CVE Vulnerability Catalog

Firefox for iOS incorrectly displayed specially crafted RTL and IDN domain names in the link preview UI. This could allow an attacker to impersonate trusted origins. The vulnerability was fixed in Firefox for iOS 151.1.

The hackney library for Erlang/OTP versions 0.13.0 through 4.0.1 contains a Server-Side Request Forgery (SSRF) vulnerability due to an interpretation conflict. The URL normalizer decodes the host after validation, allowing bypass of allowlists and access to internal IP addresses (e.g., 127.0.0.1, 169.254.169.254).

The hackney library versions 3.1.1 before 4.0.1 is vulnerable to sensitive data exposure. The HTTP/3 module (hackney_h3.erl) does not perform cross-origin checks on redirects, causing authorization headers and cookies to be sent to foreign hosts.

A CRLF Injection vulnerability was found in the hackney library (versions from 0.9.0 before 4.0.1) in the hackney_cookie:setcookie/3 function. An attacker controlling the domain or path option can inject a CRLF sequence and arbitrary Set-Cookie headers, leading to HTTP Response Splitting.

Notebook Pro 2.0 has a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. An attacker can create a malicious text file with 500+ characters and paste it into the field, causing a crash on save.

Admidio 3.3.5 contains a CSRF vulnerability that allows low-privilege users to escalate their privileges by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles_function.php with parameters like rol_assign_roles, rol_approve_users, and rol_edit_user set to 1, leading to privilege escalation without authentication.

Visual Ping 0.8.0.0 contains a buffer overflow vulnerability in input field handling, allowing local attackers to crash the application by supplying oversized data. Attackers can inject malicious payloads exceeding 4108 bytes into the Host, Time Out, Packet Size, Pause, or Loops fields to trigger a denial of service condition.

NASA openVSP 3.16.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the geometry name field. Attackers can trigger a denial of service by pasting a 5000-byte payload into the name input field in the Geom browser interface.

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from authenticated user sessions.

Soroush IM Desktop App version 0.17.0 contains an authentication bypass vulnerability. A local attacker can remove passcodes by injecting pre-encrypted database entries using a constant encryption key, gaining access to all stored data, chats, images, and files without knowing the original passcode.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /process/applyleaveprocess.php. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /psubmit.php. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /changepassemp.php. The attack can be performed remotely and the exploit is publicly available.

XSS vulnerability in /applyleave.php in Employee Management System 1.0. Manipulation of the ID argument leads to cross-site scripting.

Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication.

OutSystems Lifetime is vulnerable to authorization bypass via a user-controlled key in the ApplicationID parameter. Any authenticated user can read the change log containing actions of other users and application names.

A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0, where an unknown function in /admin/edit_customer.php is prone to SQL injection via the ID argument. The attack can be executed remotely, and the exploit is public.

A flaw in SourceCodester Simple POS and Inventory System 1.0 allows unrestricted file upload via the /admin/addproduct.php file. The image argument is not properly validated, enabling remote attackers to upload malicious files. An exploit has been published, increasing the risk of exploitation.

In SourceCodester Simple POS and Inventory System 1.0, the delete function in /admin/deleteproduct.php (GET Parameter Handler) is vulnerable to SQL injection via the ID argument. Remote attack is possible, and the exploit is public.

A vulnerability in Edimax BR-6478AC 1.23. The formiNICbasic function in /goform/formiNICbasic of the POST Request Handler component allows command injection via the rootAPmac argument. Remote attack, exploit public.