CVE Vulnerability Catalog

A security flaw was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/sup_edit.php. Manipulation of the argument ID results in SQL injection. The attack can be executed remotely, and the exploit has been released.

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/cust_searchfrm.php. Manipulation of the argument ID leads to SQL injection. Remote exploitation is possible, and the exploit is publicly available.

An uncontrolled recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memory, denying service. The generated worker's atomic handle_error/4 runs the trigger's on_error action on a job's final attempt inside a rescue that, when the action itself raises, calls handle_error/4 again with the same job, leading to infinite recursion and unbounded heap growth. This issue affects ash_oban from 0.8.0-rc.1 before 0.8.14.

A vulnerability in ash_oban allows a user whose input reaches the :args option of AshOban.build_trigger/3 to retarget an update or destroy trigger at another record, including across tenants. This occurs because caller keys arrive as strings after JSON round-trip, bypassing merge collision handling and allowing override of trusted values.

A vulnerability in ash_sql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares both a limit and a parent(...)-referencing filter or sort. In certain cases, the limit and predicate are dropped, causing the check to match any record with any related row.

A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting an unknown part. Manipulation can lead to weak password recovery. The attack can be executed remotely, and the exploit has been publicly disclosed. The vendor did not respond.

A vulnerability was found in SiteServer SSCMS 7.4.0, affecting the Agent Installation Workflow component. Manipulating the SecurityKey argument results in improper access controls. Remote exploitation is possible but has high complexity and is difficult. The project did not respond.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/pro_edit.php. Manipulating the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_searchfrm.php. Manipulating the ID argument causes SQL injection. The attack can be initiated remotely, and the exploit has been published.

The Really Simple Security WordPress plugin before 9.8.0 does not check if the user is allowed to install plugins, allowing a subsite administrator on a multisite network to install and execute arbitrary code in the network-shared plugin directory. Exploitation requires the network administrator to have enabled the plugin's administration menu for subsites, which is not the default.

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can lead to code execution.

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.

A vulnerability was identified in NASA cFS up to 7.0.1, affecting the OS_read function in sbn_tcp_if.c of the SBN TCP Module. Manipulating the MsgSz argument leads to buffer overflow. The attack must be carried out from within the local network. The vendor did not respond.

The ash_paper_trail library (ash-project) has a cleartext storage of sensitive information vulnerability. An attacker with read access to the generated version resource can recover sensitive values nested inside embedded resources, unions, or lists. The sensitive_attributes :redact and :ignore only act on top-level attributes, not descending into nested structures.

The ash_paper_trail library (ash-project) has a cleartext storage of sensitive information vulnerability. An attacker with read access to the generated version resource can recover the plaintext of sensitive? attributes. These values are stored in the changes map, which is public and not marked as sensitive, so they are returned by the default read action and printed in logs and error messages.

The `qs.stringify` function in the qs library throws a `TypeError` when serializing an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. The duck-typing check in `utils.isBuffer` invokes `obj.constructor.isBuffer(obj)` without verifying it is a function, causing the error. Affected versions are from 2.2.5 to 6.15.3, fixed in 6.16.0.

In PHPGurukul Student Information System 1.0, a SQL injection vulnerability exists in the file /student_edit1.php via manipulation of the ID argument. The attack can be launched remotely, and the exploit is publicly available.

In macrozheng mall up to 1.0.3, a vulnerability exists in the Payment Status Endpoint component, in the file /order/paySuccess, where manipulation of the orderId argument leads to enforcement of behavioral workflow. The attack can be carried out remotely. The vendor deleted the GitHub issue without explanation.

In itsourcecode Sales and Inventory System 1.0, a SQL injection vulnerability exists in the file /pages/emp_del.php via manipulation of the ID argument. The attack may be launched remotely, and the exploit has been released to the public.

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.