CVE Vulnerability Catalog

A vulnerability was detected in dmlc dgl up to version 2.1.0. It impacts the functions load_info and _read_torch_data in utils.py. Performing a manipulation of the path argument results in deserialization. The attack can be initiated remotely, and the exploit is now public. The project was informed of the problem early but has not responded yet.

A weakness has been identified in piskvorky gensim up to version 4.4.0. The impacted element is the Load function in gensim/utils.py of the Model Loader component. Manipulation of the fname argument causes deserialization. The attack can be initiated remotely, and the exploit has been made public. The maintainer closed issue #3663 same-day with no comment, and the unsafe pickle.load in SaveLoad.load remains unguarded.

A security flaw has been discovered in JusticeRage Manalyze 1.0.0 in the function PE::_parse_debug of file manape/pe.cpp (PE Parser component). Manipulation of the misc.Length argument results in an integer underflow. The attack may be performed remotely, and the patch is identified as 3e299685759f4f767088871de58c5d07f98ee382.

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d in the function ControlFlowNode of file local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py (pdf-tools-mcp component). Manipulation of the pdf_file_path argument results in server-side request forgery. The attack can be initiated remotely and the exploit has been made public.

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402 in the functions routerd.wificfg_get/routerd.get_rand_key of the ubus JSON-RPC interface. Manipulation leads to information disclosure, and the attack must be carried out from within the local network. Upgrading to version 1.0.7.260821.161908 addresses the issue.

A flaw has been found in 06ketan slideshot up to 4.4.0 in the function render_slides of file packages/cli/src/renderer.ts. Manipulation of the htmlPath argument causes path traversal. The attack is possible remotely and the exploit has been published.

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0 in the function Save of file app/Controllers/UserController.php. Manipulation of the role_id argument results in improper privilege management. The attack can be executed remotely and the exploit is now public.

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32 in the function importTemplate of file src/services/templateService.ts (Template Import Endpoint component). Manipulation leads to improper privilege management. Remote exploitation is possible and the exploit has been disclosed publicly. Upgrading to version 1.0.33 resolves the issue.

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8 in the function get_file_snippet of file getFileSnippet.ts (MCP Tool component). Manipulation of the projectRootPath/filePath arguments can lead to path traversal. The isPathInsideProjectRoot guard only blocks filePath escaping the attacker-chosen projectRootPath, but the root itself is untrusted client input. The attack may be launched remotely and the exploit is publicly available.

A vulnerability was determined in Free5GC up to 4.2.3 affecting unknown code of file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go (Gmm Handler component). Manipulation causes a race condition. The attack can be initiated remotely and the patch is identified as e323b01464355781b8b8d5dd695e05cbc00a62f2.

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c in the function mysqli_query of file admin/add_table.php. Manipulation of the table/members/price arguments results in SQL injection. The attack can be launched remotely and the exploit has been made public.

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c affecting unknown functionality of file admin/add_menu.php. Manipulation of the item/price/image/type arguments leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed to the public.

A flaw was found in vas3k TaxHacker up to 0.8.5 in the function testLLMProviderAction of the file app/(app)/apps/settings/actions.ts. Manipulation of the arguments provider/apiKey/model/baseUrl leads to server-side request forgery. The attack can be performed remotely and the exploit has been published.

A weakness was identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405 in the function ControlFlowNode of the file main.py of the analyze_csv_data MCP tool component. Manipulation of the argument filename causes path traversal. Remote exploitation is possible and the exploit is publicly available.

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0 in an unknown function of the file /drug_recommender/index.php. Manipulation of the argument full name leads to cross site scripting. The attack can be launched remotely and the exploit has been publicly disclosed.

A flaw was found in itsourcecode Leave Management System 1.0 in an unknown part of the file /module/department/index.php. Manipulation of the argument ID causes SQL injection. The attack can be initiated remotely and the exploit has been published.

A vulnerability was detected in 0-Gaurav-0 nexus-mcp version aed0026e7ac1f23dc940e46e9fd3a2da6904f914 in the function child_process.exec of the file src/auth/browser.ts of the nexus_reauth MCP tool component. Manipulation of the argument url results in command injection. The attack can be performed remotely and the exploit is now public.

A weakness was identified in mealie-recipes Mealie up to 3.25.1 in the function payload.model_dump of the file mealie/routes/households/controller_group_recipe_actions.py of the Recipe Action Trigger component. Manipulation of the argument url leads to server-side request forgery. The attack can be executed remotely and the exploit is publicly available.

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls, via crafted IOCTL requests sent to the \Device\wsdk device.

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file.