CVE Vulnerability Catalog

The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes. This allows users who have been granted donor-report (view) access but not donor-edit access to add, modify, or delete the stored address of any donor on the site.

The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users with access to the form editor to inject arbitrary web scripts that execute when another user views the form. On multisite installations, where administrators do not hold the unfiltered_html capability, this crosses a privilege boundary.

A flaw was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09 in the function SmsCodeServiceImpl.validateSmsCode0 of /service/sms/SmsCodeServiceImpl.java, related to SMS code verification. The manipulation causes improper restriction of excessive authentication attempts. The attack may be initiated remotely, though its complexity is rather high and exploitability is regarded as difficult; the exploit has been published.

A security vulnerability was detected in onyx-dot-app Onyx up to version 5.0.0. It affects an unknown function in web/src/app/craft/components/output-panel/PreviewTab.tsx and leads to cross-site scripting (XSS). The attack can be initiated remotely, and the exploit has been publicly disclosed.

A vulnerability was detected in Unitree Robotics Unitree Go2 up to versions 1.1.13/1.1.14.1/1.1.15.1. The WebSocketClient.connect function in websocket.py of the chat_go component performs improper certificate validation, enabling a remote attack of high complexity. The vendor confirmed the issue (CWE-295).

A security vulnerability was detected in phpIPAM up to 1.8.3 in an unknown functionality of upgrade/index.php. Manipulation of the REQUEST_URI argument leads to cross site scripting. The attack can be launched remotely and the exploit has been publicly disclosed.

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name() that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can send truncated record headers or RDATA, raising uncaught Lua exceptions in resolver:query() that abort requests and break name resolution.

Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, such as a malicious .sla file, to inject attributes into the decompiler's input or crash the decompiler process.

The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edited. This allows unauthenticated attackers to modify, unpublish, attach images to, or reassign any guest-submitted listing when guest posting is enabled.

Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function source text ends exactly at that prefix. Because each function body is escaped independently, a delimiter supplied by surrounding serialized output can terminate an HTML script element, and a later serialized value supplies injected markup that becomes a live element in the page. Exploitation requires control of a serialized function's source text, such as through a spoofed toString().

In Twisted before 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host and port. An attacker able to deliver a packet with the correct transaction ID can inject a forged answer.

A vulnerability in the ADXL345 sensor driver (drivers/sensor/adi/adxl345/adxl345_stream.c) in Zephyr RTOS involves a buffer overflow during RTIO FIFO streaming. The driver clamps the reported data length to available buffer space but still queues one bus read per hardware FIFO entry, causing writes up to 186 bytes past the allocation when the buffer is smaller than a full batch. A companion defect leaves fifo_total_bytes un-reset at batch start, potentially carrying a stale write offset into the next batch.

A weakness was identified in Tenda F6 version 12.02.01.73 affecting an unknown function of the web management interface. Manipulating the ecos_pw argument can lead to cleartext transmission of sensitive information. The attack may be launched remotely, is characterized by high complexity, and a public exploit is available.

Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects paths outside the project root through absolute paths, parent segments, dot-prefixed wildcard globs, or symlinks. In version 3.33.1, the same behavior also affects Vitest test.projects paths, Vitest inline-project extends paths, and symlinked script --config paths. Fallow parses the outside files as test-runner configuration and uses them to credit dependencies, setup files, and JSX import sources, which can change unused dependency and unused file findings in CI or agent analysis. The outside file contents are not printed or sent over the network.

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync() without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered fs.realpathSync.native(). Code running under --permission with restricted --allow-fs-read can still use fs.realpathSync() to check file existence, resolve symlink targets, and enumerate filesystem paths outside permitted directories.

A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard --allow-fs-read or --allow-fs-write rule. When the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as a match — e.g. --allow-fs-read=/etc/passwd.* also allows reading /etc/passwd. This requires the wildcard grant to sit directly under the root of the permission tree.

A flaw in the Node.js zlib.ZipFile API can cause it to return bytes that do not belong to the requested entry after local and central header validation fails. When zipEntry.modified is read on an archive whose local header does not match its central directory, the validation error is caught but the parsed local header is left cached without a content offset — a later content read returns attacker-controlled bytes, and CRC-32 verification still passes. A Node.js-based scanner can therefore approve different content from what another ZIP implementation extracts from the same archive.

pghoard, a PostgreSQL backup daemon, prior to version 2.7.1 logs database connection information including username and password at debug level when using .pgpass. The issue is patched in version 2.7.1.

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains an SSRF vulnerability that bypasses the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers controlling an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability because safeFetch() forwards Authorization and Cookie headers on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.