the...

LeapWorx Premium Addons for Elementor – Cross-site Script Vulnerabilities

LeapWorx Premium Addons for Elementor 4.11.110 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper handling of inputs during web page generation, which may lead to storage-type cross-site scripting attacks...

Joseph Huckaby xyOps Cross-Site Scripting Vulnerability

Joseph Huckaby’s xyOps version 0.9.119 and earlier contain a cross-site scripting vulnerability. This vulnerability arises from the fact that the administrator’s Activity Log includes the item.user.fullname value in the HTML code without proper entity encoding. Additionally, the pixl-server-user...

WordPress PowerPack Addons for Elementor: Cross-site Script Vulnerabilities

WordPress PowerPack Addons for Elementor 3.1.0 and earlier versions contain a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the failure to properly validate and clean up the visual marker data in the imported CSV tracking files. This could allow attackers to induce authorized users with the “Read...

Siemens RUGGEDCOM CROSSBOW processing logic error vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a processing logic vulnerability. This vulnerability stems from the failure to properly execute server-side authorization checks for requests involving special operations. As a result, attackers with extremely low permissions may be able to...

OpenText Endpoint Investigator Authorization Issue Vulnerability

OpenText Endpoint Investigator 26.1 and earlier versions, OpenText Endpoint Forensics & Response 26.1 and earlier versions, OpenText Information Assurance 26.1 and earlier versions, and OpenText Endpoint Security 24.1 and earlier versions have an authorization issue vulnerability. This...

iFLYTEK Skillhub Authorization Issues and Vulnerabilities

iFLYTEK Skillhub versions 0.2.22 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification. Any authenticated user can permanently delete other users’ skills without an ownership check using the DELETE /api/cli/v1/skills/namespace/sl...

MikroTik RouterOS Authorization Issues Vulnerability

MikroTik RouterOS versions 7.0.0 to 7.24.5 have a vulnerability related to authorization. This vulnerability stems from improper authorization checks in the WinBox authentication process. Remotely authenticated users with low privileges can obtain full management access by specifying a...

mher flower Cross-Site Request Forgery Vulnerability

Mher Flower versions prior to 2.2.0 had a cross-site request forgeing vulnerability. This vulnerability stemmed from the Tornado xsrfcookies being disabled and the absence of the SameSite header in OAuth session cookies. This made it vulnerable to cross-site request forgeing attacks. Attackers...

Jakub Vrána Adminer code injection vulnerability

Jakub Vrána’s versions prior to 6.1.1 have a code injection vulnerability. This vulnerability arises because authenticated SQLite users can bypass the ATTACH and VACUUM INTO restrictions by adding UTF-8 byte-order marks before the SQL statements. This could allow attackers to attach database file...

Parse Platform Parse Server Authorization Vulnerability

The Parse Platform’s Parse Server versions from 8.2.2 to 8.6.94 and from 9.0.0 to 9.10.1-alpha.14 contain authorization issue vulnerabilities. This vulnerability stems from GraphQL implicit control, which only applies to operations where requests are sent directly. It does not cover operations...

Parse Platform Parse Server Improper Exception Handling Vulnerability

The Parse Platform and Parse Server versions prior to 8.6.95, as well as versions from 9.0.0 to 9.10.2-alpha.3, have a vulnerability related to improper exception handling. This vulnerability arises from the lack of parsing of URL references in files when objects are passed to Cloud Code triggers...

Parse Platform Parse Server Authorization Vulnerability

The Parse Platform, versions prior to 8.6.93 and 9.0.0 up to 9.10.1-alpha.13, have an authorization issue vulnerability. This vulnerability stems from the lack of enforcing the identity scope’s protectedFields during count queries using the $relatedTo operator. As a result, the size of the...

Karuppiah Natarajan – Easy-PDF-Merge command injection vulnerability

Karuppiah Natarajan’s easy-pdf-merge tool versions from 0.1.0 to 0.2.6 and earlier contain a command injection vulnerability. This vulnerability stems from an OS command injection issue. Attackers can inject shell metacharacters into the source path, target path, or maxHeap option. By passing fil...

Hyper-MCP encryption issue vulnerabilities

Hyper-MCP versions 0.8.3 and earlier have an encryption-related vulnerability. This vulnerability stems from the fact that cosignverifyargs accepts any signer identity and OIDC issuer by default. Improper signature verification may allow attackers to load malicious WebAssembly plugins, which can...

JupyterHub processing logic vulnerability

JupyterHub 6.0.1 and earlier versions have a processing logic vulnerability caused by identifier conflicts. Users who have been authenticated can override another user’s named server OAuth client by using hyphenated usernames. For example, a user with the username “alice-prod” can override the...

Hatchet Resource Management Error Vulnerability

Hatchet versions 0.110.5 and earlier have a resource management vulnerability. This vulnerability stems from unlimited resource allocation. Unauthenticated attackers can send arbitrary or concurrent request bodies via the SNS ingestion endpoint to POST /api/v1/sns/tenant/event. The SnsUpdate...

Konstanty Bialkowski libmodplug resource management error vulnerability

The Konstanty Bialkowski libmodplug versions 0.8.9.0 and 0.8.9.1 have a resource management vulnerability. This vulnerability arises from manipulation of the abcaddgchord function in the file src/loadabc.cpp within the ABC Music Format Parser component, resulting in excessive resource consumption...

Studio Saelix Sencho authorization issue vulnerability

The Studio Saelix sencho 0.94.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the improper handling of the X-Forwarded-For parameter in the Login Endpoint component’s file/api/auth/login, resulting in improper authentication. A remote attacker could...

Plastic Labs’ CEO authorization issue vulnerability

Plastic Labs versions 3.3.0 and earlier have an authorization issue. This vulnerability stems from improper authorization handling; the getorcreateworkspace function only checks the workspace declaration. As a result, holders of API keys with per-app or session scope can access workspace data...

WordPress MultiVendorX Authorization Issues Vulnerability

WordPress MultiVendorX 5.0.19 and earlier versions have a vulnerability related to authorization. This vulnerability arises from improper authorization settings. Attackers with the storeowner role can send POST requests via the settings REST endpoint, limited only by the editstores permission,...

Highwarden Super Store Finder has a vulnerability in input validation.

Highwarden Super Store Finder versions 3.8 and earlier have a security vulnerability. This vulnerability stems from incorrect handling of the parameters lat/lng in the file /products/superstorefinder/index.php, which may lead to SQL injection attacks...

Everyone’s AI MoAI-ADK backend link vulnerability

The All-Users AI MoAI-ADK 3.1.2 and earlier versions have a post-link vulnerability. This vulnerability stems from improper link resolution in the moai init template deployer. Attackers can use symbolic links to the.moai-tmp temporary path to overwrite files outside of the project, causing...

OpenDocMan resource management error vulnerability

Versions of OpenDocMan from 2.4.0 to 2.10.0 have a resource management vulnerability. This vulnerability stems from a decompression bomb issue. Certified users can exploit this vulnerability by uploading specially crafted ODT, DOCX, or XLSX files. The XML entries in these files will be decompress...

Helicone server request forgery vulnerability

Helicone v2025.08.21-1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the Jawn webhook sender’s server-side request forgeing feature, which allows authenticated organizational users to access internal services by accessing hostnames that poin...

Lulu AniWorld Downloader Authorization Issues Vulnerability

Lulu AniWorld Downloader versions prior to 5.3.0 have a vulnerability related to authorization. This vulnerability stems from the improper handling of authentication attempts by the /login POST handler in the WebUI. As a result, unauthorized attackers can enumerate usernames through the verifyuse...

tielabs jannah cross-site scripting vulnerabilities

Tielabs Jannah versions 7.6.5 and earlier have a cross-site scripting vulnerability. This vulnerability allows unauthenticated attackers to be exploited by cross-site scripting attacks...

WordPress Academy LMS has vulnerabilities related to permissions and access control systems.

WordPress Academy LMS versions 4.0.3 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities arise from the addchild function, which calls addrole'academystudent' on existing accounts before Store::link verifies the guardianship relationship...

WordPress PayPal deserialization injection vulnerability

WordPress Payee versions 4.8.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from unvalidated PHP object injections, which may lead to remote code execution...

Johann Heyne Table Field Add-on for ACF and SCF: Cross-site scripting vulnerabilities

The Johann Heyne Table Field Add-on for ACF and SCF versions 1.3.35 and earlier contains a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. Identified attackers with contributor-level or higher permissions can inject arbitrary...

Themegoods Grand News Authorization Issue Vulnerability

Themegoods Grand News versions 3.4 and earlier have a vulnerability related to authorization issues. This vulnerability arises because unverified attackers can exploit improper access control mechanisms, allowing unauthorized modifications to data...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory versions 2.8.188 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping of the email parameter Contact Email custom field’s htmlvarname. It may lead to storage-based cross-site scripting attacks...

Themegoods DK authorization issue vulnerability

Themegoods DK 3.2.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from improper access control without authentication, which may allow attackers to modify data without proper authorization...

WordPress GeoDirectory code injection vulnerability

WordPress GeoDirectory 2.8.187 and earlier versions have a code injection vulnerability. This vulnerability stems from the designtype parameter, which involves local file inclusion. It may allow unauthenticated attackers to include and execute any.php file on the server, thereby bypassing access...

WordPress FunnelKit cross-site scripting vulnerability

WordPress FunnelKit 3.16.0.5 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. It is exploited through the shippingfirstname parameter, allowing for storage-based cross-site scripting attacks. This...