CVE Vulnerability Catalog

SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in file /viewprescriptionrecord.php via the delid argument. The attack can be launched remotely, and the exploit is now public.

A vulnerability has been detected in the Assimp library (Open Asset Import Library) version 17c12da. The issue affects the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 in file code/AssetLib/MDL/MDLLoader.cpp, where manipulation of arguments transmatrix_count/pcBoneTransforms leads to buffer overflow. The attack can be initiated remotely, and the exploit is publicly available.

A cross-site scripting vulnerability has been detected in Online Shopping System 1.0 by code-projects in file offersmail.php. Manipulation of the email argument leads to XSS. The attack can be performed remotely, and the exploit is publicly available.

An authorization bypass vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /admin/sales/rma/requests (Backend Sales RMA Endpoint). Manipulation allows remote authorization bypass. The exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

A vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /admin/customers (Backend Customer Behavior Data Endpoint). Manipulation of the ID argument leads to improper privilege management. The attack can be executed remotely, and the exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

An authorization bypass vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /admin/configuration/cache-management/execute (Configuration Management). Manipulation of the action argument leads to authorization bypass. The attack may be launched remotely, and the exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

A vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /customer/account/rma/update-status (RMA State Validation). Manipulation leads to enforcement of behavioral workflow. The attack may be initiated remotely, and the exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

A cross-site scripting vulnerability has been detected in Alaev SEO Tools Extension up to version 1.0.10 for Chrome in the addDiv function of file src/popup.html (Popup UI component). Manipulation leads to basic XSS. The attack can be initiated remotely, and the exploit is publicly available. The vendor was contacted but did not respond.

A vulnerability has been detected in SourceCodester Best Employee Management System 1.0 in file /assets/uploadImage/Profile/, which allows information exposure through directory listing. The attack can be launched remotely.

The ShopSmart Loyalty for WooCommerce plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name, email, and account balance.

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the configured integration credentials when the relevant data-sync feature is enabled.

A vulnerability was identified in the Adblock for Youtube Extension up to version 7.2.1 on Chrome. The issue affects the updateDynamicRules function in the file contentscript.js of the Event Listener component. Manipulation of the yt-anti-adblock-detected argument causes improper authorization. The attack can be initiated remotely, and the exploit is publicly available.

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child_process.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument deviceId/packageName/permission/extras[].key/extras[].value can lead to os command injection. It is possible to launch the attack on the local host. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called 14e2bf27c88ba137e35cbb0c2a75f72b595bb98a. It is advisable to implement a patch to correct this issue.

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain administrative access to repository infrastructure and modify software source code. To mitigate this security risk, Acer has released an update to resolve the issue.

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest_macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be launched remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The vendor was contacted early about this disclosure but did not respond in any way.