CVE Vulnerability Catalog

A flaw was found in SourceCodester Pizzafy Ecommerce System 1.0 in the save_user function of /admin/ajax.php?action=save_user. Manipulation leads to SQL injection. The attack can be launched remotely and the exploit is publicly available.

A vulnerability was detected in Pizzafy Ecommerce System 1.0 in the save_menu function of /admin/ajax.php?action=save_menu. Manipulation leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was detected in Pizzafy Ecommerce System 1.0 in the save_settings function of /pizzafy/admin/ajax.php?action=save_settings (Setting Handler). Manipulation leads to SQL injection. The attack can be launched remotely and the exploit is publicly disclosed.

A security flaw was discovered in geldata gel-mcp 0.1.0 affecting the list_rules/fetch_rule functions (src/gel_mcp/server.py). Manipulation of the rule_name argument results in path traversal, and the attack may be performed remotely. The exploit has been released publicly and the project has not responded.

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafted Router Advertisement with a truncated PREFIX_INFORMATION option smaller than the expected structure size.

In SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0, the file /index.php?action=register (Registration component) is vulnerable to cross-site scripting via manipulation of the student_id/full_name/section/username arguments. The exploit is public and can be launched remotely.

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation weakness through browser-driven or local cross-origin requests to abuse the localhost API and enable attack chains against the local control plane.

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6. When outgoing ping support is enabled, header sizes are subtracted from a packet length field without validating the field is large enough, resulting in a heap out-of-bounds read of up to approximately 65KB.

Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC address to match one of the device's own registered endpoints, because the loopback detection mechanism skips all input validation for packets whose source MAC matches a local endpoint. To mitigate this issue, users should upgrade to the fixed version when available.

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0 in /admin/view_order.php where manipulation of the ID argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0 in the save_menu function of the file /admin/admin_class_novo.php (File Extension Handler component). Manipulation of the img argument results in unrestricted upload. The attack is possible remotely and the exploit has been made public.

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function delete_supplier of the file /ajax.php?action=delete_supplier. Such manipulation of the argument ID leads to SQL injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function save_supplier of the file /ajax.php?action=save_supplier. This manipulation of the argument ID causes SQL injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all v8.1 versions, v8.0 versions prior to 8.0.21, and v7.0 versions prior to 7.0.32.

A post-authentication stack-based buffer overflow vulnerability in SonicOS allows a remote attacker to crash a firewall.

A post-authentication path traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. The attacker must be authenticated to exploit this flaw.

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or JavaScript in the body field of a knowledge base Doc. This issue affects helpy: 2.8.0.

Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered unescaped in public forum threads where they participate, in the admin ticket view, and in HTML notification emails sent to other users. This issue affects helpy: 2.8.0.