CVE Vulnerability Catalog

Vasion Print Virtual Appliance Host prior to 22.0.1026 and Application prior to 20.0.2702 (VA deployments only) expose unauthenticated REST API endpoints that return configuration files and clear-text passwords and disclose the Laravel APP_KEY used for cryptographic signing. Obtaining the APP_KEY allows an attacker to craft valid signed requests and achieve remote code execution.

Vasion Print Virtual Appliance Host prior to 22.0.1026 and Application prior to 20.0.2702 (VA deployments only) expose an unauthenticated firmware-upload flow. A public page returns a signed token, and every Docker image contains the appliance’s private GPG key and hard-coded passphrase, allowing attackers to decrypt, modify, re-sign, and upload malicious firmware for remote code execution.

Vasion Print Virtual Appliance Host before 22.0.843 and Application before 20.0.1923 have CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature validation, and grants the jenkins account NOPASSWD for mount/umount. This allows supply chain or man-in-the-middle compromise of the build pipeline, malicious firmware injection, and remote code execution as root on the CI host.

Vasion Print Virtual Appliance Host before 22.0.1049 and Application before 20.0.2786 configure the SSH client within Docker instances with UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These settings disable remote host key verification and automatically forward the developer's SSH-agent to any host matching wildcard patterns, allowing an attacker to capture forwarded private keys and use them for unrestricted lateral movement.

OS command injection vulnerability in the user interface of Western Digital My Cloud firmware (prior to 5.31.108) on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.

Vasion Print Virtual Appliance Host prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic CA and a hardcoded password in configuration files such as clientsettings.dat and defaults.ini. An attacker obtaining these files can impersonate the CA and perform man-in-the-middle attacks.

Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/{recipe_name}" endpoint is rendered in the frontend without proper escaping leading to persistent XSS.

W podatności CVE-2024-13150 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości ataku typu SQL Injection w systemie fayton.Pro ERP. Problem ten dotyczy wersji oprogramowania do 29 września 2025 roku.

In Progress Chef Automate (versions earlier than 4.13.295) on Linux x86, an authenticated attacker can gain access to restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.

DataSpider Servista 4.4 and earlier has an improper restriction of XML external entity reference (XXE) issue. Processing a specially crafted request may allow reading arbitrary files on the file system where the server application is installed, or cause a denial-of-service (DoS) condition.

W Apeman ID71 odkryto lukę bezpieczeństwa, która dotyczy nieznanego kodu w pliku /system/www/system.ini. W wyniku manipulacji w tym pliku mogą zostać ujawnione twardo zakodowane dane uwierzytelniające.

W wersjach wcześniejszych niż 11.0.2, w get-jwks występuje podatność, która może prowadzić do zanieczyszczenia pamięci podręcznej w mechanizmie pobierania kluczy JWKS. Problem polega na tym, że walidacja roszczenia iss (issuer) odbywa się dopiero po pobraniu kluczy z pamięci podręcznej, co pozwala na ponowne wykorzystanie kluczy z nieoczekiwanego źródła.

Formbricks, alternatywa dla Qualtrics, przed wersją 4.0.1 nie weryfikował podpisów JWT. W wyniku tego, mechanizm walidacji tokenów jedynie dekodował JWT, co umożliwiało atakującym tworzenie fałszywych tokenów do logowania i resetowania haseł.

W DOXENSE WATCHDOC przed wersją 6.1.1.5332 występuje podatność na deserializację niezaufanych danych, co może prowadzić do zdalnego wykonania kodu poprzez bibliotekę .NET Remoting w interfejsie administracyjnym Watchdoc.

In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.

Podatność CVE-2025-60219 w HaruTheme WooCommerce Designer Pro umożliwia nieograniczone przesyłanie plików o niebezpiecznych typach, co pozwala na przesłanie powłoki sieciowej na serwer WWW. Problem ten dotyczy wersji WooCommerce Designer Pro od n/a do 1.9.24.

Podatność typu Cross-Site Request Forgery (CSRF) w wtyczce webandprint AR For WordPress umożliwia przesłanie powłoki sieciowej na serwer WWW. Problem dotyczy wersji AR For WordPress od n/a do 8.34 włącznie.

OS command injection vulnerability in TOTOLINK X6000R allows an attacker to execute arbitrary system commands. Affects versions up to V9.4.0cu.1458_B20250708.

Flag Forge (CTF platform) versions 2.2.0 up to before 2.3.1 improperly handle session invalidation. Authenticated users can continue to access protected endpoints, such as /api/profile, even after logging out. CSRF tokens are also still valid post-logout, which can allow unauthorized actions. Patched in version 2.3.1.

A vulnerability in the web services of Cisco Secure Firewall ASA, FTD, IOS, IOS XE, and IOS XR Software could allow an unauthenticated remote attacker (for ASA and FTD) or an authenticated remote attacker with low privileges (for IOS, IOS XE, IOS XR) to execute arbitrary code on an affected device. The issue is due to improper validation of user-supplied input in HTTP requests.