CVE Vulnerability Catalog

An unauthenticated remote attacker can execute arbitrary PHP files and gain full access to the affected devices.

The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.

WinPlus version v24.11.27 by Informática del Este contains an unlimited upload vulnerability for dangerous file types. It allows an attacker to upload a 'webshell' by sending a POST request to '/WinplusPortal/ws/sWinplus.svc/json/uploadfile'.

WinPlus version v24.11.27 by Informática del Este has faulty authorization control that allows impersonation of another user simply by knowing their 'numerical ID'. An attacker can compromise another user's account, affecting confidentiality, integrity, and availability of data.

Serv-U contains a Path Restriction Bypass vulnerability that, when abused, could give a malicious actor with admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this is scored as medium due to differences in how paths and home directories are handled.

Serv-U contains a missing validation process vulnerability that, when abused, could give a malicious actor with admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as medium because services frequently run under less-privileged service accounts by default.

Serv-U contains a logic error vulnerability that, when abused, could give a malicious actor with admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as medium because services frequently run under less-privileged service accounts by default.

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL injection via the email parameter in forgot-password.php.

QaTraq 6.9.2 ships with default administrative account credentials that are enabled in standard installations. This allows immediate login via the web application login page. An attacker who can reach the login page can gain full administrative access.

Wtyczka W3 Total Cache dla WordPressa w wersjach przed 2.8.13 jest podatna na wstrzykiwanie poleceń przez funkcję _parse_dynamic_mfunc. Umożliwia to nieautoryzowanym użytkownikom wykonywanie poleceń PHP poprzez przesłanie komentarza z złośliwym ładunkiem do posta.

ThinPLUS opracowany przez ThinPLUS ma podatność na wstrzykiwanie poleceń systemowych, co pozwala nieautoryzowanym zdalnym atakującym na wstrzykiwanie dowolnych poleceń systemowych i ich wykonywanie na serwerze.

BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, contains a SQL injection vulnerability on the /BEIMSWeb/contractor.asp endpoint. An unauthorized user can retrieve sensitive database contents via unsanitized parameter input. Version 5.7.139 has been confirmed as vulnerable.

Brama Lynx+ firmy General Industrial Controls ma brak krytycznej autoryzacji w wbudowanym serwerze WWW, co może umożliwić atakującemu zdalne zresetowanie urządzenia.

D-Link DIR-816L version 2_06_b09_beta contains a stack-based buffer overflow vulnerability in the function authenticationcgi_main of the file /authentication.cgi. Manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation is possible, and the exploit is public. This vulnerability only affects products that are no longer supported by the maintainer.

TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to execute arbitrary operating system commands as root, resulting in full device compromise.

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2. It is remotely exploitable for escalation of privileges.

Pakiet npm `expr-eval` jest podatny na zanieczyszczenie prototypu. Atakujący, mając dostęp do interfejsu express eval, może wykorzystać model dziedziczenia oparty na prototypach w JavaScript do wykonania dowolnego kodu.

The nimsh service in IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 contains a vulnerability in its SSL/TLS implementation that could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability previously addressed in CVE-2024-56347.