Remote Code Execution

An attacker can send fake webhook messages to a Discourse site, allowing them to create, change, or delete Patreon pledge data if the site's webhook secret is left blank. To prevent this, it's crucial to set a strong, non-empty webhook secret in the site settings.

This vulnerability allows attackers to send fake data to certain email service integrations on the Discourse platform, which can lead to legitimate user emails being mistakenly marked as undeliverable. It occurs when no authentication token is set up, meaning attackers can exploit this weakness without needing any special access.

This vulnerability allows an attacker to inject malicious scripts into web pages viewed by users, which can lead to stealing sensitive information like login credentials. It occurs when the E-Commerce Product improperly handles user input, and it can be exploited simply by tricking users into clicking on a specially crafted link.

This vulnerability allows an attacker to inject malicious code into web pages displayed by the WooCommerce Photo Reviews plugin, potentially leading to unauthorized actions or data theft from users. It affects versions up to 1.4.4, and an attacker would need to find a way to submit harmful content that the plugin does not properly filter.

This vulnerability allows a remote attacker to steal user credentials by exploiting an outdated login method still used in certain features of the PcVue software. It requires the attacker to target systems running versions 12.0.0 through 16.3.3, where this insecure method is still enabled.

An attacker can exploit this vulnerability to inject malicious JavaScript into a GitHub Actions workflow by crafting a pull request title, which could allow them to steal sensitive information from the repository or perform unauthorized actions using the CI bot's permissions. This requires the attacker to create a pull request with a specially designed title, making it a targeted attack on the repository.

This vulnerability allows an attacker with admin access to a data source to delete it again after it has been recreated by someone else, even if they no longer have admin rights to the new version. However, this can only happen within 30 seconds of the original deletion, and the new data source must have the same unique identifier as the deleted one, which is randomly assigned by default.

This vulnerability allows an attacker to inject malicious scripts into the queue management system, which could then be executed in the browsers of users visiting the site. The attacker can exploit this remotely by manipulating the names entered in the system, making it a risk for anyone using the application.

An attacker can inject malicious scripts into the Patients Waiting Area Queue Management System by manipulating the First Name or Last Name fields in the patient search function, allowing them to execute harmful actions on users' browsers. This vulnerability can be exploited remotely, meaning attackers don't need physical access to the system to carry out their attack.

This vulnerability allows an attacker to manipulate the wcurl tool into saving files in unintended locations on the user's system, potentially exposing sensitive data or overwriting important files. It occurs when the attacker uses URLs with special encoded characters that trick the tool, and it specifically affects users of the wcurl command line tool.

This vulnerability allows a low-privileged user to access unauthorized data by manipulating existing datasets in Apache Superset. An attacker needs to have permission to create datasets and read charts, which lets them overwrite SQL queries and bypass data access controls.

This vulnerability allows an attacker with scripting privileges in dotCMS to bypass security restrictions and access sensitive Java classes, enabling them to execute arbitrary system commands as the application user. The attacker must be authenticated and have the ability to run scripts to exploit this weakness.

This vulnerability allows an attacker with access to the device to inject harmful commands into the system's ping utility, which can lead to the device becoming unresponsive or overloaded. The attacker can exploit this by sending specially crafted input that the device does not properly check, making it a serious risk for devices running the affected firmware.

An attacker can exploit a vulnerability in the Traccar GPS tracking system to take control of a legitimate user's WebSocket connection, allowing them to send and receive data as if they were that user. This requires the attacker to trick the system into thinking their request is coming from a trusted source, which could happen if the user visits a malicious website while logged into Traccar.

An attacker can exploit a flaw in the 389-ds-base server to potentially take control of the system or crash it, especially when processing a large number of alias strings. This happens because the server miscalculates memory size, leading to a situation where it can be tricked into running harmful code or becoming unresponsive.

An attacker can remotely crash the student result management system by manipulating a specific function in the admin panel, which can lead to a denial of service. This vulnerability is easy to exploit, as the method to do so is publicly available.

An attacker can exploit a flaw in the student result management system to gain unauthorized access to sensitive user data by manipulating a specific file upload function. This vulnerability can be exploited remotely, meaning the attacker does not need physical access to the system, and it has been publicly disclosed, increasing the risk of attacks.

This vulnerability allows an attacker to potentially impersonate a trusted source in communications with the Cesanta Mongoose software, which could lead to unauthorized access or manipulation of data. However, exploiting this flaw is complex and difficult, requiring specific conditions to be met for a successful attack.

This vulnerability allows an attacker to inject malicious scripts into the student management system, which can then be executed in the browsers of users visiting the affected page. The attacker can exploit this remotely, meaning they don't need physical access to the system, and the exploit details are publicly available, making it easier for them to launch an attack.

An attacker can remotely access and manipulate the Student Result Management System due to improper access controls in a specific file, potentially allowing them to change settings or access sensitive information. This vulnerability requires no special privileges, making it easier for attackers to exploit it.