CVE Vulnerability Catalog

In zhayujie chatgpt-on-wechat CowAgent up to 2.0.4, the dispatch function in agent/memory/service.py (API Memory Content Endpoint component) allows path traversal via manipulation of the filename argument. The attack can be initiated remotely and the exploit has been published.

A vulnerability was detected in PublicCMS up to 6.202506.d in the function AbstractFreemarkerView.doRender in the FreeMarker Template Handler component. Manipulation leads to improper neutralization of special elements used in a template engine, potentially allowing remote code execution. The exploit has been publicly disclosed.

A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1, affecting the getTime function in lib/util.js. Manipulation of the timestamp argument causes inefficient regular expression complexity, which can be exploited remotely. The exploit has been made publicly available.

A vulnerability in the wolfSSL library causes URI nameConstraints from constrained intermediate CAs to be parsed but not enforced during certificate chain verification. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.

PraisonAIAgents prior to 1.5.128 contains a vulnerability in the list_files() tool in FileTools. The pattern parameter is passed directly to Path.glob() without validation, allowing relative path traversal to enumerate arbitrary files outside the workspace and obtain file metadata.

PraisonAI prior to 4.5.128 exposes a GET /api/agents endpoint in the AgentOS platform that returns agent names, roles, and the first 100 characters of agent system instructions to any unauthenticated caller. The FastAPI application has no authentication middleware or API key validation and defaults to CORS allow_origins=["*"] with host 0.0.0.0.

In PraisonAI prior to 4.5.128, the _safe_extractall() function in the recipe registry validates archive members against path traversal but performs no checks on individual member sizes, cumulative extracted size, or member count before calling tar.extractall(). An attacker can publish a malicious bundle with highly compressible data that exhausts the victim's disk.

In PraisonAIAgents prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem via an unrestricted skill_path parameter. Unlike other functions, it enforces neither workspace boundary confinement nor critical-level approval.

PraisonAI prior to 4.5.128 has a WSGI-based recipe registry server (server.py) that reads the entire HTTP request body based on client-supplied Content-Length with no upper bound. Combined with authentication disabled by default, any local process can send arbitrarily large POST requests to exhaust memory and cause denial of service. The Starlette server has a 10MB limit, but the WSGI server lacks equivalent protection; fixed in 4.5.128.

In PraisonAI prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The _sanitize_html function relies on the nh3 library, which is not listed as a dependency in pyproject.toml; when nh3 is absent (default installation), the sanitizer is a no-op that returns HTML unchanged.

Dockyard before version 1.1.0 lacks CSRF protection for Docker container start and stop operations. An attacker can force a logged-in administrator's browser to send GET requests, allowing unauthorized container management.

An OS Command Injection vulnerability in CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker to execute crafted CLI commands and inject arbitrary shell commands as root. Certain 'set system' commands are not properly sanitized.

An improper check for unusual or exceptional conditions in the chassis control daemon (chassisd) of Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600 allows a low-privileged local attacker to cause a complete DoS. Executing a specific 'show chassis' CLI command crashes and restarts chassisd, momentarily impacting all traffic.

An improper check for unusual or exceptional conditions in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service (DoS). Executing a specific 'show chassis' CLI command crashes and restarts chassisd, momentarily impacting all traffic.

A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service (DoS). The issue occurs when colored SRTE policy tunnels are provisioned via PCEP and gRPC is used to monitor traffic, causing evo-aftmand to crash, provided the Originator ASN field in PCEP contains a value larger than 65,535.

A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a memory leak, eventually leading to a complete Denial-of-Service (DoS). In a DHCPv6 over PPPoE or DHCPv6 over VLAN with Active lease query or Bulk lease query scenario, every subscriber logout leaks a small amount of memory.

On Juniper Networks Junos OS EX4k and QFX5k devices configured as service-provider edge devices, with L2PT enabled on the UNI and VSTP enabled on the NNI in VXLAN scenarios, receiving VSTP BPDUs on the UNI leads to packet buffer allocation failures and the device stops passing traffic until manually restarted. Affects 24.4 releases before 24.4R2 and 25.2 releases before 25.2R1-S1 and 25.2R2.

In an EVPN-MPLS scenario, routes learned from remote multi-homed PE devices are programmed as ESI routes, and due to a logic issue in l2ald memory management, memory allocated for these routes is not released during churn, causing a memory leak that ultimately leads to a crash and restart of l2ald. Affects multiple Junos OS and Junos OS Evolved releases before specified fixed versions.

A vulnerability in J-Web of Juniper Networks Junos OS on SRX Series involves improper following of a certificate's chain of trust. When an SRX device is provisioned to connect to Security Director (SD) cloud, it does not sufficiently verify the received server certificate, allowing a PITM to intercept communication and access credentials.

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local low-privileged user to read sensitive information. Executing the CLI command 'show mgd' with specific arguments exposes sensitive data.