CVE Vulnerability Advisory Database

[Affected Scope] FreeRDP client libraries and dependent applications prior to version 3.21.0

[Impact] Remote Code Execution (RCE) or Denial of Service (DoS) on the client side when connecting to a malicious RDP server

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] X11-based RDP client environments running FreeRDP versions prior to 3.21.0

[Impact] Connecting to a malicious RDP server can trigger client-side memory corruption (UAF), leading to application crashes (DoS) or potential remote code execution (RCE)

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] All client environments running FreeRDP versions prior to 3.21.0

[Impact] A malicious RDP server can trigger a client-side heap buffer overflow, leading to Denial of Service (DoS) or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] Client environments running FreeRDP versions prior to 3.21.0

[Impact] A malicious RDP server can trigger a client-side heap buffer overflow, leading to Denial of Service (DoS) or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] EyouCMS up to version 1.7.1 and 5.0, specifically within the Member Avatar Handler component.

[Impact] Unauthenticated remote attackers can bypass access controls to upload arbitrary files or trigger file inclusion, leading to complete Remote Code Execution (RCE).

[Mitigation] Restrict external access to the vulnerable API endpoint, deploy WAF rules, and monitor for official vendor patches.

[Affected Scope] EasyCMS versions up to and including 1.6, specifically affecting the '_order' parameter in '/UserAction.class.php'.

[Impact] Unauthenticated remote attackers can manipulate the '_order' parameter to execute arbitrary SQL commands, leading to complete database compromise, sensitive data exfiltration, or potential remote code execution.

[Mitigation] Since the vendor has not responded with an official patch, immediately deploy Web Application Firewall (WAF) rules and manually implement strict whitelist validation on the affected PHP source code.

[Affected Scope] xiweicheng TMS up to version 2.28.0

[Impact] Unauthenticated remote attackers can access internal network resources, invoke internal APIs, or potentially escalate to Remote Code Execution (RCE)

[Mitigation] Apply the latest security patches, sanitize the 'url' parameter in HtmlUtil.java, or deploy WAF rules to block outbound requests to private IP ranges

[Affected Scope] xiweicheng TMS up to and including version 2.28.0

[Impact] Unauthenticated remote attackers can upload arbitrary malicious files, leading to Remote Code Execution (RCE) on the target server

[Mitigation] Disable execution permissions on the upload directory, enforce strict file extension validation, or apply the latest security patches

[Affected Scope] FeMiner wms up to commit 9cad1f1b179a98b9547fd003c23b07c7594775fa

[Impact] Unauthenticated remote attackers can manipulate the Username parameter to execute arbitrary SQL commands and compromise the database

[Mitigation] Implement parameterized queries in the source code and deploy Web Application Firewall (WAF) rules to block malicious payloads

[Affected Scope] Cal.com versions from 3.1.6 to before 6.0.7

[Impact] Attackers can gain full authenticated access to any user's account by supplying a target email address via session.update() without credentials

[Mitigation] Immediately upgrade Cal.com to version 6.0.7 or later

[Affected Scope] All systems and CI/CD pipelines running GuardDog versions prior to 2.7.1

[Impact] Malicious PyPI packages can exploit path traversal to write arbitrary files outside the extraction directory, leading to Arbitrary File Overwrite and Remote Code Execution (RCE)

[Mitigation] Immediately upgrade GuardDog to version 2.7.1 or higher

[Affected Scope] The .github/workflows/ci.yml workflow configuration in the Eigent open-source repository

[Impact] Arbitrary code execution from fork pull requests, allowing attackers to steal credentials, push unauthorized code, or create malicious releases

[Mitigation] Apply the official patch commits or update the GitHub Actions workflow configuration to restrict untrusted code execution

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and gain full control of the target server.

[Mitigation] Apply the official Microsoft security patches immediately and restrict external access to SharePoint web interfaces until patched.

[Affected Scope] FortiOS versions 6.4 through 7.6 and FortiSwitchManager versions 7.0 through 7.2.

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with system privileges by sending crafted packets, leading to full system compromise.

[Mitigation] Immediately apply the latest firmware updates provided by Fortinet and restrict exposure of management interfaces and VPN services to the public internet.

[Affected Scope] ethos utility in RIOT OS versions up to and including 2026.01-devel-317

[Impact] Unauthenticated remote attackers can send crafted serial or TCP-framed input to corrupt memory, leading to application crashes or potential arbitrary code execution

[Mitigation] Apply the latest source code patches, or manually implement bounds checking in the ethos utility's frame parser and rebuild

[Affected Scope] RIOT OS versions up to and including 2026.01-devel-317 containing the tapslip6 utility

[Impact] Attackers can trigger a stack buffer overflow via crafted command-line arguments, leading to process crashes and potential arbitrary code execution

[Mitigation] Apply the latest source patches, replace unsafe string functions with snprintf, and restrict execution permissions on the tapslip6 binary

[Affected Scope] Administrator panel component (/Administrator/PHP/AdminViewSongs.php) in code-projects Online Music Site 1.0

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to execute arbitrary SQL commands, leading to complete database compromise

[Mitigation] Implement parameterized queries (Prepared Statements) immediately and restrict external access to the administrator directory

[Affected Scope] code-projects Online Music Site 1.0, specifically the /FrontEnd/Albums.php endpoint

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to extract sensitive database information or compromise the underlying system

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious SQL patterns

[Affected Scope] code-projects Online Music Site 1.0, specifically the /login.php endpoint

[Impact] Unauthenticated remote attackers can bypass authentication, extract sensitive database records, or potentially execute arbitrary system commands via SQL injection

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious payloads

[Affected Scope] Campcodes Supplier Management System version 1.0, specifically the /retailer/edit_profile.php endpoint.

[Impact] Unauthenticated remote attackers can manipulate the txtRetailerAddress parameter to compromise the database, extract sensitive data, or potentially achieve remote code execution.

[Mitigation] Implement parameterized queries (Prepared Statements), sanitize user inputs, and deploy Web Application Firewall (WAF) rules to block malicious SQL payloads.