CVE Vulnerability Catalog

Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a page_key to an internal URL, which GetTitleByURL fetches after only scheme validation.

nest-admin before 1.0.1 contains an authentication bypass that lets unauthenticated attackers forge administrator tokens using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret trusted by JwtStrategy and RbacGuard, impersonating any user ID or claiming the admin role.

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID and username.

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.story_get endpoint. Because UnionStory.get_by_feed_offset ignores the only_publish flag, attackers can enumerate feed IDs and offsets.

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability. Attackers can execute shell commands by supplying crafted Salesforce CLI tool flag values, because escapeValue() in src/utils.ts fails to neutralize backticks, $() substitution, and other shell metacharacters that reach execSync in executeSfCommand.

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp(). Attackers can execute shell commands through unsanitized MCP tool parameters such as message_id, subject, or query by injecting $() or backtick substitutions.

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist using $(...) or backtick substitution. Attackers can inject commands through parameters interpolated into Device.run_shell() or unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices.

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability. Attackers can execute commands by supplying shell metacharacters in the repo argument, which is interpolated into gh issue view or gh pr view commands run via execSync().

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. A crafted ILBM file with more than 8 HAM bitplanes causes reads past the colormap stack array.

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. A crafted .zck file whose header ends inside a compressed integer causes reads past the heap header buffer.

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. A crafted BMP file with a large header width wraps dx_bytes, causing crashes or heap memory disclosure into the decoded image.

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when guests are disallowed. An attacker can set additional_guests to the remaining seat count in modules/events/events_function.php to exhaust event capacity and block other members from registering.

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using response_mode=form_post to capture codes, then redeem them via HTTP Basic client credentials to hijack back-office sessions and execute code through Razor templates.

A vulnerability was identified in a2aproject a2a-go up to 2.4.0 in the Cancel function of internal/taskexec/distributed_manager.go of the Distributed Manager component. Manipulation leads to denial of service, and the attack can be launched remotely.

A vulnerability was determined in a2aproject a2a-go up to 2.4.0 in an unknown function of a2asrv/rest.go of the REST SSE handler component. Manipulation causes resource consumption, and the attack can be initiated remotely.

A misconfiguration issue in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, potentially resulting in information exposure or affecting service availability. This affects Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions, and Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions.

A vulnerability in Shirt Pocket's SuperDuper! 4.0.9 and earlier allows a local attacker to obtain sensitive information.

A vulnerability in Keepnet Labs Agentic AI / Agentic Ally allows authentication bypass by spoofing. The issue affects versions before 0ef61f2e.

NVIDIA NeMo Agent Toolkit contains a SQL injection vulnerability that an attacker could exploit. Successful exploitation may lead to data tampering, denial of service, and information disclosure.

NVIDIA NeMo Agent Toolkit contains a missing authentication vulnerability that an attacker could exploit. This may lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.