Vulnerabilidades

Vulnerabilidad de control de permisos en el módulo de gestión de ventanas. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad.

Vulnerabilidad de control de permisos en el módulo de gestión de paquetes. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio.

TUUI es un cliente MCP de escritorio diseñado como una herramienta de integración de utilidad unitaria. Versiones anteriores a 1.3.4, existe una vulnerabilidad crítica de Ejecución Remota de Código (RCE) en Tuui debido a una falla insegura de Cross-Site Scripting (XSS) en el componente de renderizado de Markdown. Tuui…

Se ha identificado una vulnerabilidad en TrippWasTaken PHP-Guitar-Shop hasta 6ce0868889617c1975982aae6df8e49555d0d555. Esta vulnerabilidad afecta código desconocido del archivo /product.php del componente Página de Detalles del Producto. La ejecución de la manipulación del argumento ID puede conducir a inyección SQL.…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Stored XSS vulnerability was discovered in Open-WebUI's Notes PDF download functionality. An attacker can import a Markdown file containing malicious SVG tags into Notes, allowing them to execute…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata…

open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The plupload_file_upload function handles these file uploads and…

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative endpoints. The application…

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddleware, authenticates users as ionadmin if the REMOTE_ADDR property in request.META is set to 127.0.0.1, to 127.0.1.1, or to ::1. Any user with local access to the…

The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide recommends changing default credentials; however, a…

Se ha encontrado una falla en dayrui XunRuiCMS hasta la versión 4.7.1. Esta vulnerabilidad afecta a código desconocido del archivo admin79f2ec220c7e.php?c=API&m=test_site_domain del componente Project Domain Change Test. Esta manipulación del argumento v causa falsificación de petición del lado del servidor. Es…

Se ha identificado una vulnerabilidad en dayrui XunRuiCMS hasta la versión 4.7.1. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=0 del componente 'Add Display Name Field'. La manipulación del argumento data[name]…

Se ha descubierto una vulnerabilidad de seguridad en dayrui XunRuiCMS hasta la versión 4.7.1. Afecta a una función desconocida del archivo /admind45f74adbd95.php?c=email&m=add del componente Email Setting Handler. Realizar una manipulación resulta en falsificación de petición del lado del servidor. La explotación…

Se detectó una vulnerabilidad en dayrui XunRuiCMS hasta la versión 4.7.1. Esto afecta una parte desconocida del archivo /admin79f2ec220c7e.php?c=api&m=demo&name=mobile del componente “Página de Enlace de Nombre de Dominio”. La manipulación resulta en cross-site scripting. El ataque puede realizarse de forma remota. Un…

Se ha detectado una vulnerabilidad de seguridad en dayrui XunRuiCMS hasta la versión 4.7.1. Afectada por este problema es alguna funcionalidad desconocida del archivo /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 del componente “Add Data Validation Page”. La manipulación del argumento data[name] conduce…

The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0. This is due to the plugin not verifying that a user has the required capability to perform actions in the "cptui_process_post_type" function. This makes it possible for authenticated…

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable() function. This makes it possible for authenticated attackers, with contributor…

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter.

A Blind SQL injection vulnerability has been identified in QuickCMS. Improper neutralization of input provided by a high-privileged user into aFilesDelete allows for Blind SQL Injection attacks. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable…

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4. This is due to insufficient capability checks in the REST API endpoints under the 'fl-controls/v1' namespace that control site-wide Global Presets. This makes it possible…

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce validation on the SurveyJS_DeleteSurvey AJAX action. This makes it possible for unauthenticated attackers to delete surveys via a…

The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles() function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths into the orders that…

UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Vulnerabilidad de control de permisos en el módulo Settings. Impacto: la explotación con éxito de esta vulnerabilidad puede afectar a la confidencialidad del servicio.