KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can…
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id leads to…
A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file upload_save.php. Executing a manipulation of the argument uploaded_file/image can lead to unrestricted upload. The attack may be…
Przepełnienie bufora w Open Asset Import Library umożliwia zdalne wykonanie kodu.
Wstrzyknięcie kodu w Dromara dataCompare umożliwia zdalne wykonanie ataku.
Nieprawidłowa autoryzacja w youlaitech youlai-mall umożliwia zdalne manipulowanie zamówieniami.
A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation…
A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the…
Wstrzyknięcie SQL w ketr JEPaaS umożliwia zdalne wykonanie ataku.
Niechronione przechowywanie poświadczeń w SGAI Space1 NAS umożliwia zdalny atak.
A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the component DHCP Hostname Handler. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. The exploit…
A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component DHCP Handler. The manipulation of the argument Hostname results in cross site scripting. The attack may be launched remotely. The exploit has been made public…
A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be…
A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be…
A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization. Remote exploitation of…
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely.…
Nieprawidłowa autoryzacja w macrozheng mall umożliwia zdalne wykorzystanie podatności.
A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. Affected is the function html_renderer of the file plugins/html_renderer/index.js of the component Inter-plugin API. Executing manipulation of the argument action can lead to dynamically-managed…
A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. The attack can be…
Wykorzystanie podatności w WeRSS umożliwia zdalne wykonanie ataku typu server-side request forgery.
A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted upload. The attack may be performed from…
A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to deserialization. The attack can be executed remotely. The…
A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the component Sign-In. This manipulation of the argument Referer causes…
GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the…
A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. | A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can… |
Do wiadomości | 2,1 | 0,27 % | ||
| A vulnerability has been found in code-projects Online Reviewer System 1.0. | A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id leads to… |
Do wiadomości | 2,1 | 0,27 % | ||
| A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. | A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file upload_save.php. Executing a manipulation of the argument uploaded_file/image can lead to unrestricted upload. The attack may be… |
Do wiadomości | 2,1 | 0,27 % | ||
| Przepełnienie bufora w Open Asset Import Library umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w Open Asset Import Library umożliwia zdalne wykonanie kodu. |
Do wiadomości | 2,1 | 0,27 % | ||
| Wstrzyknięcie kodu w Dromara dataCompare umożliwia zdalne wykonanie ataku. | Wstrzyknięcie kodu w Dromara dataCompare umożliwia zdalne wykonanie ataku. |
Do wiadomości | 2,1 | 0,27 % | ||
| Nieprawidłowa autoryzacja w youlaitech youlai-mall umożliwia zdalne manipulowanie zamówieniami. | Nieprawidłowa autoryzacja w youlaitech youlai-mall umożliwia zdalne manipulowanie zamówieniami. |
Do wiadomości | 2,1 | 0,27 % | ||
| A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. | A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation… |
Do wiadomości | 2,1 | 0,27 % | ||
| A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. | A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the… |
Do wiadomości | 2,1 | 0,27 % | ||
| Wstrzyknięcie SQL w ketr JEPaaS umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w ketr JEPaaS umożliwia zdalne wykonanie ataku. |
Do wiadomości | 2,1 | 0,27 % | ||
| Niechronione przechowywanie poświadczeń w SGAI Space1 NAS umożliwia zdalny atak. | Niechronione przechowywanie poświadczeń w SGAI Space1 NAS umożliwia zdalny atak. |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability was determined in Netcore NR268 1.7.121109. | A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the component DHCP Hostname Handler. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. The exploit… |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability was found in Netcore NR268 1.7.121109. | A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component DHCP Handler. The manipulation of the argument Hostname results in cross site scripting. The attack may be launched remotely. The exploit has been made public… |
Do wiadomości | 2,1 | 0,26 % | ||
| A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. | A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be… |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. | A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be… |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. | A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization. Remote exploitation of… |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. | A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely.… |
Do wiadomości | 2,1 | 0,26 % | ||
| Nieprawidłowa autoryzacja w macrozheng mall umożliwia zdalne wykorzystanie podatności. | Nieprawidłowa autoryzacja w macrozheng mall umożliwia zdalne wykorzystanie podatności. |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. | A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. Affected is the function html_renderer of the file plugins/html_renderer/index.js of the component Inter-plugin API. Executing manipulation of the argument action can lead to dynamically-managed… |
Do wiadomości | 2,1 | 0,26 % | ||
| A security vulnerability has been detected in Jiusi OA up to 20251102. | A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. The attack can be… |
Do wiadomości | 2,1 | 0,26 % | ||
| Wykorzystanie podatności w WeRSS umożliwia zdalne wykonanie ataku typu server-side request forgery. | Wykorzystanie podatności w WeRSS umożliwia zdalne wykonanie ataku typu server-side request forgery. |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. | A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted upload. The attack may be performed from… |
Do wiadomości | 2,1 | 0,26 % | ||
| A weakness has been identified in TensorLayer up to 2.2.4. | A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to deserialization. The attack can be executed remotely. The… |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. | A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the component Sign-In. This manipulation of the argument Referer causes… |
Do wiadomości | 2,1 | 0,26 % | ||
| GitHub CLI (gh) is GitHub's official command line tool. | GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the… |
Do wiadomości | 2,1 | 0,26 % | ||
| A vulnerability was found in conductor-oss conductor 3.22.0. | A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request… |
Do wiadomości | 2,1 | 0,26 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.