CVE Brief Security Intelligence

An authorization bypass vulnerability in the Product Feed PRO for WooCommerce plugin allows unauthenticated users to disclose sensitive store configuration and product category data.

The Velociraptor verify() VQL function is susceptible to missing authorization and code injection, allowing authenticated users to execute unauthorized operations.

The UTT HiPER 1200GW router is affected by a memory corruption and buffer overflow vulnerability, which can be triggered by an authenticated user.

The HTTP media server in multiple DJI drone models lacks authentication, allowing unauthenticated attackers to access stored photos and videos via the /v2 endpoint.

Heptabase contains a reflected cross-site scripting vulnerability that allows an authenticated user to execute malicious scripts in the context of other users.

DJI drones expose an unauthenticated Bluetooth DUML interface, allowing attackers within range to modify critical Wi-Fi and network configuration parameters.

GitLab CE/EE is affected by a path traversal vulnerability that allows an authenticated user with low privileges to potentially access or manipulate restricted files.

Sakura Editor is affected by an OS command injection vulnerability, potentially allowing an attacker to execute arbitrary commands on the host system.

The exceljs library is vulnerable to CSV formula injection, which can lead to unauthorized data access or malicious actions when a user opens a generated CSV file in spreadsheet software.

The 4MOSAn Management Center is affected by a relative path traversal vulnerability, which may allow an unauthenticated attacker to access unauthorized files on the system.

The exceljs library is vulnerable to a data amplification attack due to improper handling of highly compressed data, leading to potential denial of service.

The exceljs library is vulnerable to path traversal through unvalidated filenames provided in the addImage function, potentially allowing unauthorized access to local files.

The justhtml library is vulnerable to a denial of service attack via specially crafted CSS selectors that trigger uncontrolled resource consumption.

The justhtml library is vulnerable to uncontrolled recursion, which can be exploited by an attacker to trigger a denial of service condition via deeply nested HTML content.

A memory corruption vulnerability, specifically an out-of-bounds read, exists in Open5GS 2.8.0, potentially allowing for system instability or unauthorized information disclosure.

A heap-based buffer overflow vulnerability in Open5GS 2.8.0 allows authenticated low-privilege attackers to cause memory corruption via network-based vectors.

The Tenda CH22 router contains a command injection vulnerability, allowing authenticated attackers to execute arbitrary system commands through the web interface.

The itsourcecode Payroll System contains an unrestricted file upload vulnerability, allowing unauthenticated attackers to upload malicious files to the server.

A SQL injection vulnerability exists in itsourcecode Payroll System version 1.0, allowing unauthenticated attackers to manipulate database queries.

A SQL injection vulnerability in SourceCodester Simple Online Food Ordering System version 1.0 allows unauthenticated remote attackers to compromise database integrity.

SourceCodester Simple Online Food Ordering System version 1.0 contains a SQL injection vulnerability that allows unauthenticated remote code execution or data extraction.

SourceCodester Simple Online Food Ordering System version 1.0 contains a vulnerability allowing for SQL Injection attacks.

The Ractive.js library is vulnerable to code injection and prototype pollution, allowing for potential remote code execution.

A SQL injection vulnerability exists in the PlanController.getImmediatePlans function of the XBROTHER Dynamic Environment Monitoring System, allowing remote unauthenticated attackers to manipulate queries.

A security flaw in Alibaba Fusion Next allows for improper control of object prototype attributes, potentially leading to code injection.

A prototype pollution and code injection vulnerability exists in jQWidgets versions 24.0.0 and 24.0.1, allowing unauthenticated attackers to modify object attributes.

The itsourcecode Sales and Inventory System contains an SQL injection vulnerability that allows unauthenticated attackers to compromise database integrity.

A memory corruption vulnerability in warmcat libwebsockets allows for out-of-bounds writes, which can be triggered by a remote attacker.

A missing authentication vulnerability in the open-wearables Public Invitation-Code Redemption Endpoint allows remote attackers to bypass security controls via the code argument.

A critical deserialization vulnerability in the ggml-rpc component of llama.cpp at commit bec4772f6 allows remote unauthenticated attackers to execute arbitrary code.

A SQL injection vulnerability in the Barangay Resident Profiling Management System 1.0 allows remote attackers to bypass authorization via the ID parameter in /boarders.php.

Ghostwriter contains an authorization bypass vulnerability allowing authenticated users to access or modify sensitive report templates via user controlled keys.

A reflected cross-site scripting (XSS) vulnerability in the Brave Popup Builder plugin allows unauthenticated attackers to execute arbitrary scripts in the context of a user session.

A local privilege escalation vulnerability exists in the Linux kernel RDMA/bnxt_re component due to missing validation of hardware slot limits for Work Queue Entries.

A vulnerability in the Linux kernel TIPC component allows for an integer underflow, which can be exploited to cause a Denial of Service by congesting network connections.

A vulnerability in the Linux kernel ASoC hdac_hdmi codec allows for out of bounds memory access due to insufficient validation of enum values used for array indexing.