Saidakbarxon Maxsudxonov

NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API

Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection

peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field

Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS

MQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt_unpack_publish_response()

AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

sysPass 3.2.11 Authenticated OS Command Injection via Backup Path