CVE Vulnerability Catalog

A weakness was identified in SourceCodester Alumni Management System 1.0 affecting delete_forum/delete_career/delete_comment/delete_gallery/delete_event in admin/admin_class.php (Delete Handler). Manipulating the ID argument leads to missing authorization, and the attack can be launched remotely. The exploit is publicly available.

A vulnerability was detected in macrozheng mall up to 1.0.3. The delete function in /member/readHistory/delete improperly controls access when the ids argument is manipulated. The exploit is public and can be used remotely.

A vulnerability was detected in Dreampie Resty up to 1.3.1.SNAPSHOT affecting the Request function in HttpClient.java of the HttpClient module. Manipulation of the filename argument leads to path traversal, and the attack may be performed remotely.

Hush Framework 2.0 contains a vulnerability in Util.php where improper neutralization of HTTP headers occurs when handling $_SERVER['HOST']. The attack can be carried out remotely and a public exploit is available.

The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name, last name and email addresses.

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement. This allows high-privilege users such as administrators to perform SQL injection attacks.

A vulnerability was found in Campcodes Supplier Management System 1.0 in /admin/add_product.php. Manipulating the txtProductName argument leads to SQL injection, and remote exploitation is possible. The exploit has been publicly disclosed and may be used.

Campcodes Retro Basketball Shoes Online Store 1.0 has an unrestricted upload vulnerability in /admin/admin_product.php via manipulation of the product_image argument. The attack can be launched remotely and a public exploit is available.

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

SSH Agent servers do not validate message size when processing new identity requests. A malformed message may cause an out-of-bounds read and panic the program.

A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0 affecting an unknown functionality of the file /admin/admin_football.php. Manipulation of the product_image argument results in unrestricted upload. The attack can be carried out remotely and the exploit has been made public.

Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.

An issue was discovered in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-10 and 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts. The vulnerability could be exploited to take control of the system.

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions without credentials, provided the legitimate admin previously closed the browser without logging out.

A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The XSS payload is automatically executed in the browsers of users who access the infected codebox.

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by an information disclosure vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view.

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISAR_APT_SNAPSHOT_DATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb.

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.

In XWiki Remote Macros prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0.

Rallly, an open-source scheduling and collaboration tool, prior to version 4.5.4 has an Insecure Direct Object Reference (IDOR) vulnerability. It allows any authenticated user to change the display names of other participants in polls without being an admin or the poll owner.