CVE Catalog

A critical SQL injection vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the file fladmin/cat_edit.php, where the id parameter is not properly sanitized, allowing attackers to inject malicious SQL commands. This vulnerability can be exploited remotely.

A critical SQL injection vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the login administration file, specifically '/fladmin/login.php', where the 'username' parameter can be manipulated to execute malicious SQL commands. This vulnerability can be exploited remotely, without any authentication requirements.

A vulnerability exists in the HI-SCAN 6040i Hitrax model HX-03-19-I due to hardcoded credentials that allow unauthorized access to vendor support and service functions.

A vulnerability exists in the AsDB service of the Smiths Detection HI-SCAN 6040i Hitrax model HX-03-19-I. This issue allows attackers to enumerate user credentials by sending crafted requests over the GIOP protocol.

A vulnerability exists in the USB Autorun feature of Smiths Detection HI-SCAN 6040i Hitrax models through HX-03-19-I. This issue allows attackers to execute arbitrary code by uploading a malicious script from a USB device.

A vulnerability exists in HI-SCAN 6040i Hitrax HX-03-19-I due to insecure default configurations, allowing authenticated attackers with low-level privileges to escalate their privileges to root level.

A vulnerability exists in the HI-SCAN 6040i Hitrax model HX-03-19-I, where user credentials are transmitted in cleartext via the GIOP protocol. This exposure could allow attackers to intercept and access sensitive information through a man-in-the-middle attack.

A critical vulnerability exists in the SAML Single Sign-On (SSO) implementation of Sentry, versions 21.12.0 through 24.12.1. This vulnerability allows an attacker to take over any user account by exploiting a malicious SAML Identity Provider and targeting another organization on the same Sentry instance. The attack requires knowledge of the victim's email address.

A cross-site scripting (XSS) vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the file /fladmin/sysconfig_doedit.php, where user input is not properly sanitized before being output, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely and requires user interaction.

A critical vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises from improper authorization handling in the backend file '/fladmin/sysconfig_doedit.php', allowing attackers to modify backend data without authorization. This vulnerability can be exploited remotely.

A cross-site scripting (XSS) vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the file fladmin/jump.php, where the message and error parameters are not properly sanitized. This lack of input validation allows attackers to inject malicious scripts that could be executed in the context of the user's browser, potentially leading to cookie theft or other malicious actions.

A critical vulnerability exists in Fanli2012 native-php-cms version 1.0, specifically within the file '/fladmin/user_recoverpwd.php'. This vulnerability allows for the use of default credentials, enabling remote password resets for the administrator account. The issue arises from a logic flaw that permits the manipulation of password recovery processes, effectively bypassing authentication requirements.

A vulnerability in Apple Music for Windows was addressed by improving input sanitization. This issue, present in version 1.5.0.152, could allow processing of maliciously crafted web content to disclose internal states of the application.

A path handling vulnerability has been identified in the Calendar app on watchOS 11.1, visionOS 2.1, iOS 18.1, and iPadOS 18.1. This vulnerability allows an attacker with access to calendar data to also read reminders. The issue was addressed with improved logic.

A logic issue in the Siri component of Apple iOS and iPadOS has been identified, which could allow an attacker with physical access to a locked device to access contacts from the lock screen. This vulnerability affects iOS 17.7.1, iPadOS 17.7.1, and prior to iOS 18.1 and iPadOS 18.1. The issue has been addressed with improved checks.

A vulnerability exists in iOS and iPadOS that allows an attacker with physical access to the device to disable Stolen Device Protection. This issue is related to the Face ID feature and was addressed in the latest version of both operating systems.

A memory initialization vulnerability in the GPU drivers of Apple products can cause unexpected system termination. This issue affects several different versions and was addressed with improved memory handling. The vulnerability is present in iOS 18.1, iPadOS 18.1, iOS 17.7.1, iPadOS 17.7.1, macOS Sonoma 14.7.1, and macOS Ventura 13.7.1.

A vulnerability exists in iOS devices that allows an attacker with physical access to view notification contents from the Lock Screen. This issue is present in iOS 17.5 and iPadOS 17.5.

A vulnerability in the AVEVideoEncoder component of various Apple operating systems, including macOS Sonoma 14.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, watchOS 10.5, tvOS 17.5, and visionOS 1.2, allows an application to execute arbitrary code with kernel privileges. This issue stems from inadequate memory handling, which could be exploited to gain elevated privileges.

A vulnerability in WebKit, the engine powering Safari and other applications, allows for processing maliciously crafted files, which can lead to unexpected app termination or arbitrary code execution. This issue affects multiple Apple platforms, including macOS Sonoma 14.5, iOS 17.5, iPadOS 17.5, watchOS 10.5, tvOS 17.5, and visionOS 1.2. The vulnerability arises from an out-of-bounds write issue that was addressed with improved input validation and memory handling.

A man-in-the-middle vulnerability has been identified in the native clients for Amazon WorkSpaces, specifically when using the PCoIP protocol. This issue allows an attacker to intercept and access remote WorkSpaces sessions. The vulnerability affects the Windows, macOS, Linux, and Android clients of Amazon WorkSpaces.

A man-in-the-middle vulnerability has been identified in the native clients for Amazon WorkSpaces (when using the Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV. This vulnerability allows an attacker to access remote sessions by intercepting the communication between the client and the server. The issue affects specific versions of these clients, as detailed below.

An information disclosure vulnerability has been identified in the D-Link DIR-878 router, specifically in version 1.03. The issue arises from an unknown function in the file '/dllog.cgi', within the HTTP POST request handler component. This vulnerability allows sensitive information to be exposed to unauthorized actors, potentially impacting confidentiality. The vulnerability can be exploited remotely, without any authentication requirements.

A vulnerability in GitHub Desktop versions 3.3.15 and through 3.4.12 allows for unauthorized access to user credentials. This issue arises when an attacker convinces a user to clone a repository, either directly or through a submodule, using a maliciously crafted remote URL. GitHub Desktop relies on Git for network operations like cloning and fetching. When Git encounters a remote that requires authentication, it requests credentials from GitHub Desktop using the git-credential protocol. The vulnerability lies in the misinterpretation of the credential request, causing GitHub Desktop to send credentials for a different host than the one currently being accessed by Git. As a result, sensitive information such as GitHub usernames, OAuth tokens, or credentials for other Git remote hosts stored in GitHub Desktop could be improperly transmitted to an unrelated host.

A 'Resource Leak' vulnerability has been identified in CrafterCMS Engine versions 4.0.0 prior to 4.0.8 and 4.1.0 prior to 4.1.6, running on Linux, MacOS, Windows (64-bit), and ARM. This vulnerability allows directory indexing and the exposure of leaked resources.

A server-side request forgery (SSRF) vulnerability has been identified in Wuzhicms version 4.1.0. The issue arises in the 'test' function of 'coreframe/app/search/admin/config.php', where the 'sphinxhost' and 'sphinxport' parameters are not properly validated. This lack of input filtering allows attackers to probe internal network ports, potentially leading to unauthorized access or information disclosure.

A vulnerability exists in Git versions through 2.48.1 that involves the sideband channel used for transporting messages from remote processes to the client. This channel can be exploited because Git does not sanitize messages before they are sent to the standard error output, which is typically connected to a terminal that interprets ANSI escape sequences. Malicious actors could use this oversight to obscure information, mislead users, or trick them into running untrusted scripts. The vulnerability is particularly concerning during recursive clones from untrusted repositories.

A vulnerability exists in Mattermost Mobile Apps in versions through 2.22.0, where the application fails to properly validate post properties. This flaw allows a malicious authenticated user to send a harmful post that can cause the app to crash.

A denial-of-service vulnerability has been identified in Mattermost versions 10.2.0, 9.11.5, 10.0.3, and 10.1.3. This issue arises because the application fails to properly validate post properties, allowing a malicious authenticated user to cause a crash by sending a harmful post.

A denial-of-service vulnerability has been identified in Mattermost versions 10.2.0, 9.11.5, 10.0.3, and 10.1.3. This issue arises because the application fails to properly validate post properties, allowing a malicious authenticated user to cause a crash by sending a harmful post.

A vulnerability exists in Mattermost Mobile Apps in versions 2.22.0 and earlier, where the application fails to properly validate post properties. This flaw allows a malicious authenticated user to send a harmful post that can cause the app to crash.

A stored cross-site scripting vulnerability has been identified in OpenText Solutions Business Manager (SBM) versions through 12.2.1. This vulnerability allows for improper neutralization of input during web page generation, potentially leading to the exposure of private information to unauthorized individuals.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version 9.1.0cu.2350_B20230313. The vulnerability arises in the 'setWiFiScheduleCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands in the 'desc' parameter, which are then executed on the operating system.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version 9.1.0cu.2350_B20230313. The vulnerability arises in the 'setWiFiScheduleCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands, which are then executed on the operating system.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in version V9.1.0cu.2350_B20230313. The vulnerability arises in the 'setWiFiScheduleCfg' function, where the 'week' parameter is improperly sanitized, allowing attackers to inject and execute arbitrary OS commands.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in version V9.1.0cu.2350_B20230313. The vulnerability arises in the 'setWiFiScheduleCfg' function, where the 'sHour' parameter is improperly sanitized, allowing attackers to inject and execute arbitrary OS commands.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version V9.1.0cu.2350_B20230313. The vulnerability arises in the 'setWiFiScheduleCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands, which are then executed on the operating system.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version V9.1.0cu.2350_B20230313. The vulnerability arises in the 'setWiFiScheduleCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious payloads, allowing them to execute arbitrary commands on the device.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version V9.1.0cu.2350_B20230313. The vulnerability arises in the 'setVpnAccountCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands, which are then executed on the device.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in the firmware version v9.1.0cu.2350_B20230313. The vulnerability arises in the 'setVpnAccountCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands, which are then executed on the device.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version V9.1.0cu.2350_B20230313. The vulnerability arises in the 'setVpnAccountCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious payloads in the 'pass' parameter, allowing them to execute arbitrary commands on the device.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version 9.1.0cu.2350_b20230313. The vulnerability arises in the 'setVpnAccountCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands in the 'user', 'pass', 'limit', and 'desc' parameters. These commands are then executed on the operating system, potentially leading to unauthorized command execution.

A command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in version V9.1.0cu.2350_B20230313. The issue arises in the setScheduleCfg function, where the 'hour' parameter is vulnerable to OS command injection.

An OS command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version 9.1.0cu.2350_B20230313. The vulnerability arises in the 'setScheduleCfg' function within the '/web/cgi-bin/cstecgi.cgi' file. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands, which are then executed on the device.

A command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version 9.1.0cu.2350_b20230313. The vulnerability resides in the web interface, within the 'setScheduleCfg' function of the CGI binary '/web/cgi-bin/cstecgi.cgi'. Authenticated attackers can exploit this issue by sending crafted requests that include malicious commands, which are then executed on the operating system.

A command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in version V9.1.0cu.2350_B20230313. The issue arises in the setScheduleCfg function, where the 'week' parameter is vulnerable to operating system command injection.

A command injection vulnerability has been identified in the TOTOLINK X5000R router, specifically in firmware version 9.1.0cu.2350_b20230313. The issue arises in the 'setScheduleCfg' function within the '/web/cgi-bin/cstecgi.cgi' file, where the 'minute' parameter is not properly validated. This flaw allows authenticated attackers to send crafted requests that execute arbitrary commands on the device.

A vulnerability exists in the XNetSocketClient component of XINJE XDPPro.exe, specifically in versions 3.2.2 to 3.7.17c. The issue arises from insecure permissions that allow attackers to execute arbitrary code by modifying the application's configuration file.

A denial-of-service vulnerability has been identified in the XINJE XL5E-16T and XD5E-24R-E programmable logic controllers, specifically in versions V3.5.3b through V3.7.2a. The issue arises from the controllers' handling of Modbus messages over TCP connections within a local area network. When a specific Modbus message is sent to the affected controllers, it can cause the PLC to crash, disrupting the normal operation of any running programs. This crash is indicated by the ERR light turning on and the RUN light turning off.

A denial-of-service vulnerability has been identified in the XINJE XL5E-16T product, specifically in version V3.7.2a. The issue arises from the handling of Modbus messages, allowing attackers to disrupt the normal operation of the device.