Baza CVE

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or…

Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.

Błąd w Fastjson umożliwia zdalne wykonanie kodu przez wstrzyknięcie JNDI.

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. This is due to insufficient validation of user-supplied role values in the 'validate_value', 'pre_update_value', and 'get_fields_display' functions. This makes…

A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/admin/manage-students.php. This manipulation of the argument id/cid causes sql injection. It is possible to initiate the attack remotely. The exploit…

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains sensitive files such as /etc/shadow,…

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generate an file view of a folder which include a render of the current path, in which its inserted in the HTML without proper sanitation, this leads to reflected XSS using the fact that request path is decoded…

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can…

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.

Brak powiązania przechowywania stanu z sesją użytkownika w Authlib umożliwia ataki CSRF.

Wykonanie zdalnego kodu przez administratora kopii zapasowej w wyniku złośliwego hasła.

Luka umożliwia operatorowi kopii zapasowej zapis plików jako root.

Wykonanie zdalnego kodu przez operatora kopii zapasowej w PostgreSQL poprzez złośliwy parametr.

Luka w systemie backupowym umożliwia zdalne wykonanie kodu jako root przez złośliwy plik konfiguracyjny.

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `CIccCLUT::Init()` at `IccProfLib/IccTagLut.cpp`.…

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint,…

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands…

RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API validates permissions using `ExportIAMAction` instead of `ImportIAMAction`, allowing a principal with export-only IAM permissions to perform import operations. Since importing IAM…

Ujawnienie domyślnego hasła SSH w Harvesterze może prowadzić do nieautoryzowanego dostępu.

Nieograniczony upload niebezpiecznych plików w Corpkit umożliwia wgranie powłoki sieciowej.

Wstrzyknięcie SQL w Automotive Listings umożliwia przeprowadzenie ataku typu Blind SQL Injection.

Nieograniczony upload niebezpiecznych plików w Contentstudio umożliwia wgranie powłoki sieciowej.

Deserializacja niezaufanych danych w Tribulant Software Newsletters umożliwia wstrzyknięcie obiektów.

Obejście uwierzytelnienia w RiceTheme Felan Framework umożliwia nadużycie dostępu.

Wstrzyknięcie SQL w Felan Framework umożliwia atakującym manipulację bazą danych.