CVE Vulnerability Catalog

A vulnerability in ChrisChinchilla Vale-MCP up to version 0.1.0 allows OS command injection via the config_path argument in the HTTP Interface component. Local access is required and the exploit is publicly available.

SQL Injection vulnerability in Construction Management System 1.0. An unknown function in the file /borrowed_equip_report.php allows manipulation of the Home argument, leading to SQL injection. The attack can be performed remotely, and the exploit is publicly available.

A vulnerability in Braffolk mcp-summarization-functions up to version 0.1.5 allows OS command injection via the command argument in the summarize_command component. Local access is required and the exploit is publicly available.

In kodbox up to version 1.64, a Server-Side Request Forgery (SSRF) vulnerability exists in the shareMake/shareCheck component. Manipulating the siteFrom/siteTo arguments allows server-side requests. The attack is remote but difficult. The exploit is public. The vendor did not respond.

The givanz Vvvebjs tool up to version 2.0.5 has a cross-site scripting vulnerability in upload.php (File Upload Endpoint) via the uploadAllowExtensions argument. Remote exploitation is possible, and the exploit is publicly available.

In imprvhub mcp-browser-agent up to version 0.8.0, a server-side request forgery (SSRF) vulnerability exists in the CallToolRequestSchema function of src/handlers.ts. Manipulation of request.params.name and request.params.arguments leads to SSRF. Remote exploitation is possible and the exploit is public.

PHPGurukul Online Shopping Portal Project 2.1 is vulnerable to SQL injection via the 'orderid' parameter in the file /order-details.php. An attacker can remotely manipulate this parameter, leading to unauthorized SQL queries.

The elgentos magento2-dev-mcp tool up to version 1.0.2 has an OS command injection vulnerability in the executeMagerun2Command function in src/index.ts. The exploit is publicly available.

The Nor2-io heim-mcp tool up to version 0.1.3 has an OS command injection vulnerability in the registerTools function in src/tools.ts (component new_heim_application/deploy_heim_application/deploy_heim_application_to_cloud). The exploit is publicly available.

Acrel Electrical Prepaid Cloud Platform 1.0 discloses information via the /bin.rar file in the Backup File Handler component. Remote exploitation is possible and the exploit is public.

Griptape version 0.19.4 has a path traversal vulnerability in the ComputerTool component. A remote attacker can manipulate the filename argument to access files outside the intended directory. An exploit has been published.

SQL Injection vulnerability in griptape 0.19.4. An unknown functionality in the file griptape/tools/sql/tool.py in the SqlTool component allows manipulation leading to SQL injection. The attack can be performed remotely, and the exploit is publicly available. The vendor did not respond.

FileZilla 3.40.0 has a denial of service vulnerability in the local search functionality. A local attacker can crash the application by supplying a malformed path string containing 384 'A' characters followed by 'BBBB' and 'CCCC' sequences in the search directory field.

CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms. Attackers can trick authenticated administrators into visiting crafted pages that submit POST requests to the users.php endpoint with parameters like source=add_user, source=edit_user, or del=1 to create, modify, or delete admin accounts.

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. The crash occurs when opening an archive and pressing the test button.

TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the 'New User Name' or 'New Serial Number' textboxes, causing a denial of service.

SpotAuditor 3.6.7 has a local buffer overflow in the Base64 Password Decoder component. An attacker can supply an oversized Base64 string to crash the application.

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the 'Email' and 'Activation code' fields, causing a denial of service.

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting, overwriting the SEH chain and corrupting exception handlers.

LanHelper 1.74 has a local buffer overflow in the Form Send Message feature. An attacker can crash the application by pasting 6000 bytes into the message text field.