CVE Vulnerability Catalog

Claude SDK for Python versions 0.86.0 to before 0.87.0 has a vulnerability in the async local filesystem memory tool. Path validation is performed but the unresolved path is returned, allowing a local attacker to use symlinks to escape the sandbox.

Claude SDK for TypeScript versions 0.79.0 to before 0.81.0 contains a vulnerability in the local filesystem memory tool that validates model-supplied paths using a prefix check without appending a trailing path separator, allowing reads and writes outside the sandboxed memory directory.

In the Claude SDK for Python (versions 0.86.0 to before 0.87.0), the local filesystem memory tool creates memory files with mode 0o666, making them world-readable on systems with standard umask and world-writable in permissive umask environments like many Docker images. A local attacker on a shared host can read agent state, and in containers can modify memory files to influence model behavior.

FreeScout, a help desk system built with Laravel, has a bug in the checkIpByMask() function that checks if the input IP contains a '/' character. Plain IP addresses never contain '/', so the function always returns false without checking CIDR ranges. Private ranges 10.0.0.0/8 and 172.16.0.0/12 remain unprotected. Affects versions prior to 1.8.211.

FreeScout before version 1.8.211 has a host header manipulation vulnerability that allows an attacker to inject an arbitrary domain into generated absolute URLs. This leads to External Resource Loading and Open Redirect behavior. A fix is available in version 1.8.211.

cpp-httplib is vulnerable to HTTP Request Smuggling. The server does not consume the GET request body, and on keep-alive connections unread bytes are interpreted as a new request.

Nuxt OG Image before version 6.2.5 has a vulnerability in the image-generation component via URI /_og/d/ (and /og-image/ in older versions) that allows injection of arbitrary attributes into the HTML page body. A fix is available in version 6.2.5.

In XML Notepad for Windows prior to version 2.9.0.21, DTD processing is not disabled by default, allowing automatic resolution of external entities. An attacker can craft a malicious XML file that loads a DTD causing outbound HTTP/SMB requests, potentially leaking local file contents or capturing NTLM credentials. The issue is fixed in version 2.9.0.21.

A stored XSS vulnerability exists in SonicWall Email Security due to improper input neutralization. A remote authenticated admin user can execute arbitrary JavaScript code.

WWBN AVideo versions 26.0 and prior have an SSRF vulnerability in the EPG (Electronic Program Guide) feature. Authenticated users with upload permissions can store arbitrary URLs that the server fetches on every EPG page visit. Insufficient URL validation allows scanning internal networks and accessing internal services.

WWBN AVideo up to version 26.0 has a vulnerability in the User_Location plugin's testIP.php page that reflects the ip parameter without output encoding, allowing arbitrary HTML and JavaScript injection. Although the page is restricted to admins, the SameSite=None cookie configuration allows cross-origin exploitation. No public patches are available.

WWBN AVideo versions 26.0 and prior accept an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" (a). This bypasses admin-controlled moderation and draft workflows. The setStatus() method does not verify that the caller has permission to set that particular status.

WWBN AVideo versions 26.0 and prior have a vulnerability in the StripeYPT plugin. The test.php endpoint is accessible to any logged-in user, not just administrators. Due to a bug in the retrieveSubscriptions() method that cancels subscriptions instead of retrieving them, any authenticated user can cancel arbitrary Stripe subscriptions by providing a subscription ID.

A vulnerability was found in AVideo version 26.0 and earlier in the install/deleteSystemdPrivate.php script. Due to a PHP operator precedence bug, the condition !php_sapi_name() === 'cli' always evaluates to false, allowing remote unauthenticated access to the script, which deletes files from the temp directory and discloses its contents.

WWBN AVideo versions 26.0 and prior have a vulnerability in the CreatePlugin template for list.json.php, which lacks authentication or authorization checks. This results in 21 unauthenticated endpoints exposing sensitive data including user PII, payment transaction logs, IP addresses, and user agents.

WWBN AVideo versions 26.0 and prior have an XSS vulnerability in the YPTSocket plugin. The caller feature passes the caller's display name directly as raw HTML into the jQuery Toast Plugin. An attacker can set their display name to an XSS payload, and upon initiating a call, the code executes in any online user's browser without interaction.

WWBN AVideo allows admins to enable/disable plugins via objects/pluginSwitch.json.php without CSRF validation and bypassing Referer/Origin checks. An attacker can disable critical security plugins (e.g., 2FA) by luring an admin to a malicious page.

WWBN AVideo version 26.0 and prior allows admins to send HTML emails to all users via the objects/emailAllUsers.json.php endpoint. No CSRF token validation and SameSite=None on session cookies enable cross-origin CSRF attacks.

PdfDing prior to version 1.7.1 does not check in check_shared_access_allowed() whether a shared PDF is inactive (expired, reached view limit) or deleted. Previously authorized users can still access the PDF after expiration or deletion.

WWBN AVideo versions 26.0 and prior do not encode plugin configuration values before rendering in the admin panel. The jsonToFormElements() function in admin/functions.php directly interpolates user data into HTML elements, allowing arbitrary JavaScript injection.