AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.
AFFECTED_PRODUCTS:
Amttgroup Hibos
Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories.
AFFECTED_PRODUCTS:
Oretnom23 Computer Laboratory Management System
A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /delete_members.php.
AFFECTED_PRODUCTS:
Lopalopa Live Membership System
A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter.
AFFECTED_PRODUCTS:
Lopalopa Live Membership System
A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters.
AFFECTED_PRODUCTS:
Lopalopa Live Membership System
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter.
AFFECTED_PRODUCTS:
Phpgurukul Old Age Home Management System
An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
AFFECTED_PRODUCTS:
Lopalopa Live Membership System
A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page "message" parameter.
AFFECTED_PRODUCTS:
Phpgurukul Old Age Home Management System
A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access.
AFFECTED_PRODUCTS:
Jayesh Online Exam System
A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter.
A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields
AFFECTED_PRODUCTS:
Jayesh Online Exam System
A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter.
AFFECTED_PRODUCTS:
Phpgurukul Old Age Home Management System
A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at the...
AFFECTED_PRODUCTS:
Mayurik Best House Rental Management
SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.
AFFECTED_PRODUCTS:
Mayurik Best House Rental Management System
A Reflected Cross Site Scripting (XSS) vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0.
AFFECTED_PRODUCTS:
Mayurik Best House Rental Management System
A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via "House_no" and "Description" parameter fields.
AFFECTED_PRODUCTS:
Mayurik Best House Rental Management System
Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."
AFFECTED_PRODUCTS:
Rems Daily Calories Monitoring Tool
An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerability allows an anonymous attacker, without an account in the application, to import their own database file, leading to the deletion or spoofing of th...
AFFECTED_PRODUCTS:
Mintplexlabs Anythingllm
Improper check or handling of exceptional conditions vulnerability
affecting Vonets
industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated
remote attacker to cause a denial of service. A specially-crafted
HTTP request to pre...
AFFECTED_PRODUCTS:
Vonets Var1200 H Firmware,
Vonets Var1200 L Firmware,
Vonets Var600 H Firmware
... (+11)
Stack-based buffer overflow vulnerabilities affecting Vonets
industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior, enable an unauthenticated remote attacker to
execute arbitrary code.
AFFECTED_PRODUCTS:
Vonets Var1200 H Firmware,
Vonets Var1200 L Firmware,
Vonets Var600 H Firmware
... (+11)
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
AFFECTED_PRODUCTS:
Axios Axios
izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Edge Chromium
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
AFFECTED_PRODUCTS:
Microsoft Edge Chromium
Microsoft Office Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Long Term Servicing Channel
A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
AFFECTED_PRODUCTS:
Vercot Serva
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs.
AFFECTED_PRODUCTS:
Elastic Elastic Agent
Multiple OS command injection vulnerabilities affecting Vonets
industrial wifi bridge relays and wifi bridge repeaters, software
versions 3.3.23.6.9 and prior, enable an authenticated remote attacker
to execute arbitrary OS commands via various endpoint parameters.
AFFECTED_PRODUCTS:
Vonets Var1200 H Firmware,
Vonets Var1200 L Firmware,
Vonets Var600 H Firmware
... (+11)
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls. This can cause a denial-of-service (DoS) attack or degrade the performance of the affected syst...
AFFECTED_PRODUCTS:
Zabbix Zabbix
Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
... (+1)
Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors.
We have already fixed the vulnerability in the following versions:
QTS 5.1.8....
File read and write vulnerability in Apache DolphinScheduler , authenticated users can illegally access additional resource files.
This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2.
Users are recommended to upgrade to version 3.2.2, which fixes the issue.
AFFECTED_PRODUCTS:
Apache Dolphinscheduler
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.
AFFECTED_PRODUCTS:
Apache Dolphinscheduler
Improper access control vulnerability affecting Vonets
industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9
and prior, enables an unauthenticated remote attacker to bypass
authentication and factory reset the device via unprotected goform
endpoints.
AFFECTED_PRODUCTS:
Vonets Var1200 H Firmware,
Vonets Var1200 L Firmware,
Vonets Var600 H Firmware
... (+11)
Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file for Linux, it is possible to set another file, e.g. log file and zabbix_server will try to communicate with it as modem. As a result, log file will be broken with AT commands and sma...
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
... (+1)
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
... (+1)
A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
... (+1)
An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix
User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
... (+1)
Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: 4.x and 5.x
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
AFFECTED_PRODUCTS:
Enphase Iq Gateway Firmware
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
AFFECTED_PRODUCTS:
Enphase Iq Gateway Firmware
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is current...
AFFECTED_PRODUCTS:
Enphase Iq Gateway Firmware
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in Enphase IQ Gateway (formerly known as Envoy) allows File Manipulation. The endpoint requires authentication.This issue affects Envoy: from 4.x to 8.0 and < 8.2.4225.
AFFECTED_PRODUCTS:
Enphase Iq Gateway Firmware
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
AFFECTED_PRODUCTS:
Enphase Iq Gateway Firmware
NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.
AFFECTED_PRODUCTS:
NVIDIA Cv Cuda,
NVIDIA Cv Cuda,
NVIDIA Cv Cuda
... (+8)