Vulnerabilidades

Vulnerabilidad de falta de autorización en Funnelforms Funnelforms Free funnelforms-free permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Funnelforms Free: desde n/a hasta menor o igual que 3.8.

Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce amount-left-free-shipping-woocommerce permite XSS Almacenado. Este problema afecta a Free Shipping Bar: Amount Left for Free…

MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSP360 Free Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this…

The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An unauthenticated remote attacker can send a request with a very large SEID (e.g., 0xFFFFFFFFFFFFFFFF) that causes an integer conversion/underflow in LocalNode.DeleteSess() / LocalNode.Sess() when a…

An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modification Request.

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.0, a vulnerability exists in FreeRDP’s certificate handling code on Windows platforms. The function `freerdp_certificate_data_hash_ uses` the Microsoft-specific `_snprintf` function to format certificate cache filenames without…

El módulo tts (Text to Speech) de FreePBX para FreePBX, una interfaz gráfica de usuario (GUI) basada en web de código abierto que gestiona Asterisk. Las versiones anteriores a la 16.0.5 y 17.0.5 son vulnerables a inyección SQL por usuarios autenticados con acceso de administrador. Los usuarios autenticados con acceso…

FreePBX es una interfaz gráfica de usuario (GUI) de código abierto basada en web que gestiona Asterisk. Antes de las versiones 16.0.45 y 17.0.24 del framework de FreePBX, existe una escalada de privilegios local autenticada en el script de inicio obsoleto de FreePBX 'amportal'. En la utilidad obsoleta 'amportal', la…

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell…

FreePBX Endpoint Manager es un módulo para gestionar endpoints de telefonía en sistemas FreePBX. Versiones anteriores a 16.0.96 y 17.0.1 hasta 17.0.9 tienen una contraseña predeterminada débil. Por defecto, este es un valor numérico de 6 dígitos que puede ser forzado por fuerza bruta. (Este es el parámetro…

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.

FreePBX Endpoint Manager es un módulo para gestionar endpoints de telefonía en sistemas FreePBX. Las versiones son vulnerables a omisión de autenticación cuando el tipo de autenticación está configurado como 'webserver'. Al proporcionar un encabezado de autorización con un valor arbitrario, se asocia una sesión con el…

Vulnerabilidad por falta de autorización en berthaai BERTHA AI bertha-ai-free permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a BERTHA AI: desde n/a hasta menor o igual a 1.13.

The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that…

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvailability API.

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API.

The ArtiBot Free Chat Bot for WebSites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…

Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmware = 4.7.x) were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM authentication over…

Se ha identificado una debilidad en bestfeng oa_git_free hasta 9.5. Esto afecta a la función updateWriteBack del archivo yimioa-oa9.5\servidor\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. Esta manipulación del argumento writeProp provoca una referencia a entidad externa XML. El…

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes.

Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms.

The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeo_city' shortcode in all versions up to, and including, 1.2. This is due to the plugin not properly sanitizing user input or escaping output of the 'default' shortcode attribute. This makes it possible for…

The Free Quotation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject…