Threats tagged 'exploit'

Fullhan FH8626V100 - Multiple Vulnerabilities

Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

EasyAppointments version 1.5.1 is affected by a blind SQL injection vulnerability. This flaw allows an attacker to execute unauthorized SQL queries on the backend database without direct feedback, potentially leading to data exposure or manipulation. The vulnerability specifically impacts versions up to and including 1.5.1.

miniOrange version 5.4.3 contains an unauthenticated authentication bypass vulnerability. This flaw allows attackers to bypass authentication mechanisms without valid credentials, potentially gaining unauthorized access. The issue affects versions up to and including 5.4.3. No patch or remediation details are provided in the available data. The severity is assessed as critical due to the nature of authentication bypass.

A remote code execution (RCE) vulnerability has been identified in Grav CMS version 2.0.7. This vulnerability allows an attacker to execute arbitrary code on the affected system. No specific technical details or patch information are provided.

Payload CMS versions prior to 3.73.0 contain a blind SQL injection vulnerability in the processing of 'where' filters on JSON or RichText fields using the Drizzle database adapters. This vulnerability allows attacker-controlled JSON filter input to manipulate generated JSONPath expressions, potentially exposing sensitive data. Exploit code is publicly available demonstrating this issue on Payload CMS 3.72.0 with PostgreSQL 15.

Wolf CMS version 0.8.3.1 is affected by a remote code execution (RCE) vulnerability. This allows an attacker to execute arbitrary code on the affected system remotely. The vulnerability is critical in severity and affects versions up to and including 0.8.3.1.

Bludit CMS version 3.22.0 contains a stored cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts which execute when users view the affected content. This vulnerability can lead to unauthorized script execution in the context of the affected users.

Langflow version 1.8.4 contains a critical vulnerability that allows path traversal leading to remote code execution (RCE). This flaw enables an attacker to execute arbitrary code on the affected system by exploiting improper handling of file paths.

An unauthenticated OS command injection vulnerability affects Linksys E1200 firmware versions 2.0.02 and 2.0.04 when directly connected to the LAN. This vulnerability allows an attacker to execute arbitrary operating system commands without authentication.

CubeCart version 6.7.4 contains a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. This vulnerability is identified as CVE-2026-54644 and is rated with medium severity.

CubeCart version 6.7.4 contains a stored cross-site scripting (XSS) vulnerability that allows malicious scripts to be stored and executed within the application context. This vulnerability is identified as CVE-2026-54645 and is classified as medium severity.

CubeCart version 6.7.4 is affected by a medium severity SQL-related vulnerability identified as CVE-2026-54646. No detailed technical information or patch status is available for this issue.

CubeCart version 6.7.4 contains a high-severity SQL injection vulnerability that allows attackers to inject malicious SQL code to manipulate backend database queries.

C-MOR Video Surveillance version 6.0104 and earlier contains a Cross-Site Scripting (XSS) vulnerability due to improper input sanitization of the 'size' parameter in ptzpreset.pml and the 'anyparam' parameter in show-movies.pml. An attacker can craft malicious URLs that execute arbitrary JavaScript code when visited by an authenticated user. Proof-of-concept exploit code has been published. No official patch or vendor advisory is currently available, and there is is no evidence of active exploitation in the wild.

C-MOR Video Surveillance version 6.0104 and earlier contains a directory traversal vulnerability in its web interface. This vulnerability allows unauthenticated attackers to exploit the 'cam' parameter in the show-movies.pml component to read arbitrary files on the server. Proof-of-concept code demonstrates the ability to read sensitive files such as /etc/passwd. No official patch or remediation guidance has been provided by the vendor. There is no evidence of active exploitation in the wild.

A denial-of-service (DoS) exploit targeting the Shelly Plug S Gen3 device has been reported. The exploit involves heap exhaustion caused by concurrent HTTP connections, leading to a device panic and relay shutdown. The report originates from a community forum post without official vendor confirmation or patch information.

CVE-2026-42167 is a critical vulnerability in the ProFTPD mod_sql module that allows post-authentication SQL injection, potentially leading to remote code execution (RCE).

NanaZip version 6.5 is affected by a denial-of-service (DoS) vulnerability. The issue allows an attacker to disrupt normal operation of the software, potentially causing it to crash or become unresponsive. No specific technical details or exploitation methods are provided.

A buffer overflow vulnerability exists in PCMan version 2.0.7. This vulnerability affects Windows XP Professional Service Pack 2 and Service Pack 3 environments. Exploit code is known but there is no indication of active exploitation in the wild. The severity is assessed as medium based on available information.