Archive
7 July 2025
Vulnerabilities first published on this day (UTC), newest first.
175 results · Feed
-
Critical 10.0
WAGO: Vulnerability in WAGO Device Sphere
A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.
-
High 7.3
rowboatlabs rowboat Session route.ts PUT missing authentication
A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Hand…
-
High 7.3
SimStudioAI sim Session route.ts POST missing authentication
A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulnerability is the function POST of the file apps/sim/app/api/files/upload/route.ts of the component Session Hand…
-
Low 3.5
Portabilis i-Educar Curricular Components Module edit cross site scripting
A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCurricular/edit?id=ID of the component Curricular Components Module. The manipulation of the argument …
-
Medium 6.4
Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite
Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage
-
High 7.3
Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vuln…
-
Critical 9.8
An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, a…
-
Low 3.5
Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting
A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educar_funcao_det.php?cod_funcao=COD&ref_cod_instituicao=COD of the component Function Management Module. Th…
-
Low 3.5
Portabilis i-Educar Course Module educar_curso_det.php cross site scripting
A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educar_curso_det.php?cod_curso=ID of the component Course Module. The manipulation of the argument Curso l…
-
Low 3.5
Portabilis i-Educar School Module educar_escola_lst.php cross site scripting
A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educar_escola_lst.php of the component School Module. The manipulation of the argument Escola leads to cross site …
-
Low 3.5
Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting
A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educar_aluno_beneficio_lst.php of the component Student Benefits Registration. The ma…
-
Medium 5.9
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module I…
-
Medium 6.6
Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access r…
-
Medium 6.5
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability …
-
Medium 5.4
risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal
A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the function deleteFile of the file /Digital-Infrastructure-9.6.7/y9-digitalbase-webapp/y9-module-filemanager/risenet-y9boot-…
-
Medium 6.5
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability …
-
Medium 6.5
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability …
-
Medium 6.5
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability …
-
Medium 6.5
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability …
-
Medium 6.5
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability …
-
Medium 4.8
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability ma…
-
High 7.2
TeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection
ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative a…
-
Low 3.9
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability ma…
-
Low 3.3
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 4.0
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 4.0
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 5.3
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 4.0
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 4.0
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 5.3
SimStudioAI sim route.ts handleLocalFile path traversal
A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLocalFile of the file apps/sim/app/api/files/parse/route.ts. The manipulation of the argument filePath leads to path traversal. It is possibl…
-
Medium 4.0
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerabi…
-
Medium 4.0
Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vul…
-
High 7.6
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful …
-
Medium 5.7
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful …
-
Medium 6.9
Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this …
-
Medium 6.3
BoyunCMS curl Index.php server-side request forgery
A vulnerability was found in BoyunCMS up to 1.4.20. It has been rated as critical. This issue affects some unknown processing of the file /application/pay/controller/Index.php of the component curl. The manipulation leads to server-side request forgery. The a…
-
Medium 6.3
BoyunCMS Server.php sql injection
A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can b…
-
Medium 6.3
BoyunCMS Configuration File install_ok.php code injection
A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the component Configuration File Handler. The manipulation of the argument db_pass leads to code inject…
-
Medium 6.3
BoyunCMS Index.php unrestricted upload
A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical. Affected by this issue is some unknown functionality of the file /application/user/controller/Index.php. The manipulation of the argument image leads to unrestricted upload. The at…
-
High 7.5
Dagster vulnerable to Path Traversal attack through its /logs endpoint
Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive information via crafted request to the /logs endpoint. This may be restricted to certain file names that start with a dot ('.').