ThimPress LearnPress licensing issue vulnerabilities

ThimPress and LearnPress versions 4.4.10 and earlier have an authorization-related vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

CognicellAI Cognition configuration error vulnerability

CognicellAI Cognition versions prior to 0.13.0 have a security vulnerability. This vulnerability stems from the default setting of having the agent sandbox backend executed locally, and the REST/SSE API not enabling authentication. Attackers can create sessions using the POST /sessions endpoint...

Camunda 7 command injection vulnerability

Camunda 7 versions from 7.24.0 to 7.24.14, as well as versions from 7.23.0 to 7.23.17, have security vulnerabilities. These vulnerabilities stem from a flaw in AdhocQueryValidator.validate, which fails to check the subquery expression mappings exposed in the orQueries field of TaskQueryDto. This...

IBM MQ Operator race condition vulnerability

IBM MQ Operator 2.0.29 and earlier versions of 2.0.x, 3.2.29 and earlier versions of 3.2.x, versions 3.3.0 to 3.4.0, 3.4.1, 3.5.0, 3.5.1 to 3.5.3, 3.6.0 to 3.6.4, 3.7.0 to 3.7.2, 3.8.0, 3.8.1, 3.9.0 to 3.9.2, and 4.0.0 to 4.0.4 have a race condition vulnerability. This vulnerability stems from...

Progressive Robot hMailServer: Permissions, licensing, and access control issues

The Progressive Robot hMailServer version 6.0.0 to 6.3.6 has vulnerabilities related to permission and access control. These vulnerabilities stem from improper default permission settings of the Windows installer. The installer accepts files from any path, and the program folder and Bin directory...

MLJAR mercury: Vulnerability due to improper output processing

The MLJAR Mercury version 3.0.0 to 3.2.11 had a security vulnerability. This vulnerability stemmed from mr.Markdown not cleaning up the original HTML when converting it into HTML, and then assigning that HTML to the ipyWidgets.HTML receiver. This could lead to cross-site scripting attacks. Active...

Nexcess Event Tickets Authorization Vulnerability

Nexcess Event Tickets versions 5.30.1 and earlier have an authorization issue vulnerability. This vulnerability stems from unauthorized authorization through user-controlled keys. Improper configuration of access control levels may lead to exploitation of these vulnerabilities...

IBM MQ Operator numerical error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...

IBM MQ Operator resource management error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 contain a resource management...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file Officers/searchOff.php, specifically the parameter Search, which may lead to SQL injection attacks...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

Apache Camel race condition vulnerabilities

In Apache Camel versions 4.12.0 to 4.18.5 and 4.19.0 to 4.22.1, there is a race condition vulnerability. This issue arises due to the shared java.security.Signature instance in the PQC component being accessed asynchronously. Since this instance is not thread-safe, concurrent interactions between...

WSO2 API Manager authorization issue vulnerability

WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....

Itsourcecode Online Cake Ordering System: Input validation error vulnerability

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...

Fenrir Sleipnir Mobile for Android: Processing logic error vulnerability

Fenrir Sleipnir Mobile for Android versions prior to 3.9.0 has a processing logic vulnerability. This vulnerability stems from an UI deception issue. A remote attacker can enter full-screen mode through the Fullscreen API without displaying any persistent notifications or indications of trusted...

Priyanshu Raj cli-bridge post-link vulnerability

Priyanshu Raj’s cli-bridge versions prior to 0.0.2 have a postfix link vulnerability. This vulnerability arises when fs.realpathSync throws an ENOENT error when there is no target available. In such cases, symbolic links pointing outside the working directory’s root directory bypass the...

IBM Concert information leakage vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability arises from the fact that web page caches are stored locally, making them potentially readable by other users on the system, thereby leading to information leakage...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer error vulnerability. This vulnerability stems from RastTopNM’s handling of Sun raster files with short color mappings, where there is a risk of heap out-of-bound reading. An attacker can create color mapping raster files whose pixel bytes exceed...

Apache Camel permission and access control vulnerabilities

Versions of Apache Camel from 4.12.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain vulnerabilities related to permission management and access control. These vulnerabilities arise from the PQC component writing key material to the disk with process default umask permissions, without restricting...

Diem project: Diem input validation error vulnerability

The Diem project has a vulnerability in input validation. This vulnerability stems from improper handling of the Referer parameter in the Sign-In component in the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php. It may lead to redirection, and attackers could...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper handling of HTTP header name case sensitivity. The protection mechanism that prevents request headers from being reflected in...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

Diem project Diem authorization issue vulnerability

The Diem project has a security vulnerability. This vulnerability stems from improper handling of unknown functions in the dmCorePlugin/lib/vendor/gapi/gapi.class.php file, which is part of the Google Analytics Client component. This could lead to improper certificate verification, allowing remot...

eremef.xyz Bandcamp Experimental Transport Assistant Authorization Issues Vulnerability

The eremef.xyz Bandcamp Experimental Transport Assistant versions 1.8.33-beta and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations with the parameter remoteEnabled by unknown functions in the Database.ts file within the Remote Control Server...

IBM Cloud Pak System Encryption Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have encryption-related vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability arises because web applications do not properly clean or encode user-provided inputs before storing and rendering them. As a result, authenticated attackers can input malicious JavaScri...

FossBilling authorization issue vulnerability

FossBilling versions from 0.8.4 to 0.8.6 had an authorization issue. This vulnerability stemmed from the use of hasManagePermission, which incorrectly allowed access to inactive non-core modules. This caused the system to bypass module access checks and manageSettings inspections, allowing...

IBM Concert cross-site scripting vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting issues, allowing unverified attackers to inject arbitrary JavaScript code into the Web UI, thereby altering intended functions and potentially leading to the exposur...

Google Agent Mesh configuration error vulnerability

The Google Agent Mesh version 0.1.0-alpha.1 to 0.1.0-alpha.8 contains security vulnerabilities. These vulnerabilities stem from deficiencies in authorization and insecure default configurations of the MCP proxy in mcpservice.go, within HandleStreamPassThrough and the OIDC registration process in...

LlamaFamily: Llama Chinese Community: Input validation error vulnerability

The LlamaFamily Llama Chinese community has a security vulnerability. This vulnerability stems from an error in the function getclassfromdynamicmodule in the Adapter Config component’s examples/chatgradionomerge.py file, where the parameter basemodelnameorpath is handled incorrectly, potentially...

Alex MeTube Server Request Forgery Vulnerability

Alex MeTube’s versions as of September 28, 2026, have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the DownloadQueue.writefeedmetadatasync function in the Feed-metadata Thumbnail Fetch Handler component. It may lead to server-side request forger...

Donetick: Permissions and access control issues

Donetick versions 0.1.82 and earlier have a security vulnerability. This vulnerability stems from the CanDeleteHistory function in the History Deletion Handler component’s file internal/chore/model/model.go. The function improperly handles the AssignedTo parameter, leading to improper authorizati...

IBM Concert: Vulnerability in output processing

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to improper output processing. This vulnerability arises from the improper handling of special elements when writing to log files, which may allow unauthorized users to inject data into log messages...

Camunda 7 Authorization Vulnerability

Versions of Camunda 7 prior to 7.24.14, including 7.24.0 and 7.23.0 before 7.23.17, have an authorization issue. This issue stems from a lack of authorization checks in the engine-rest task sub-resources. Single read and delete endpoints do not perform the necessary authorization filtering checks...

Koozali SME Server has a vulnerability related to input validation errors.

The Koozali SME Server version 11.0rc1-215 has a security vulnerability. This vulnerability stems from the domain creation feature, which allows high-privilege attackers to inject reserved Apache configuration directives, damaging the httpd.conf file. As a result, Apache cannot be started after t...

Satya-Vinay Events-Management-System Authorization Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from manipulating unknown parts of the project.sql file, which may allow files or directories to be accessed. Remote attackers can exploit this vulnerability...

PT Norther Lights Production Map – SVG file upload vulnerability

PT Norther Lights Production Map: Versions prior to SVG 8.16.1 have an arbitrary file upload vulnerability. This vulnerability stems from allowing the upload of dangerous types of files, which may lead to the uploading of a Web Shell to the web server...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM version 2.2.7 and earlier have a security vulnerability. This vulnerability stems from improper object-level authorization in the EmailController’s write operations. It allows authorized users with limited permissions to manipulate other users’ emails by providing digital...

Google Agent Mesh Authorization Vulnerability

The Google Agent Mesh version 0.1.0-alpha.1 to 0.1.0-alpha.2 contains an authorization vulnerability. This vulnerability stems from the lack of key functionality for authentication and authorization in the/libp2p-http entry server. Biscuit tokens or grid registrations are not verified, resulting ...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.19 and earlier have a resource management vulnerability. This vulnerability stems from improper handling of the Scheduler.expertdistributionhandle function in the Expert-Distribution Recording Endpoint component. It may lead to a denial-of-service attack...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an information leakage vulnerability. This vulnerability stems from the fact that the OAuth2 client token in the HTTP component is cached globally on the JVM, and fields such as the request scope, resource indicator,...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to XPathBuilder bypassing the default document type when documentType is set to InputSource. As a result, XML external entity reference...

sgl-project SGLang Server Request Forgery Vulnerability

The sgl-project SGLang version 0.5.22 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the bootstraphost and bootstrapport fields in the client context under the prefill/decode separation mode. As a result, server-side request...

.NET Platform AdventureWorks Authorization Issue Vulnerability

The .NET Platform AdventureWorks has an authorization issue vulnerability. This vulnerability stems from an improper authentication mechanism in the AddApplicationServices function within the Catalog API component’s file src/Catalog.API/Extensions/Extensions.cs. This could allow remote attackers ...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the Thrift component deserializes incoming data into the shared defaultInstance rather than into a new copy, resulting in data leakag...

Mindee docTR deserialization injection vulnerability

Mindee docTR 1.1.0 and earlier versions have a deserialization injection vulnerability. This vulnerability stems from the use of torch.load to load checkpoints in loadpretrainedparams, where weightsonly=True is not set. This allows attackers to inject malicious pickle payloads by controlling loca...

SourceCodester Inventory System Cross-site Scripting Vulnerabilities

The SourceCodester Inventory System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter HsnCode in the file/api/transactionshandler.php?action=savesale, which may lead to remote cross-site scripting attacks...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...

FossBilling information leakage vulnerability

FossBilling versions from 0.1.0 to 0.8.7 have security vulnerabilities. This vulnerability stems from the unauthenticated POST /api/guest/client/create endpoint returning unmasked error messages for existing email addresses. This could allow attackers to submit a target email address and compare...

YITH WooCommerce Product Bundles Authorization Issues Vulnerability

YITH WooCommerce Product Bundles 2.29.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from the lack of an authorization check, which may allow attackers to exploit incorrectly configured access control levels...