Baza CVE

FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API…

FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. The application uses a hard-coded secret key to sign and verify JWT Tokens. This allows remote attackers to forge valid admin tokens and bypass authentication to gain full administrative access.

FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint. The endpoint lacks authentication mechanisms, allowing unauthenticated remote attackers to upload arbitrary files. This can be exploited to overwrite critical system files (such as the SQLite user…

FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise.

An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise.

Wstrzyknięcie poleceń w HCL AION umożliwia nieautoryzowane wykonanie komend.

GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP, an attacker can upload a web shell and execute arbitrary code on the server. This vulnerability enables remote code execution by bypassing the…

Rapid7 InsightVM versions before 8.34.0 contain a signature verification issue on the Assertion Consumer Service (ACS) cloud endpoint that could allow an attacker to gain unauthorized access to InsightVM accounts setup via "Security Console" installations, resulting in full account takeover. The…

Wstrzyknięcie SQL w Django umożliwia zdalnym atakującym manipulację danymi.

Wstrzyknięcie SQL w systemie DIGITA Efficiency Management umożliwia nieautoryzowany dostęp do danych.

Luka w AnyDesk umożliwia lokalnym atakującym wstrzyknięcie złośliwych plików.

Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the…

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APP_CODE=STA&PAGE_CODE=TABLON'. Exploiting this…

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to…

Przepełnienie bufora w urządzeniach ELECOM umożliwia zdalne wykonanie kodu.

Nieprawidłowa walidacja danych w CGI w ADM umożliwia zdalne zapisywanie danych w systemie.

Wykrycie podatności w MediaWiki umożliwia atakującym zdalne wykonanie kodu.

Wykonanie złośliwego kodu w Group-Office przez złośliwy plik zip umożliwia zdalne przejęcie kontroli.

Brak uwierzytelnienia w menedżerze baz danych Odoo na NixOS pozwala na nieautoryzowany dostęp do danych.

Wykorzystanie CSRF w PolarLearn umożliwia przejęcie konta ofiary i kradzież danych.

Wykorzystanie złośliwego serwera w homeserverze Continuwuity pozwala na podpisywanie dowolnych zdarzeń.

Wstrzyknięcie obiektów PDF w jsPDF umożliwia wykonanie złośliwego kodu JavaScript.

W OpenList Frontend występuje luka umożliwiająca nieautoryzowany dostęp do plików innych użytkowników.

Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated…