CVE Vulnerability Catalog

A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 9.0.46. This is due to the plugin exposing state-changing REST actions through an AJAX bridge without proper CSRF token validation, and having destructive logic reachable via GET requests with no permission_callback.

A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/users/complaint-details.php. Manipulation of the cid argument allows remote SQL injection. The exploit is public.

A SQL injection vulnerability was discovered in Online Complaint Site 1.0 in /cms/users/register-complaint.php. Manipulation of the cid argument allows remote SQL injection. The exploit is public.

A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/users/index.php. Manipulation of the Username argument allows remote SQL injection. The exploit is public.

A cross-site scripting (XSS) vulnerability was found in code-projects Voting System 1.0 in the file /admin/voters_add.php. Manipulating the Firstname/Lastname/Platform arguments allows remote attack. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in code-projects E-Commerce Website 1.0 in the file /pages/supplier_add.php. Manipulating the supp_email argument allows remote attack. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in code-projects E-Commerce Website 1.0 in the file /pages/product_add.php. Manipulating the prod_name argument allows remote attack. The exploit has been publicly disclosed and may be used.

A security vulnerability has been detected in code-projects Voting System 1.0, affecting an unknown function of /admin/voters_add.php. Manipulation of the photo argument leads to unrestricted upload, and the attack can be launched remotely. The exploit has been publicly disclosed.

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function CommandManager of the file src/command-manager.ts. Performing manipulation results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor explains: "The usual use case is that AI is asked to do something, picks commands itself, and typically uses simple command names without absolute paths. It's curious why a user would ask the model to bypass restrictions this way. (...) This could potentially be a problem, but we are yet to hear reports of this being an issue in actual workflows. We'll leave this issue open for situations where people may report this as a problem for the long term."

Prior to Opencast 17.8 and 18.2, in some situations Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for publishing, possibly exposing internal media. The risk of actual impact is very low and requires a user with write access to an event using the editor and first clicking 'Save & Publish' before selecting 'Save'.

In Opencast prior to versions 17.8 and 18.2, the paella player renders user-supplied metadata (title, description, etc.) without filtering. This allows an attacker to inject malicious HTML and JavaScript that executes in the browsers of users viewing the media.

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility (LTV) sensors.

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility (LTV) sensors.

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The vulnerability affects the isPathAllowed function in src/tools/filesystem.ts and involves symlink following. The attack can only be performed locally, with high complexity and difficult exploitability, but the exploit has been publicly disclosed. The vendor explains that restriction features are guardrails for LLMs, not hardened security boundaries, and recommends using Desktop Commander with Docker for isolation. This vulnerability only affects products no longer supported by the maintainer.

A SQL injection vulnerability was discovered in SourceCodester Farm Management System 1.0 in /uploadProduct.php. Manipulation of the Type argument allows remote attack execution. The exploit is publicly available.

A SQL injection vulnerability exists in SourceCodester Farm Management System 1.0 in /buyNow.php. Manipulation of the Name argument allows remote attack. The exploit is publicly available.

A SQL injection vulnerability was found in Blood-Bank-And-Donation-Management-System (up to dc9e0393d826fbc85fad9755b5bc12cba1919df2) in the file /donate_blood.php. Manipulating the fullname argument allows remote attack. The exploit has been publicly disclosed and may be used. The product uses a rolling release system, so version information is not disclosed.

HAProxy Kubernetes Ingress Controller before version 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress Controller are 3.0.16-ee1, 1.11.13-ee1, and 1.9.15-ee1.