CVE Vulnerability Catalog

A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument deleteid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in CodeAstro Online Classroom 1.0, affecting an unknown function of the /OnlineClassroom/addnewstudent file. Manipulation of the fname argument results in SQL injection, and the attack may be performed remotely. The exploit has been made public and could be used.

A vulnerability was found in CodeAstro Online Classroom 1.0 in an unknown function of the /OnlineClassroom/studentdetails file. Manipulating the deleteid argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.

A flaw was found in CodeAstro Online Classroom 1.0 in an unknown function of the /OnlineClassroom/facultylogin file. Manipulating the fid argument can lead to SQL injection. The attack can be executed remotely and the exploit has been published.

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

In puchunjie doc-tools-mcp 1.0.18, the create_document/open_document functions in src/mcp-server.ts of the MCP Interface component are vulnerable to path traversal via manipulation of the filePath argument. The attack can be launched remotely and the exploit has been publicly released.

A vulnerability was identified in osrg GoBGP up to 4.3.0 in the BMPPeerUpNotification.ParseBody and BMPStatisticsReport.ParseBody functions of pkg/packet/bmp/bmp.go (BMP Parser component). Manipulation of data leads to an out-of-bounds read, and the attack can be initiated remotely. The fix is available in version 4.4.0 (commit bc77597d42335c78464bc8e15a471d887bbdf260).

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.

In the Modem component, a possible system crash exists due to incorrect error handling. This could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed and no user interaction required.

In Modem, a heap buffer overflow may cause a system crash. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges or user interaction needed. Patch ID: MOLY01760138.

In geniezone, a missing permission check may lead to local privilege escalation if a malicious actor already has System privilege. Exploitation does not require user interaction.

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

A vulnerability was found in osrg GoBGP up to 4.3.0 in the SRv6L3ServiceAttribute.DecodeFromBytes function of pkg/packet/bgp/prefix_sid.go (SRv6 L3 Service component). Manipulation of the data argument leads to denial of service, and the attack can be performed remotely. The fix is available in version 4.4.0 (commit f9f7b55ec258e514be0264871fa645a2c3edad11).

A vulnerability was detected in code-projects BloodBank Managing System 1.0 in an unknown function of request_blood.php. The manipulation results in unrestricted upload. The attack can be executed remotely and the exploit is now public.

A SQL injection vulnerability was detected in BloodBank Managing System 1.0 in get_state.php via manipulation of the G_STATE_ID argument. The attack can be performed remotely, and the exploit has been publicly disclosed. The affected function is not explicitly identified.

In privsim mcp-test-runner 0.2.0, the child_process.spawn function in src/index.ts (MCP interface) allows OS command injection through manipulation of the command argument. The attack can be launched remotely, and the exploit has been publicly disclosed.

A security flaw was discovered in pixelsock directus-mcp 1.0.0 affecting the validateUrl function in index.ts of the MCP Interface component. Manipulating the fileUrl argument results in server-side request forgery. The attack may be initiated remotely and the exploit has been released publicly; the fixing pull request awaits acceptance.

A path traversal vulnerability was identified in mcp-rtfm 0.1.0 within the MCP Interface, affecting the get_doc_content/read_doc/update_doc functions. Manipulating the docFile argument allows remote exploitation, and a public exploit is already available. The fix is provided in commit e6f0686fc36012f78236e7fed172c81444904b0b.

In PrefectHQ prefect up to 3.6.25.dev6, in src/prefect/runner/storage.py (GitRepository Pull Handler component), manipulation of the commit_sha/directories arguments leads to argument injection. The attack can be launched remotely, and the exploit is public. The fix is released in version 3.6.25.dev7 (commit 6a9d9918716ce4ee0297b69f3046f7067ef1faae).

In PrefectHQ prefect up to 3.6.28.dev1, the validate_restricted_url function in the Webhook/Notification component is vulnerable to time-of-check time-of-use (TOCTOU). The attack can be initiated remotely but is considered highly complex and difficult to exploit. The fix is released in version 3.6.28.dev2 (commit 7c70ac54a5e101431d83b9f2681ec88d5e0021ed).