CVE Vulnerability Catalog

A vulnerability was found in CartoDB carto-api-client version 0.5.29 in the addFilter function of src/filters.ts. Manipulation of the column argument leads to improperly controlled modification of object prototype attributes. The attack can be executed remotely.

A vulnerability was found in Inputmask up to version 5.0.9, involving uncontrolled modification of object prototype attributes in the extendDefaults/extendDefinitions/extendAliases functions. The issue resides in lib/dependencyLibs/extend.js and can be exploited remotely.

A command injection vulnerability was found in LiuMengxuan04 MiniCode 0.1.0 in the child_process.spawn function of mcp.ts. The attack can be launched remotely but requires high complexity.

A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the /prescriptionrecord.php file. An attacker can remotely manipulate the delid argument, leading to SQL injection. The exploit has been made public, increasing the risk of attacks.

A vulnerability was found in the write_file component of nearai ironclaw up to version 0.29.1, involving a link following issue in the validate_path function within src/tools/builtin/path_utils.rs. Local access is required, and the exploit is publicly available.

In princezuda SafestClaw up to version 4.2.4, a vulnerability was found in the ShellAction._validate_command function in src/safestclaw/actions/shell.py. Manipulation leads to an incomplete blacklist, allowing local bypass of security controls.

A security vulnerability was found in GoClaw up to version 3.15.0-beta.32, allowing SSRF attacks via the CheckSSRF/isPrivateIP function in internal/tools/web_shared.go. The attack can be launched remotely and the exploit has been publicly disclosed.

In GoClaw up to version 3.13.2, the function ToolsInvokeHandler.ServeHTTP in file internal/http/tools_invoke.go lacks authorization. The attack can be performed remotely, and the exploit is publicly available.

A security flaw in GoClaw up to version 3.13.2 affects the extractBin/RequestApproval/matchesAllowlist function in internal/tools/exec_approval.go, causing incorrect authorization. A public exploit is available, enabling attacks.

A vulnerability was found in GoClaw up to version 3.13.2 in the isSafeBin function of the file internal/tools/exec_approval.go. The issue leads to improper authorization, allowing remote attacks. The exploit is publicly available and may be used.

A vulnerability was found in GoClaw up to version 3.13.3-beta.3 in the matchesAllowlist/extractBin functions of internal/tools/exec_approval.go. Input manipulation can lead to incorrectly-resolved names, enabling remote attacks. The exploit has been publicly disclosed and may be used.

A vulnerability in the WebSocket Approval Endpoint component of GoClaw up to version 3.13.2 involves incorrect authorization in the RequestApproval function. The attack can be performed remotely and the exploit has been made public.

Vulnerability in SurrealDB before versions 2.0.5, 2.1.5, and 2.2.2. Authenticated users with OWNER or EDITOR permissions can define database functions with nested FOR loops, potentially exhausting CPU and rendering the server unresponsive.

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a default execution-time limit on embedded JavaScript scripting functions when scripting is explicitly enabled. An authenticated attacker can submit long-running JavaScript functions to exhaust server resources and cause a denial of service. Scripting is disabled by default.

Memory exhaustion vulnerability in SurrealDB before version 2.2.2 in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory, causing denial of service.

Vulnerability in SurrealDB before version 2.2.2 in the DEFINE ANALYZER statement allows authenticated users to read arbitrary local files. Attackers with root, namespace, or database privileges can point analyzers to arbitrary file paths and exfiltrate content from two-column tab-separated files.

SurrealDB before version 2.2.2 with scripting enabled fails to properly enforce recursion limits when native functions contain embedded JavaScript that issues new queries. Authenticated attackers can bypass the recursion limit by chaining native and JavaScript function calls to trigger infinite recursion and exhaust server memory.

SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instance and any dependent applications.

SurrealDB before version 1.1.0 fails to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attackers can submit queries with excessive nesting depth to cause stack overflow and crash the server.

SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.