Nn0Nkey

Dokploy is a self-hostable Platform as a Service (PaaS) that contains a command injection issue. Authenticated users can execute arbitrary commands with root privileges via the '/docker-container-logs' WebSocket endpoint. This occurs because the `tail` and `since` parameters are not validated and are directly concatenated into shell commands.

A remote deserialization issue exists within the Pickle Handler component. The flaw occurs during the execution of the `pickle.loads()` function, allowing an attacker to manipulate data to achieve deserialization.

A weakness in the Engine Handler component allows for unrestricted file upload. This issue occurs within the `exec()` function located in the `mindsdb/integrations/handlers/byom handler/proc wrapper.py` file and can be exploited remotely.

Name of the Vulnerable Software and Affected Versions: Qiyuesuo Eelectronic Signature Platform versions up to 4.34 Description: A critical issue exists in Qiyuesuo Eelectronic Signature Platform, potentially allowing for unrestricted file uploads. The `execute` function within the `/api/code/upload` file of the Scheduled Task Handler component is affected. Manipulation of the `File` argument can lead to exploitation. The exploit has been publicly disclosed. Recommendations: Versions prior to 4.34: As a temporary workaround, consider restricting access to the `/api/code/upload` endpoint until a patch is available. Versions prior to 4.34: Avoid uploading untrusted files through the affected endpoint.

A critical issue affects the unknown code of the file /dataSet/resolveSql, where the manipulation of the `sql` argument leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7.0 addresses this issue.

A critical issue affects the function `editFile` of the file `application/admin/logic/FilemanagerLogic.php`. The manipulation of the argument `activepath` leads to path traversal. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

A deserialization issue in the controllerIndex.php component allows attackers to execute arbitrary code.

A cross-site scripting (XSS) issue in the admin collect news.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `siteurl` parameter.

A SQL injection vulnerability was discovered in SeaCMS via the `id` parameter at the "/dmplayer/dmku/index.php?ac=del" endpoint. This issue allows for potential SQL injection attacks.

A cross-site scripting (XSS) vulnerability in the `admin datarelate.php` component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This issue enables attackers to run any web script or HTML, potentially leading to unauthorized actions on the affected system.

The issue allows attackers to control IP parameters written to the data/admin/ip.php file when the action is set, potentially resulting in arbitrary command execution. This occurs due to a vulnerability in the admin ip.php file in Seacms version 13.1.

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the function `delete category` of the file `/classes/Master.php?f=delete category`. The manipulation of the argument `id` leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Recommendations: For SourceCodester Computer Laboratory Management System version 1.0, consider disabling the `delete category` function until a patch is available. Restrict access to the `/classes/Master.php?f=delete category` endpoint to minimize the risk of exploitation. Avoid using the `id` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

A cross-site scripting (XSS) issue in the admin ads.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `ad description` parameter. This enables attackers to run any web scripts or HTML.