Vulnerabilidades críticas.

Untrusted Data Deserialization in MediaWiki Import

Hard‑coded admin credentials allow unauthorized access

SQL Injection vulnerability in Cargo Extension

Image Tag Poisoning via Checkpoint Import

Improper trust of CDI annotations during restore

SQL Injection in MediaWiki Cargo Extension

SSRF leads to privilege escalation in UniFi Protect

Improper Access Control allows unauthorized device changes

Open Redirect Enables Privilege Escalation

Improper Restriction of XML External Entity

Unsafe Lambda deserialization leads to arbitrary code execution

Pre-authentication Remote Access Bypass Vulnerability

Improper Input Validation Allows Unauthorized Access

Underscore Header Spoofing Bypass in Traefik

Unauthenticated Arbitrary File Upload via Custom Fonts

Unauthenticated SQL Injection in Password Reset

Stored XSS via Git filename in commit diff

XXE via unrestricted XSLT transformation in HAPI FHIR

Path Traversal in BOSH CLI blobs.yml

Unauthenticated Arbitrary File Upload Leads to RCE

XML Injection in PAN-OS Large Scale VPN

Path Traversal Code Execution in IntelliJ IDEA

Integer overflow leads to heap overflow

Out-of-bounds read in FreeRDP GFX pipeline

Unauthenticated arbitrary file upload leading to RCE

Unauthenticated Arbitrary File Deletion in Helix Ultimate

Integer overflow causing memory exhaustion in gawk

Integer overflow in gawk do_sub() causing heap corruption

Regex Trie Overflow Causes Incorrect Matches

Unauthenticated Access to Doris FE Administrative APIs

Authentication Bypass via Direct Database Access

SQL Injection via Table Catalog Refresh

OS Command Injection in Apache Kylin API

Row stride underflow leads to memory disclosure

Unanchored regex enables certificate impersonation

Missing mandatory claim check in OIDC token verification

Argument Injection via Query String in Symfony

Unrestricted File Upload Enables Arbitrary Code Execution

Improper Output Encoding leads to Arbitrary Code Execution

Improper Input Validation Arbitrary Code Execution

Improper Path Restriction leads to Arbitrary Code Execution

Incorrect Authorization Privilege Escalation in ColdFusion

Code Injection leads to arbitrary code execution

SQL Injection causing arbitrary code execution

Template Name Injection via Unescaped Single Quote

Sandbox Bypass via template_from_string in Twig

Improper Input Validation Leads to Arbitrary Code Execution

Sandbox bypass via deprecated internal wrappers

Sandbox bypass via stringable mapping keys

Sandbox Bypass via Traversable __toString Coercion

Remote Code Execution via Snowflake JDBC driver

Refresh Token Grant Bypass Allows Token Minting

Cross-tenant workflow backup exposure and deletion

Open Redirect and SSRF via ProxyShare URL

Argo Workflows allow arbitrary pod patch via ArtifactGC

SSTI leads to code execution in Jupyter Enterprise Gateway

YAML injection via untrusted environment variables in Kubernetes manifests

Unauthenticated Password Change Allows Authentication Bypass

SQL Injection in GisLab Laboratory Management System

Heap-based buffer overflow in RSA decryption

Buffer Underflow via -Xtrace Argument Tracing

Hard-coded authentication token bypasses management endpoints

Unauthenticated Local Exploit Compromises Oracle PL Analytics

Unauthenticated Remote Code Execution via TCP 9002

Unauthenticated OS Command Injection on TCP port 9002

OS Command Injection via OCPP GetDiagnostics

XML External Entity (XXE) via XmlDecoder

Sandbox Bypass Allows Unrestricted Shell Access

Authentication Bypass Allows Admin Token Theft

Deterministic UDP Port Assignment Facilitates Cache Poisoning

Host filesystem exposure via virtiofsd argument injection

Improper Authorization Enables Privilege Escalation over Network

Improper Authorization Leads to Privilege Escalation in Azure DNS

Improper Authentication Privilege Escalation in Azure Key Vault

Improper Access Control Privilege Escalation in Azure App Service

Certificate Host Mismatch Validation Flaw in Thrift

Heap-based Buffer Overflow in Thrift C++ bindings

Out-of-bounds Read in Apache Thrift c_glib

Out-of-bounds Read due to Improper Quantity Validation

Improper Input Validation in Apache Traffic Server

PHP Object Injection Leads to RCE

Privilege Escalation via registration usergroup IDs

Unauthenticated SQL Injection in Gridbox

Unauthenticated Arbitrary Password Reset in Gridbox

Account takeover via socialLogin in Gridbox

SSRF in WebSphere SIP Servlet

Improper Authorization Enables Arbitrary Code Execution

Improper backslash escaping causes SQL injection

Out-of-bounds write via bccomp() leading to memory corruption

SQL Injection in UMAI Vision Traffic Analysis

Persistent DNS pollution and service crash

Unauthenticated Remote Code Execution via Deserialization

Improper Protection of Alternate Path in Apache Tika

Unauthenticated RCE via default H2 console

Unauthenticated tool invocation bypass via legacy API

SQL parsing bypass enables write in read-only transaction

Unrestricted Upload of Malicious Files

Privilege Escalation via Cluster-Scoped Resources

LDAP mixed authentication OTP bypass

LLM-enabled sandbox escape leading to RCE

Remote Code Execution via LightGlue trust_remote_code bypass

Command Injection via Unverified adb Messaging

Missing Topic ACLs Enable Wildcard Access

Unauthenticated RCE via ai_cmd utility

Hardcoded API Keys Exposed via Verbose Errors

TrustAllCerts with hard‑coded DES key enables MITM

Unauthorized NVRAM write via exposed diagnostics

Global API Token Bypass Enables Free Plan Creation

No Bot Mitigation on Registration Endpoint

Unauthenticated OS Command Injection in LoadMaster API

Unsafe ByteBuf fallback causes memory corruption and key leakage

Use‑after‑free sandbox escape in Chrome FileSystem

Sandbox Escape via Malicious Video Codec

Printing Input Validation Leads to Sandbox Escape

Use-After-Free Ozone Sandbox Escape in Chrome

Sandbox Escape via ANGLE Input Validation Flaw

Use-after-free sandbox escape in Chrome

Use-after-free in Chrome Autofill leads to sandbox escape

Insufficient Drag-and-Drop Validation Leads to Sandbox Escape

Insufficient ANGLE input validation leads to sandbox escape

Enterprise Reporting input validation leads to sandbox escape

Authentication Bypass Spoofing in Azure HorizonDB

Unauthenticated Profile Creation Enables PHP Upload

Client secret overwrite enables unauthorized token

Hard-coded key enables unauthenticated file download

Path Traversal Arbitrary File Write/Read in Altium Enterprise Server

Remote Command Execution in Open XDMoD

Unauthenticated Remote SQL Injection Vulnerability

Mass Assignment in Variable Update Endpoint

Plaintext Credential Validation Without Rate Limiting

Mass Assignment Leads to Workspace Isolation Bypass

Unauthenticated Remote Code Execution via Custom Function

Authorization Bypass via User-Controlled Key

Buffer Overflow in Perl DBI Error Handling

Remote Authentication Bypass creates admin accounts

Stored XSS in Adobe Experience Manager Forms

Improper Input Validation RCE in ColdFusion

QTS vulnerability patched in version 5.2.7.3256

Remote buffer overflow leads to memory corruption

Buffer overflow in File Station 5

Improper Credential Validation in Commvault SecurityIQ Integration

Remote Code Execution via wsrep_notify_cmd in MariaDB

Improper Access Control Allows Token Bypass

XXE via insecure SAXParserFactory in Apache CXF

Audience claim not validated in JwtAccessTokenValidator

Improper IP validation bypass in OAuth filter

Hard-coded OAuth credentials enable remote takeover

Unauthenticated AES Key Extraction via Round-Trip

Command Injection via CONNECT REST Engine

SQL Injection despite mysql_real_escape_string in big5 charset

Use-after-free in WebGPU graphics component

Out-of-Bounds Write Enables Remote Code Execution

DataSource API Authorization Bypass Disclosure

Incorrect Authorization in /v2 experimental interface

LDAP DN Injection Allows Authentication Bypass

Integer Underflow causes buffer overread

Out-of-bounds Read Buffer Overread in RTI Connext

Critical deserialization RCE in Windchill/FlexPLM

Authentication Bypass via Missing Active Field

Issuer Claim Bypass in Opaque Token Validation

Remote Deserialization Grants Full System Access

Use-After-Free via DELETE connection command

Authentication Bypass via Direct Database Access

JWT Auth Plugin Authentication Bypass

OpenID Connect Header Spoofing in Apache APISIX

Untrusted pointer dereference leads to RCE

Authentication Bypass in jwe-decrypt Plugin

CSRF in cas‑auth plugin enables auth hijacking

Stack buffer overflow via wanMTU parameter

Stack buffer overflow in AdvSetMacMtuWan

Stack Buffer Overflow via MAC parameter

Stack Buffer Overflow in wanSpeed Parameter

Unauthenticated Arbitrary File Upload Leading to PHP Execution

Arbitrary File Upload Enables PHP Execution

Use-After-Free DoS in libxml2 XML parsing

Host Header Injection Auth Bypass in LiteLLM

Insecure default serializer enables DoS attacks

Credential Exfiltration via Bypassed HTTP Request Domains

Unauthenticated MCP endpoint enables browser control

SQL Injection in TimescaleDB/Postgres Node

Authenticated Prototype Pollution leading to RCE

Authenticated workflow bypass enables remote code execution

SQL Injection via Malicious Data Table JSON in Source Control

Improper Access Control Allows Credential Hijacking

Editor can access other users' credentials

WebFetch bypass enables covert data exfiltration

Unsafe AST validator leads to sandbox escape

Path traversal bypass in StripPrefix middleware

Wildcard TLS bypass of mutual TLS enforcement

HTTP/3 TLS selection bypasses router mTLS enforcement

Improper lock release causing race condition

SSRF via Outbound HTTP Host Filter Bypass

Unauthenticated pre-auth SQL injection in Cacti

Command Injection in Cacti graph generation

Heap buffer overread in PKCS7 envelope parsing

Sandbox Escape via Working Directory Path Manipulation

Symlink Canonicalization Bypass Leads to Arbitrary Write

Path Traversal via S3/Iceberg Router Bypass

Use-after-free in PQC hybrid key-share handling

Unauthenticated arbitrary file upload via path traversal

Path Traversal Arbitrary File Write RCE

Embedded‑null hostname causes silent authority rebinding

Host Command Execution via Dokku Cron Plugin

Unauthenticated S3 Pre-signed URL Generation

Unauthenticated Read/Write Access to All Documents

Unauthenticated file upload leads to RCE

Path Traversal in HTTP Tool URL Builder

Memory overflow DoS in NetScaler Gateway

Memory overflow causing DoS in NetScaler ADC

Memory safety bugs leading to potential code execution

Unauthenticated Access to MCP Resources via Streamable Endpoint

GPU use-after-free leads to sandbox escape

Dawn type confusion enables sandbox escape

Sandbox Escape via ANGLE Input Validation Flaw

Skia input validation bug enables sandbox escape

Use-After-Free Sandbox Escape in Chrome

Bluetooth use-after-free sandbox escape in Chrome

Sandbox Escape via Crafted HTML in Chrome

Improper input validation leads to sandbox RCE

Insufficient input validation enables sandbox escape

Mojo policy enforcement flaw enables sandbox escape

DevTools sandbox escape via crafted HTML

Embedded malicious code in Bitwarden CLI

Stack buffer overflow in hashcat mangle_to_hex functions

Heap Buffer Overflow in Kerberos Hash Parser

Heap Buffer Overflow in hashcat PKZIP parser

Stack overflow in WebCam Server Login

Stack overflow in WebCam Server Login

Authorization bypass leads to buffer overflow

SuppressedError sandbox escape leads to arbitrary code execution

SQL Injection in Oracle node Limit field

Cross‑Site Scripting via crafted OAuth client

Unauthenticated Restore Endpoint Allows Remote Code Execution

Improper Input Validation Allows Hook Metadata Escalation

Privilege Escalation via Untrusted Webhook Wake

PHP stream wrapper bypass leading to RCE

TSIG authentication bypass in CoreDNS transports

Missing changeSessionId leads to session fixation

User-ID Authentication Portal Buffer Overflow

Use‑After‑Free Bypasses Site Isolation

Metadata injection leads to arbitrary file write via ExifTool

Out-of-bounds read in IDManifest string handling

Unchecked shift leads to undefined behavior

Server-Side Template Injection Allows Remote Code Execution

Improper Access Controls on System.User Entity

Server-side request forgery in notebook viewer

SQL Injection in LiteLLM API Key Check

Arbitrary Local Code Execution via Deep Links

Recreation of deleted sessions in Apache::Session

Buffer overflow in crypto_sign_open (mlen underflow)

URL Validation Bypass Leading to SSRF

Path Traversal to Arbitrary Code Execution

OAuth email verification bypass allows account takeover

Improper sighash validation leading to consensus split

Invalid sighash type causes consensus split

SQL Injection in pgx Simple Protocol Dollar-Quoted Strings

Authenticated Server-Side Request Forgery in n8n-MCP

Unauthenticated PR Docker Build Remote Code Execution

SAML SSO Account Takeover via Malicious IdP

IMAP command injection via unchecked string input

Unvalidated Config JSON Enables Remote Code Execution

SQL Injection via NUL Byte in PDO Firebird

PHP SOAP use-after-free Remote Code Execution

Use-After-Free in SoapServer Session Persistence

Out-of-bounds read in PHP mbstring functions

Path Traversal in FormFlash component

Sandbox Escape via Malicious Filter Leads to Code Execution

Insecure Direct HTTP Client Calls Bypass Security Wrapper

Insecure Default Initialization Allows API Authentication Bypass

SQL Injection via graph container in Pandora FMS

Unauthenticated File System Access in WGDashboard

Arbitrary Command Execution via Malicious Button

IKEv2 buffer overflow remote code execution

DNS Proxy Buffer Overflow Leading to DoS/RCE

Authentication Bypass in GlobalProtect VPN

PAN-OS IKEv2 Server-Side Request Forgery

SQL Injection in CKAN datastore_search_sql

Authorization Bypass via datastore_search_sql exposing private data

Credential Harvesting Mechanism in PyTorch Lightning

Unauthenticated Remote Command Execution via Cron Modification

Improper sanitization leads to arbitrary command execution via uninstall scripts

Remote Code Execution via unsanitized data parameter

Arbitrary Code Execution via Malicious Yarn Configuration

Improper HTTPRoute Access Bypasses REST Provider Restriction

Missing Authentication Allows Sensor Data Injection

OS Command Injection Allows Root Access

Hard-Coded Admin Credentials in ScadaBR

Integer wrap causes heap out-of-bounds read/write

Deep copy pointer overwrite causes DoS and RCE

Cache Poisoning via Authority Section Promiscuous Records

Unauthenticated REST API Access Bypass in Cisco Secure Workload

Integer overflow in hpcups causes privilege escalation

Privilege escalation via Redis enable misuse

LDAP injection allows arbitrary certificate retrieval

Command Injection leads to Remote Code Execution

Authentication Bypass via Alternate Path in Azure AD B2C

Unrestricted file upload enables remote code execution

Privilege escalation via improper ARM authentication

Heap buffer overflow in Perl regex compilation

Symlink Extraction Path Traversal Vulnerability

Stack-based buffer overflow in BGP decoder

OS command injection in Juniper plugin

SQL Injection in com_finder Search Query

SQL Injection via Unvalidated Order Clause in com_tags

Improper Access Control to com_config Webservice

Local File Inclusion via Input Validation

Heap buffer overflow via BGP AS_PATH integer overflow

Privilege Escalation via com_users Batch Task

Privilege Escalation via Joomla com_users Batch

Improper Access Check Privilege Escalation via com_users

Off‑by‑one heap overflow in FastNetMon buffer

Cross-Site WebSocket Hijacking in Dozzle

Authentication Bypass Allows Unauthorized File Access

Command injection via unescaped single quotes

Compromised Nx Console version published in marketplace

Remote Command Execution via check password script

SSRF in External Reference URL Probe

Metrics Exporter Privilege Escalation via SET ROLE

Insecure deterministic AES-192-CBC encryption without MAC

Arbitrary File Read via Git symlink in stacks

Use-After-Free Sandbox Escape via Dawn in Chrome

Improper Authorization Header Base64 Validation Bypass

MQTT Message Command Injection to Root

Unauthenticated Access to Credentials via acer_cgi.log

Hardcoded AES Key Enables Backup Manipulation

Unauthenticated Relative Path Traversal File Deletion

Unauthenticated OS Command Injection via Console WebUI

OS Command Injection in Waterfall Console WebUI

OS Command Injection in Console WebUI�

Authentication Bypass Using Alternate Path in Console WebUI

OS Command Injection via Console WebUI

Unauthenticated OS Command Injection in Console WebUI

Unauthenticated OS Command Injection in Waterfall WebUI

OS Command Injection via Console WebUI

Unauthenticated access via default UCP credentials

Out-of-bounds heap write in planar bitmap decoder

test123

Improper XML External Entity Restriction in RTI Connext

OAuth account takeover via email linking

Stored XSS in Blog Tag Names

Stored Blind XSS in Logs Interface

Stored Blind XSS in Backup Filename

Stored DOM XSS in Menu Management

Stored DOM-based XSS in Menu Management

Stored DOM‑based XSS in CI4MS page management

Stored XSS in CI4MS Categories Section

Stored XSS in CI4MS Blog Posts

Stored XSS in blog category title

Stored XSS in CI4MS backend user management

Improper PGP Key UID Validation Allows Upload

Account takeover via GINA initialization reset

Improper authentication of S/MIME inner message

OpenAPI Path Parameter SSRF via URL Traversal

Arbitrary Python Code Execution via field_type eval

Open Redirect Token Exfiltration Allowing Account Takeover

Stored XSS allowing CSRF in Hoppscotch

Unauthenticated Workflow Execution via Manual API

Privilege escalation via improper authorization in Azure AI

Privilege Escalation via Improper Authorization in AKS

SSRF leads to privilege escalation in Azure Databricks

SSRF bypass due to empty IP blacklist

Unauthenticated job API bypass leading to RCE

SSRF Privilege Escalation in Microsoft Bing

SSRF via /v1/sys/proxy endpoint allows internal service access

Unauthenticated SQL Injection exposes password hashes

Authentication Bypass in Web UI

SQL Injection to RCE via PostgreSQL COPY

Remote Command Execution via /goform/formDia

Login Verification Bypass in Kaleris YMS

Constructor Call Bypass Allows Global Property Injection

Attribute Filter Bypass via getattr/setattr Leads to RCE

Unauthenticated RCE via unsanitized expect command

Stored XSS via Profile Name Injection

Unrestricted File Upload leading to RCE

Remote Code Execution via Redis/Shelf Storage

Remote Code Execution in timezone conversion

SQL Injection in queryview.php (EcclesiaCRM)

Redirect bypass SSRF in pyLoad downloader

Incorrect Authorization via Script Alias CGI Bypass

Memory safety bugs could lead to code execution

Memory safety bugs could allow code execution

Path Traversal in Action Orchestrator

Cookie Decryption Fallback Allows Session Forgery

Unrestricted Doctype Access via API

Pre-authentication RCE via unsafe Java deserialization

Access Control Bypass in Puck API Endpoints

Heap overflow converting large OCTET STRING to hex

Arbitrary Host File Access via symlink in sandbox-expose

TLS 1.3 client authentication bypass via early data

Stored XSS Remote Code Execution in SiYuan

Induction variable overflow causing memory corruption

SQL Injection allowing arbitrary SQL execution

SSRF via PDF generation in ERPNext

Arbitrary Host File Access via symlink in sandbox-expose

TLS 1.3 client authentication bypass via early data

Stored XSS Remote Code Execution in SiYuan

Induction variable overflow causing memory corruption

SQL Injection allowing arbitrary SQL execution

SSRF via PDF generation in ERPNext

Buffer Overflow in formSetCfm via funcname parameters

Sandbox bypass using frame traversal chain

Buffer overflow via non-contiguous buffer in Hash.update

Directory Authorization Bypass Enables File Access and Execution

Proxy Bypass via Loopback Hostname Normalization

Password hash leak via crash reporting

LDAP injection in ApacheAuthenticate allows authentication bypass

Pre-Auth RCE via /terminal/ws WebSocket

Insecure Default Initialization Allows Authentication Bypass

Winch compiler out-of-bounds memory access

Arbitrary Shell Command Injection via Workflow Execution

Heap out-of-bounds write in DecodeObjectId

ECDSA verification accepts undersized digests

Supply Chain Attack via Untrusted Templates

Heap buffer overflow in DTLS 1.3 ACK processing

SNI extension buffer overflow via ECH

Out-of-bounds read in dual-algorithm CertificateVerify

Heap Use-After-Free in NASM Response File

SQL Injection in instructorClasses.php

SQL Injection via subjcode Parameter

SQL Injection in newCourse.php coursename parameter

SQL Injection in scheduleSubList.php parameter

SQL Injection via new_password parameter

Unauthenticated File Write via Install Directory

Predictable password reset token without expiration

Server-Side Request Forgery via Arbitrary API URLs

Authorization bypass in goshs state-changing routes

SMB Response Out-of-Bounds Remote Code Execution

Out-of-bounds write in Cisco ASA WEB module

Improper Cryptographic Signature Verification in Cortex XSOAR

SQL Identifier Injection in SQLiteConversationStore

Reflected XSS in Adobe Connect

Reflected XSS vulnerability in Adobe Connect

DOM-based Cross-Site Scripting in Adobe Connect

Deserialization of Untrusted Data RCE

Deserialization of Untrusted Data leads to RCE

Unauthenticated NTLMv2 Hash Leak via .NET Remoting

Unauthenticated SOAP Endpoint Leaks NTLM Hashes

Unauthenticated Arbitrary File Read via ffmpeg Argument Injection

Path normalization bypass enables authentication bypass

Buffer overflow in Zlib::GzipReader

SQL Injection in Dataset Export

SQL Injection in DataEase datasource update

SQL Injection in CubeCart prior to 6.6.0

Unauthenticated Arbitrary SQL Command Execution

Out-of-bounds read during RDP capability exchange

Command injection in ODT to PDF conversion

Out-of-bounds Read in pre-authentication RDP parsing

Out-of-bounds read in OSCORE CBOR handling

Integer Underflow in SOAPAction Header Parsing

Arbitrary Code Execution via protobuf type injection

Stack-based buffer overflow in VPN client

Command Injection in ADM PPTP VPN Client

Non‑expiring 8‑digit password reset tokens enable takeover

RCE via org_to_asn transformer and Docker escape

LDAP Injection Authentication Bypass

Symlink Escape Enables Arbitrary File Write

Unauthenticated arbitrary file upload for RCE

Authorization Bypass Allows OAuth Token Theft

Error-based SQL injection in openid.assoc_handle

Time-Based SQL Injection in registration.soap.php

Remote Authentication Bypass in HPE AutoPass

Buffer overflow via uncontrolled picName in sprintf

Buffer overflow via userInfo in addAuthUser

Buffer overflow in getMibPrefix via nptr

Buffer overflow via unvalidated pPortMapIndex

Buffer overflow via unchecked gstup/gstdwn concatenation

SQL Injection vulnerability in TracerStudy modal_view

SQL Injection in recordstudent_edit.php

SQL Injection in recordteacher_edit.php

SQL Injection in myitem_reuse.php

SQL Injection vulnerability in advance_search.php

Blind SSRF via openid_url in Chamilo

Insecure Deserialization Allows Logic Modification

UserInfo buffer overflow in addWewifiWhiteUser

SQL Injection in admin edit_tecnical_user.php

SQL Injection vulnerability in edit_employee.php

SQL Injection vulnerability in manage_user.php

SQL Injection via view_category.php parameter

SQL Injection vulnerability in view_product.php

SQL Injection in view_receipt.php

SQL Injection in view_supplier.php

Arbitrary File Deletion via MmsProvider Path Traversal

SQL Injection in trainer_search.php

SQL Injection in edit-orders.php endpoint

SQL Injection in view-ticket.php

SQL Injection in view-ticket-admin.php endpoint

SQL Injection in cancel-order.php endpoint

Improper Authorization in GitHub Trigger Control

Authentication Bypass Enables Unauthorized Admin Access

Unauthenticated Remote Command Execution via reset_pj.cgi

Stack Buffer Overflow via curTime Parameter

Stack buffer overflow via curTime parameter

Stack buffer overflow in DIR-513 via curTime

Stack buffer overflow via curTime QoS parameter

Stack Buffer Overflow in D-Link DIR-513

Stack buffer overflow via curTime parameter

Arbitrary File Write leading to Remote Code Execution

Unauthenticated MedEx Token Disclosure via Callback

Unauthenticated RCE via unsafe deserialization in server RPC

Missing Authorization leads to authentication bypass

Unauthenticated RCE via SNMP private community

Hardcoded SSH credentials allow privileged access

Weak default password allows remote SSH login

Hardcoded FTP credentials lead to root code execution

Hardcoded admin credentials accessible via Telnet

PDF encryption password leads to OS command execution

Unauthenticated Core Federation Connection Exploit

Session Token Improper Invalidation Allows Persistent Sessions

Arbitrary Read/Write Vulnerability in Nil Hardware Editor

Remote Code Execution via SQL Injection

SSTI leads to arbitrary PHP file write

Twig Function Blocklist Bypass Leading to Remote Code Execution

Stored XSS in Blog Post Title

Improper Input Validation in Files Application

HTTP Request Smuggling via Upgrade Header

HTTP Request Smuggling in Pingora

Hardcoded plaintext passwords in routing daemons

Out-of-bounds write in lwIP DNS resolver

Arbitrary File Write via Path Traversal

Unauthenticated File Upload Leads to Remote Code Execution

Privilege Abuse via API Sync Loop

Insufficient password hash enables offline brute‑force

CSRF leading to privilege escalation via URI handler

Arbitrary File Read via OpenMQ Config Parsing

SQL Injection in sort.field parameter

Password reset tokens never expire, leading to account takeover

Authentication Bypass via Empty Caller ID

Unauthenticated WebSocket Access Allows Station Impersonation

Authentication Bypass Causes Sensitive Data Exposure

Integer overflow leads to HTTP request smuggling

Unauthenticated SQL Injection in Chartbrew

SQL Injection in Ghostfolio getHistorical method

Prototype Pollution in oRPC JSON Deserializer

SQL injection via unvalidated table name

Path Traversal in OpenChatBI save_report tool

JWT 'alg:none' Signature Verification Bypass

Shell Runtime Command Injection via HTTP Header

Zip Slip arbitrary file overwrite via backup restore

Unauthenticated WebSocket Access Allows Charger Impersonation

Unauthenticated WebSocket Access Allows Station Impersonation

Critical Authentication Bypass due to Missing Await

Bypass 2FA and login deactivated accounts via DDP Streamer

Prototype Pollution in Immutable.js merge APIs

OS Command Injection via PingTestSet endpoint

Predictable Session ID Leads to Session Hijacking

Unauthenticated File Upload Bypass via MIME Spoofing

Unauthenticated Access to NVIDIA NIM Router Endpoints

PostgreSQL Expression Injection Remote Code Execution

Improper audience validation in social auth adapters

Potential integer overflow causing undersized output buffers

Unauthenticated Remote Stack Buffer Overflow

Version range vulnerability in Apache IoTDB

Improper Input Validation in Apache IoTDB

SQL Injection via promo_send in calculate_discount.php

Path Traversal leads to arbitrary file read

SQL Injection in TimescaleDB Export Module

Insufficient validation on SSE endpoint allowing unauthorized injection

Session ID Hijacking Allows Authentication Bypass

Unauthenticated Session Creation Allows Resource Abuse

Unauthenticated OAuth callback token forgery

MongoDB Query Operator Injection via Service ID

Session Token Exfiltration via redirectClassNameForKey

Unauthorized read/modify/delete of internal classes

Authentication Bypass in Embedded SwiFTP FTP Server

Default Superuser Credentials in netbox-docker

Path Traversal Leads to Privilege Escalation

OIDC misconfiguration leads to unauthorized access

SQL Injection via Dot-Notation Sort Parameter

Arbitrary code execution via forked PRs

SQL Injection in PostgreSQL Increment Operations

SQL Injection via Increment on Nested Fields

OS Command Injection via WebSocket Shell

SQL Injection in Frappe endpoint

Arbitrary Code Execution via Malicious pyproject.toml

Supply chain tag poisoning enables code execution

Blind SSRF via OTP image parameter

Hard-coded password allows unauthorized access

Command Injection via enable_echo_server port

Command Injection in set_upgrade Function

Command Injection via M.get_system_log Parameter

Broken Cryptography Allows Authentication Bypass

Hard-coded Credentials Allow Account Takeover

Hard-coded constants enable data disclosure and account takeover

Stack buffer overflow in DIR-513 wizard mode

Dangling Symlink and Hardlink TOCTOU Bypass

Unauthenticated Account Takeover via Pattern-Matching Login

Unauthenticated Web HMI Access Allows Account Takeover

Out-of-Bounds Memory Access in Omada Switch Web UI

HTTP Request Smuggling via duplicate Content-Length

Heap buffer overflow via SURFACE_BITS dimensions

Absence of Brute-Force Protection in Raytha CMS

Improper signature verification allows authentication bypass

Improper authentication bypass in Smart Switch

Cross-Site Scripting via i18n attribute

Unsafe module leakage via object attributes

Unauthenticated SQL Injection via custom_dates

Privilege escalation via UsersController impersonation token

JMX Misconfiguration Allows Unauthorized Access

Buffer overflow via oversized cookie in pyOpenSSL

Out-of-bounds read leads to data leak

Out-of-bounds read in CRAM processing

Use-after-free vulnerability in SAMtools mpileup

Path Traversal leading to arbitrary file write in MLflow

Improper XML output encoding leads to XSS

Improper Input Validation Leads to Arbitrary File Write

Hard-coded JWT secret enables admin token forgery

Unauthenticated File Upload in FUXA

Remote Code Execution via Project Import

Improper Access Control in Roadmap Management

SQL Injection in PEAR Category Deletion

SQL Injection in PEAR karma queries

PHP Code Execution via preg_replace /e in PEAR

SQL Injection in PEAR Bug Subscription Deletion

SQL Injection in PEAR user::maintains role filter

Unauthenticated SQL Injection in get endpoint

SQL Injection Bypass Authentication in AdminPando

Heap buffer overflow in Fast DDS DATA_FRAG receive path

Prototype Pollution in Qwik formToObj

Authenticated RCE via uploaded file name

Authenticated Command Execution via Workflow Expressions

Improper File Access Allows Credential Theft

n8n is Vulnerable to OS Command Injection in Git Node

Python sandbox escape in n8n

Out-of-bounds read in 6LoWPAN packet handling

WAF bypass enables arbitrary code execution

SSRF vulnerability in RSSFeedBlock URL handling

Server Side Request Forgery in SendDiscordFileBlock

Session Fixation Vulnerability in Quick.Cart

TLS session resumption trust bypass via Config mutation

Remote Command Execution via .git Directory Update

Improper directory validation allows write bypass

Sandbox Bypass Allows Persistent Host Execution

WebSocket Authorization Bypass Enables Tag Overwrite

Hard-coded default password enables mass takeover

Client-side TLS authentication bypass in Keylime registrar

Object Coercion Sandbox Escape Vulnerability

Pre-authentication Remote Code Execution Vulnerability

Arbitrary File Write via Git Rev Injection

Uint16 overflow leads to wrong policy priority

LDAP Filter Injection in WeKan Authentication

Unauthenticated IP Access Allows Worm Infection

OPTIONS method enabled leading to potential attacks

Improper URL Encoding leads to XSS

Authentication Bypass for Administrative Actions

Predictable UUIDs due to crypto/rand error

Out-of-bounds read in H264 encoder

Out-of-bounds read in URBDRC client

Improper Assessment Lifecycle Validation Allows Execution

Missing Object-Level Authorization in Student Submissions

Improper Authorization Allows Access to All Results

Tenant ID Spoofing via Unvalidated Email Domain

NoSQL Injection via Unsanitized DynamoDB Queries

Improper Authorization via Unvalidated JWT Claims

Prototype Pollution via Global Prototype Escape

Phar upload bypass leads to file deletion

Authentication Bypass via Heartbeat API

Unauthenticated Remote Code Execution via Default Config