CVE Vulnerability Catalog

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0, affecting some unknown functionality in the file hermes-agent/model_tools.py in the Memory Toolset component. The manipulation results in improper access controls. The attack can be executed remotely, and the exploit is now public.

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. It affects the function _select_tools in the file agent/evolution/executor.py of the Self-Evolution Review Agent component. Manipulation leads to incorrect authorization. The attack can be performed remotely, and the exploit is public.

A stack-based buffer overflow vulnerability exists in ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarded to ETD.sys where it is used as a loop counter for a stack buffer copy without destination size validation. A local attacker with standard user privileges can trigger a kernel bugcheck (BSOD 0xF7), resulting in denial of service.

A vulnerability was identified in nearai ironclaw up to 0.29.1. It affects the function classify_command_risk in the file src/tools/builtin/shell.rs. Manipulation leads to command injection. The attack may be launched remotely, and the exploit is publicly available. A patch with ID a1d7c3ba428ed575900469b207fb5668725f9a71 is available.

A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. It impacts the function get_tool_definitions in the file agent/agent_init.py of the disabled_toolsets Handler component. This manipulation causes incorrect privilege assignment. The attack may be initiated remotely, and the exploit has been publicly disclosed.

A vulnerability was found in heshengtao super-agent-party up to 0.4.1. It affects the function get_file_content in the file server.py of the execute_tool_manually Endpoint. Manipulation of the tool_name/tool_params arguments results in information disclosure. The attack can be launched remotely, and the exploit has been made public.

HDF5 prior to 2.3.0 has a vulnerability in H5Z__filter_fletcher32 that computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a size_t underflow. This allows attackers to cause a denial of service (massively out-of-bounds read and application crash in H5_checksum_fletcher32) via a crafted HDF5 file with a Fletcher32-filtered chunk smaller than 4 bytes, triggered via H5Dread, e.g. by the h5ls or h5dump tools.

HDF5 prior to 2.3.0 has vulnerabilities in H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions that advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap read, and in constrained cases disclosure of adjacent heap memory into decompressed dataset values, via a crafted HDF5 file whose N-Bit filter parameters describe more decompressed data than the stored compressed chunk actually contains, triggered via H5Dread, e.g. by the h5ls or h5repack tools.

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. It affects some unknown processing of the file /tags.php. Manipulation of the argument day leads to cross site scripting. The attack may be performed remotely, and the exploit has been disclosed publicly. This product utilizes a rolling release system, so version information is not disclosed.

HDF5 prior to 2.3.0 has a vulnerability in H5Z__filter_nbit that dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the N-Bit filter pipeline message with zero client-data values, opened and read via H5Dread, e.g. by the h5ls or h5repack tools.

H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5S__hyper_iter_get_seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the h5repack tool.

Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.

Nuxt, an open-source web development framework for Vue.js, from version 3.1.0 until 3.21.10 and 4.5.1, allows an attacker to supply a top-level 'as' prop to the /__nuxt_island/ endpoint and drive dynamic component resolution through <component :is>, resolveDynamicComponent, or h(). This issue is fixed in 3.21.10 and 4.5.1.

rclone before version 1.75.0 has a vulnerability in the local backend that allows an attacker-controlled source object to create or overwrite files outside the configured destination directory. This occurs when the local destination uses certain filename encodings that can decode a '..' component into an actual parent directory.

rclone before version 1.75.0 has a vulnerability in the FTP backend that allows injection of an independent authenticated FTP command when the victim copies or syncs to a more-privileged FTP destination. This occurs when a filename contains CR/LF characters that are not rejected by the FTP library.

rclone before version 1.75.0 has a vulnerability in the HTTP CONNECT helper that allows a malicious or compromised proxy to cause excessive memory consumption by sending oversized headers, potentially crashing the rclone process. The vulnerability affects FTP and SFTP proxy connections.

InnoShop up to version 0.8.2 contains a path traversal vulnerability in the FileManagerController::destroyFiles function in the Files Endpoint component. The attack can be initiated remotely, and an exploit has been published.

Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership by querying the GET /guilds/{guild_id}/roles/{role_id}/member-ids endpoint without guild membership verification.

boringproxy through version 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, goroutines, and memory by sending requests to the GET /loading endpoint with attacker-supplied id query parameter values. Each malicious request permanently holds one file descriptor, one goroutine, and approximately 50 kB of memory until the server's file descriptor limit is reached, halting all tunnel traffic forwarding for all users.

A CSRF vulnerability in Livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. The OAuth callback lacks state/nonce verification, enabling session identity substitution.