Archive
1 March 2025
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Medium 6.8
An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to Un…
-
High 7.5
An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Ex…
-
Critical 9.6
An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow …
-
Critical 9.0
A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor …
-
High 8.2
Formwork improperly validates input of User role preventing site and panel availability
### Summary Improper validation of select fields allows attackers to craft an input that crashes the system, resulting in a 500 status and making the entire site and administration panel unavailable. This clearly impacts the Availability aspect of the CIA tri…
-
Medium 4.7
Formwork has a cross-site scripting (XSS) vulnerability in Site title
### Summary The site title field at /panel/options/site/allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a considerable number of users. ### Impact The at…
-
Medium 5.9
Asking For Scratch Username And Password
Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. A…
-
Critical 9.9
ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to exe…