Vulnerabilidades

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.

Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be executed in “/html/<filename>.html”.

Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.

Se encontró una vulnerabilidad en mirweiye wenkucms hasta la versión 3.4. Esto afecta a la función createPathOne del archivo app/common/common.PHP. La manipulación resulta en inyección de comandos. El ataque puede lanzarse de forma remota. El exploit se ha hecho público y podría utilizarse.

Se detectó una vulnerabilidad en el software de gestión de proyectos pmTicket hasta 2ef379da2075f4761a2c9029cf91d073474e7486. El elemento afectado es la función loadLanguage del archivo classes/class.database.php del componente Manejador de Cookies. La manipulación del argumento user_id resulta en deserialización. El…

Se ha encontrado una vulnerabilidad en code-projects Project Monitoring System 1.0. Afectada es una función desconocida del archivo /onlineJobSearchEngine/postjob.php. Dicha manipulación del argumento txtapplyto conduce a cross site scripting. El ataque puede ser lanzado remotamente. El exploit ha sido revelado al…

Una vulnerabilidad de seguridad ha sido detectada en Projectworlds Online Tours and Travels 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /admin/change-image.PHP. La manipulación del argumento packageimage lleva a una carga sin restricciones. El ataque puede ser iniciado…

Se ha encontrado una vulnerabilidad en code-projects Project Monitoring System 1.0. El elemento afectado es una función desconocida del archivo /login.php. Esta manipulación del argumento username/password causa inyección SQL. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser…

Una vulnerabilidad fue identificada en Projectworlds Online Shopping System 1.0. Esto afecta una parte desconocida del archivo /store/cart_add.PHP. Dicha manipulación del argumento ID conduce a inyección SQL. El ataque puede ser realizado de forma remota. El exploit está disponible públicamente y podría ser utilizado.

Una vulnerabilidad ha sido encontrada en Projectworlds Visitor Management System 1.0. Afectada es una función desconocida del archivo /myform.php del componente Add Visitor Page. La manipulación del argumento Name conduce a cross site scripting. La explotación remota del ataque es posible. El exploit ha sido divulgado…

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above,…

Una vulnerabilidad de Contaminación de Prototipos en la función util-deps.addFileDepend de las versiones de magix-combine-ex hasta la 1.2.10 permite a los atacantes inyectar propiedades en Object.prototype mediante el suministro de una carga útil manipulada, causando denegación de servicio (DoS) como consecuencia…

El paquete csvtojson, una herramienta para convertir datos CSV a JSON con capacidades de análisis personalizables, contiene una vulnerabilidad de contaminación de prototipos en versiones anteriores a la 2.0.10. Este problema surge debido a una sanitización insuficiente de nombres de encabezado anidados durante el…

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Vulnerabilidad de credenciales codificadas de forma rígida en weDevs WP Project Manager permite recuperar datos sensibles incrustados. Este problema afecta a WP Project Manager: desde n/d hasta 2.6.25.

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be…

Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes are attacker-controlled, enabling precise memory corruption.

Parameters are not validated or sanitized, and are later used in various internal operations.

The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.

A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification.…

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is…

The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unprivileged attacker can request installation of crafted malicious PKG file by racing to connect to the daemon when other app spawns it as root. This results in local privilege escalation to root…

The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its bundled with. A local unprivileged attacker can register this XPC service globally which will inherit TCC permissions of the application. Lack of validation of connecting client allows the attacker…

Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.6.

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6.