CVE Vulnerability Catalog

PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Process Control vulnerability. A high-privileged attacker with remote access could exploit it to bypass protection mechanisms.

PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Path Traversal vulnerability. A high-privileged attacker with remote access could exploit it to achieve command execution.

Privilege escalation vulnerability in the DOM: Navigation component. It was fixed in Firefox 159 and Thunderbird 159.

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file without verifying its plugin-password signature. A rogue local process with write access to the Electrum data directory can place plugin code in the plugins/ folder and mark it enabled, causing arbitrary code execution inside the Electrum process.

Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction and display an invalid zero-fee copy paying an attacker address, tricking users into RBF fee-bumping and signing it.

hagent through commit 761eec6 contains an OS command injection vulnerability. MCP clients can execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools, which are interpolated into arduino-cli and idf.py commands run via subprocess.run(shell=True).

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py. MCP clients can run commands via unsanitized scanner parameters such as target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True.

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability. Attackers can run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools, embedding $(), backticks or a closing double quote in an existing file or directory name.

esp-mcp through commit 28afddf contains an OS command injection vulnerability. Attackers can run arbitrary commands by supplying shell metacharacters in MCP tool parameters such as target, port, project_path, or project_name passed to asyncio.create_subprocess_shell.

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability. Attackers can execute shell commands by supplying crafted Salesforce CLI tool flag values, because escapeValue() in src/utils.ts fails to neutralize backticks, $() substitution, and other shell metacharacters that reach execSync in executeSfCommand.

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp(). Attackers can execute shell commands through unsanitized MCP tool parameters such as message_id, subject, or query by injecting $() or backtick substitutions.

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist using $(...) or backtick substitution. Attackers can inject commands through parameters interpolated into Device.run_shell() or unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices.

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability. Attackers can execute commands by supplying shell metacharacters in the repo argument, which is interpolated into gh issue view or gh pr view commands run via execSync().

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using response_mode=form_post to capture codes, then redeem them via HTTP Basic client credentials to hijack back-office sessions and execute code through Razor templates.

A vulnerability in Keepnet Labs Agentic AI / Agentic Ally allows authentication bypass by spoofing. The issue affects versions before 0ef61f2e.

NVIDIA NeMo Agent Toolkit contains a SQL injection vulnerability that an attacker could exploit. Successful exploitation may lead to data tampering, denial of service, and information disclosure.

NVIDIA TensorRT-LLM contains a server-side request forgery (SSRF) vulnerability that an attacker could exploit. Successful exploitation may lead to information disclosure.

NVIDIA TensorRT-LLM contains a vulnerability in KvCacheAwareRouter tokenizer loading that allows inclusion of functionality from an untrusted control sphere. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.

NVIDIA PhysX contains an out-of-bounds write vulnerability that an attacker could exploit. Successful exploitation may lead to code execution, data tampering, denial of service, and information disclosure.

NVIDIA TensorRT-LLM contains a server-side request forgery (SSRF) vulnerability that an attacker could exploit. Successful exploitation may lead to information disclosure and data tampering.