WordPress Amelia authorization issue vulnerability

WordPress Amelia versions 2.4.10 and earlier have a vulnerability related to authorization. This vulnerability arises due to a lack of authorization, which may lead to the exploitation of incorrectly configured access control levels...

Swann Communications SWIFI-SE2KIC Authorization Issue Vulnerability

Swann Communications SWIFI-SE2KIC 2.0.22 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for key functions, which may allow attackers on the local network to access real-time video streams without being authenticated...

WordPress Link Whisper – Free SQL Injection Vulnerability

WordPress Link Whisper Free 0.9.7 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper handling of special elements in SQL commands, which may lead to blind SQL injections...

KDE Dolphin command injection vulnerability

The KDE Dolphin versions 24.08.0 to 26.08.2 have a command injection vulnerability. This vulnerability stems from improper handling of special folder names in the path placeholder. Attackers can embed double quotes and shell metacharacters in directory names, bypassing the quotes in the...

Shopware cross-site scripting vulnerabilities

Shopware 6.7 version has a cross-site scripting vulnerability. This vulnerability stems from allowing the upload of HTML files controlled by attackers, which are served in the text/html format without valid security headers. This can lead to storage-based cross-site scripting attacks. Attackers c...

Siemens RUGGEDCOM CROSSBOW SQL injection vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a SQL injection vulnerability. This vulnerability arises from improper validation or cleaning of inputs during the processing of notification conditions in the Notification Profile configuration. It may allow authenticated attackers with...

Siemens RUGGEDCOM CROSSBOW processing logic error vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a processing logic vulnerability. This vulnerability stems from the failure to properly execute server-side authorization checks for requests involving special operations. As a result, attackers with extremely low permissions may be able to...

Ikaros Projects Ikaros Authorization Issues Vulnerabilities

Ikaros Projects: Versions 1.2.0 to 1.2.5 have authorization-related vulnerabilities. These vulnerabilities stem from authentication bypasses, allowing attackers with valid passwords to circumvent TOTP verification by reusing login temporary tokens. As a result, they can obtain full account access...

iFLYTEK Skillhub Authorization Issues and Vulnerabilities

iFLYTEK Skillhub versions 0.2.22 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification. Any authenticated user can permanently delete other users’ skills without an ownership check using the DELETE /api/cli/v1/skills/namespace/sl...

Shaarli Community: Shaarli Server Request Forgery Vulnerability

The Shaarli Community version 0.16.9 and earlier contain a server-side request forgeing vulnerability. This vulnerability stems from server-side request forgeing, where private addresses are not checked during the retrieval of bookmark thumbnails. Certified users can manipulate server requests to...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from rendering the signal names from the imported CSV tracking files in the Trace page’s menu, without properly cleaning those names. This can lead to cross-site scripting attacks...

Ivanti Neurons Patch for Intune: Permissions licensing and access control issues

The Ivanti Neurons Patch for Intune has vulnerabilities related to permissions and access control. These vulnerabilities stem from exposed dangerous endpoints, which may allow remote, authenticated attackers to disclose sensitive authentication information...

Sergio Brighenti XBackBone authorization issue vulnerability

Sergio Brighenti’s XBackBone 3.8.2 and earlier versions have an authorization issue. This vulnerability stems from a lack of authorization verification. Certified users can use the POST /upload/id/vanity route to change other users’ upload sharing codes. An attacker could provide consecutive uplo...

KeePassXC resource management error vulnerability

Versions of KeePassXC prior to 2.8.0-beta1 contain a resource management vulnerability. This vulnerability arises from the import of older versions of KeePass1/KDB, which retains the original Entry pointer after deleting metastream entries. When a specially crafted .kdb file contains a...

Adobe Commerce code injection vulnerability

Adobe Commerce has a code injection vulnerability, which stems from improper handling of special elements used in the template engine. This vulnerability may allow arbitrary code to execute, enabling attackers to gain elevated access or control over the victim’s account or session without requiri...

NSPC911 rovr command injection vulnerability

NSPC911 rovr 0.10.3 and earlier versions have a command injection vulnerability. This vulnerability occurs when opening malicious file names on Windows that contain shell metacharacters like "&" via openfile, potentially leading to OS command injection and execution with user privileges...

Mateaix MateCloud authorization issue vulnerability

Mateaix MateCloud 5.0.8 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of an authorization check. Any authenticated user can manage object storage by calling the unprotected/api/v1/admin/storage endpoint in StorageController. Users with low...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the failure to properly validate and clean up the visual marker data in the imported CSV tracking files. This could allow attackers to induce authorized users with the “Read...

WordPress Pay for Payment for WooCommerce authorization issue vulnerability

WordPress Pay for Payment in WooCommerce 3.0.1 and earlier versions has an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

Stone Wu’s authorization issues and vulnerabilities

Stone Wu’s Rongguang versions 1.2.0 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Attackers can obtain the generated results of other users by providing arbitrary task IDs. They can also enumerate the auto-incrementing task...

Kavita: Server-side Request Forgery Vulnerability

In versions Kavita 0.9.0 to 0.9.1.4, there is a vulnerability related to server-side request forgery. This vulnerability arises from server-side request forgery attacks. Authorized attackers can bypass the SSRF blacklist by using DNS rebind or HTTPS redirection. They can submit malicious URLs via...

Microsoft SQL Server resource management error vulnerabilities

Microsoft SQL Server has a resource management vulnerability that arises from insufficient or ineffective restrictions on resource allocation. This vulnerability could allow authorized attackers to cause denial-of-service attacks through the network...

LeapWorx Premium Addons for Elementor – Cross-site Script Vulnerabilities

LeapWorx Premium Addons for Elementor 4.11.110 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper handling of inputs during web page generation, which may lead to storage-type cross-site scripting attacks...

OpenText Endpoint Investigator Authorization Issue Vulnerability

OpenText Endpoint Investigator 26.1 and earlier versions, OpenText Endpoint Forensics & Response 26.1 and earlier versions, OpenText Information Assurance 26.1 and earlier versions, and OpenText Endpoint Security 24.1 and earlier versions have an authorization issue vulnerability. This...

Mistral AI Mistral Vibe processing logic error vulnerability

Mistral AI Mistral Vibe versions prior to 2.25.5 have a processing logic vulnerability. This vulnerability stems from differences in the parsing of escaped newline characters by the extractcommands function in bash.py between tree-sitter-bash and bash. As a result, permission verification is...

Siemens RUGGEDCOM CROSSBOW authorization issue vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have an authorization issue vulnerability. This vulnerability stems from the incorrect execution of authorization checks when disconnecting devices. It may allow authenticated attackers with minimal privileges to disconnect active sessions of othe...

Parse Platform Parse Server Conflict Issues Vulnerability

The Parse Platform, including versions from 5.4.0 to 8.6.96, as well as 9.0.0 to 9.10.2-alpha.5, have a concurrency issue involving shared transaction batch processing states. This issue allows for transaction batch processing requests from one client to interfere with database writes by other...

Xorbits Xoscar deserialization injection vulnerability

Xorbits Xoscar versions 0.11.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from the use of SocketChannel.recv, which passes unvalidated data to cloudpickle.loads. This triggers the pickle reduce utility before message type validation. Unauthorized remote...

Quasar Framework path traversal vulnerability

Quasar Framework versions 2.22.0 to 2.23.3 had a path traversal vulnerability. This vulnerability stemmed from the dir and filename parameters in the SSG page definitions returned by getSsgPages in @quasar/app-vite. These parameters were concatenated with build.distDir without proper validation o...

ProPhoenix Law Records Management Software Authorization Issues Vulnerabilities

ProPhoenix Law Records Management Software 2022.2403.3.101 version has an authorization issue vulnerability. This vulnerability stems from an insecure direct object reference in the usrLogin$hdnPFID parameter, which may allow attackers to access sensitive information through specially crafted HTT...

WordPress WP User Manager Authorization Vulnerability

WordPress WP User Manager versions 2.9.23 and earlier have a vulnerability related to authorization. This vulnerability stems from an absence of proper authorization checks, which may lead to exploitation by improperly configured access control levels...

Perforce Helix Authentication Service input validation vulnerability

The Perforce Helix Authentication Service has security vulnerabilities in versions 2022.1 to 2025.2. These vulnerabilities stem from the installation template retaining the default SCIM bearer token. The installation and configuration scripts fail to replace this token with a random one. Attacker...

Schneider Electric Sage RTU 1410 input validation error vulnerability

The Schneider Electric Sage RTU 1410, Sage RTU 1430, Sage RTU 1450, Sage RTU 2400, Sage RTU 3030 Magnum, and Sage RTU 4400 C3414-500-S02L0 previous versions have a vulnerability related to input validation errors. This vulnerability stems from insufficient data authenticity verification, which ma...

Podman-container-tools: Podman processing logic error vulnerability

The podman-container-tools project has a processing logic error vulnerability in versions of Podman from 4.4.0 to 5.8.8, and from 6.0.0 to 6.1.3. This vulnerability arises because the podman run command treats images with the io.podman.annotations.checkpoint.runtime.name annotation as checkpoints...

Kerwin FastBee authorization issue vulnerability

Kerwin FastBee versions 2.1.0 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the DeviceController. Certified low-privilege users can read and modify devices of other tenants by providing the sequential device ID...

upKeeper Solutions upKeeper Instant Privilege Access: Input validation vulnerability

UpKeeper Solutions’ UpKeeper Instant Privilege Access versions 1.7.1 and earlier have a vulnerability in input validation. This vulnerability stems from improper handling of undefined values, which may lead to privilege escalation...

Swann Communications SWIFI-SE2KIC Authorization Issue Vulnerability

Swann Communications SWIFI-SE2KIC 2.0.22 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for key functions, allowing attackers on the local network to view real-time videos without being authenticated...

oauthlib Cross-Site Scripting Vulnerability

The oauthlib version 0.6.1 up to 4.0.0 had a cross-site scripting vulnerability. This vulnerability stemmed from RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py. When enablejsonp=True, RevocationEndpoint did not validate the callback request parameter and reflected it into...

Joseph Huckaby xyOps Cross-Site Scripting Vulnerability

Joseph Huckaby’s xyOps version 0.9.119 and earlier contain a cross-site scripting vulnerability. This vulnerability arises from the fact that the administrator’s Activity Log includes the item.user.fullname value in the HTML code without proper entity encoding. Additionally, the pixl-server-user...

oauthlib side-channel information leakage vulnerability

oauthlib versions from 3.0.0 to 4.0.0 had a vulnerability related to side-channel information leakage. This vulnerability stemmed from the use of ordinary string comparisons in the PKCE verification process, where codeverifier was compared with the stored challenge. This comparison could...

mher flower Cross-Site Request Forgery Vulnerability

Mher Flower versions prior to 2.2.0 had a cross-site request forgeing vulnerability. This vulnerability stemmed from the Tornado xsrfcookies being disabled and the absence of the SameSite header in OAuth session cookies. This made it vulnerable to cross-site request forgeing attacks. Attackers...

SBABIC SWUpdate encryption vulnerability

The SBABIC SWUpdate 2026.05.1 and earlier versions have a cryptographic vulnerability. This vulnerability stems from improper certificate verification in the crypto/swupdatecmsverifyopenssl.c file. Trusted X.509 certificates that are embedded in CMS SignedData are used to build the certificate...

Ministry of Justice General Directorate of Information Technology UYAP Document Editor Serialization Injection Vulnerability

The Ministry of Justice’s General Directorate of Information Technology has vulnerabilities related to deserialization injection in versions prior to UYAP Document Editor 5.4.20. These vulnerabilities stem from improper handling of deserialized untrusted data, which may lead to object injection...

WordPress Booster Elite for WooCommerce has a vulnerability related to information leakage

WordPress Booster Elite for WooCommerce versions prior to 8.4.0 have a vulnerability related to information leakage. This vulnerability arises from inserting sensitive information into the data sent out, potentially allowing the retrieval of embedded sensitive data...

Open Source Social Network Authorization Issue Vulnerability

The Open Source Social Network has an authorization vulnerability. This vulnerability stems from a lack of authorization checks in the ossnalbumpagehandler module. Without any access validation, unverified attackers can download files through the album/getphoto and album/getcover paths. They can...

Jakub Vrána Adminer code injection vulnerability

Jakub Vrána’s versions prior to 6.1.1 have a code injection vulnerability. This vulnerability arises because authenticated SQLite users can bypass the ATTACH and VACUUM INTO restrictions by adding UTF-8 byte-order marks before the SQL statements. This could allow attackers to attach database file...

JackQ XCMS input validation error vulnerability

The JackQ XCMS 3fab5342cc509945a7ce1b8ec39d19f701b89261 and previous versions have security vulnerabilities. These vulnerabilities stem from improper handling of parameters in the PublicController::sendFindPwdMail function within the Password Recovery Mail Endpoint component. This improper handli...

TRENDnet tew-751dr command injection vulnerability

TRENDnet tew-751dr, TEW-752DRU, and TEW733GR versions 1.03B01 and 1.03B03 have a command injection vulnerability. This vulnerability stems from incorrect parameter handling in the fwrite function of the file pigwidgeon.cgi within the Web Management Backend component. It may lead to OS command...

WordPress Event Post Authorization Issue Vulnerability

WordPress Event post 6.1.1 and earlier versions have a vulnerability related to authorization. This vulnerability stems from bypassing authorization through user-controlled keys. Attackers can exploit improperly configured access control levels, leading to unauthorized access...

Parse Platform Parse Server Authorization Vulnerability

The Parse Platform’s Parse Server versions from 8.2.2 to 8.6.94 and from 9.0.0 to 9.10.1-alpha.14 contain authorization issue vulnerabilities. This vulnerability stems from GraphQL implicit control, which only applies to operations where requests are sent directly. It does not cover operations...