WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo parame

CVSS 9.8

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly

CVSS 9.8

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_

CVSS 9.8

A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdoc

A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPA

CVSS 9.3

Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative H

Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative HTTP routes on port 6080 without authentication when the administrative interface is enable

CVSS 9.2

Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated att

Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/reset-password. Attacker

CVSS 9.2

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can u

CVSS 9.1

When the password reset functionality is enabled, and email is configured, an attacker could take over any acc

When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to enter the

CVSS 9.1

When the default self-signed certificate is used, an attacker could gain administrative access to the applicat

When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that a

CVSS 9.1