Threat database

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

The mpp Elixir library version 0.4.0 and other versions from 0.2.0 up to but not including 0.6.0 contain a vulnerability in the cosign_fee_payer/3 function. When the server acts as the fee payer, it does not validate gas-related parameters before cosigning transactions, allowing a malicious client to specify arbitrarily high gas fees. This causes the server to pay inflated gas costs from its own wallet, leading to direct financial loss and potential denial of service if funds are depleted.

The mpp Elixir 0.4.0 server, when acting as the fee payer, copies client-supplied EIP-2930 access lists directly into cosigned fee-payer transactions without validation. This allows an attacker to inflate transaction fees by including fabricated access list entries, causing the fee-payer to pay significantly higher gas costs without additional on-chain work. The attack can increase gas costs by approximately 7.4 times, severely impacting operational costs and profit margins for low-cost transactions.

The khoj application has an unauthenticated path traversal vulnerability in its /home/{file_path:path} endpoint. This endpoint serves static files by concatenating user input directly with a home directory path without any path traversal filtering, normalization, or authentication. An attacker can exploit this to read arbitrary files from the server filesystem, including sensitive configuration and system files.

Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.

GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible upload/ticket directory and executed when accessed.

RustDesk versions prior to 1.5.0 contain a vulnerability in the Cliprdr message handler on Linux and macOS where file transfer permissions are not properly validated for incoming file clipboard messages. This allows authenticated remote peers, even if file transfer permissions are disabled, to place files onto the host clipboard and retrieve copied files and clipboard contents from the process-wide clipboard cache.

RustDesk on Windows versions before 1.5.0 does not properly enforce the one-way file transfer setting for peer clipboard file requests. This allows authenticated peers to read files from the host clipboard by sending specific messages that request clipboard file data. The vulnerability has a low severity score and does not impact integrity or availability.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

A vulnerability in krayin laravel-crm up to version 2.2.5 allows remote attackers to manipulate the role_id argument in the User Management component, leading to improper privilege management. This issue affects the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php. The vulnerability has a CVSS score of 6.3 and is addressed by upgrading to version 2.2.6.

A cross-site scripting (XSS) vulnerability exists in krayin laravel-crm versions up to 2.2.5 in the ConfigurationForm::rules function related to upload functionality. This vulnerability can be exploited remotely and has a low severity score. The issue is fixed in version 2.2.6.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from * before 3.7.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - UploadWizard Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - Wikibase Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This issue affects Wikipedia Android App: main.

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from * before 1.46.1, 1.45.5, 1.43.10.