CVE Vulnerability Catalog

A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

An unrestricted file upload vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0 in /admin/admin_running.php via manipulation of the product_image argument. The attack can be launched remotely and a public exploit is available.

A vulnerability exists in an unknown part of the file /section_edit1.php in itsourcecode Student Information System 1.0. Manipulation of the ID argument leads to SQL injection. Remote exploitation is possible, and the exploit has been publicly disclosed and may be used.

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0 in an unknown function of the file /Admin/delete-fee.php of the Fee Table Handler component. Manipulation of the ID argument leads to improper authorization. The attack may be performed remotely, and the exploit has been publicly disclosed and may be utilized.

A vulnerability was found in TykoDev cherry-studio-TykoFork 0.1 affecting the redirectToAuthorization function in /.well-known/oauth-authorization-server of the OAuth Server Discovery component. Manipulation of the authorizationUrl argument leads to OS command injection, exploitable remotely.

A SQL Injection vulnerability has been found in code-projects Question Paper Generator up to version 1.0, affecting the file /selectquestionuser.php. Manipulation of the subid argument allows SQL injection. The exploit has been publicly disclosed and can be exploited remotely.

A vulnerability was found in Verysync 微力同步 up to 2.21.3, affecting an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false in the Web Administration Module. Manipulation can lead to unrestricted upload, and the attack may be performed remotely.

A vulnerability was detected in Verysync 微力同步 2.21.3 affecting the Web Administration Module, specifically the file /safebrowsing/clientreport/download. Manipulation results in information disclosure and the attack can be carried out remotely. The exploit is now public and the vendor did not respond to the disclosure.

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security flaw was discovered in code-projects Employee Profile Management System 1.0 allowing unrestricted file upload. Manipulating the per_file argument in /profiling/add_file_query.php enables remote attacks. The exploit has been released publicly and may be used.

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing a manipulation of the argument per_id can lead to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability was identified in Yonyou U8 Cloud versions 5.0, 5.0sp, 5.1, and 5.1sp, where manipulation of the usercode argument in the file nc/pubitf/erm/mobile/appservice/AppServletService.class leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available. The vendor was contacted but did not respond.

A vulnerability was determined in SGAI Space1 NAS N1211DS up to version 1.0.915 in the RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD functions of /cgi-bin/JSONAPI in the gsaiagent component. The manipulation causes command injection, and the attack may be initiated remotely. The exploit has been publicly disclosed and the vendor did not respond to the disclosure.

A vulnerability in SGAI Space1 NAS N1211DS up to version 1.0.915 affects the GET_FACTORY_INFO/GET_USER_INFO functions in the /cgi-bin/JSONAPI file of the gsaiagent component. Manipulation results in unprotected storage of credentials. The attack can be launched remotely, and the exploit has been made public.

In Sobey Media Convergence System 2.0/2.1, there is a path traversal vulnerability in /sobey-mchEditor/watermark/upload. Manipulating the File argument allows remote access to files outside the intended directory.

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/websHostFilter. Performing manipulation of the argument addHostFilter results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Impacted is the function strcpy of the file /goform/formConfigDnsFilterGlobal. Such manipulation of the argument timeRangeName leads to buffer overflow. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The Fluent Forms plugin for WordPress (versions up to and including 6.1.7) is vulnerable to Insecure Direct Object Reference (IDOR) via the 'submission_id' parameter. Missing validation on a user-controlled key in the confirmScaPayment() function allows unauthenticated attackers to mark arbitrary submissions as failed if they can guess or enumerate a valid submission identifier.

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.