CVE Vulnerability Catalog

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An attacker can exploit this vulnerability by injecting specially crafted shell metacharacters or payloads into the vulnerable parameter, resulting in the execution of arbitrary operating system commands.

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An attacker can exploit this vulnerability by injecting specially crafted shell metacharacters or payloads into the vulnerable parameter, resulting in the execution of arbitrary operating system commands.

An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components.

The Tutor LMS WordPress plugin before version 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output.

ServiceNow has remediated an improper access control vulnerability in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ServiceNow deployed a security update to hosted instances and provided the update to partners and self-hosted customers. No exploitation is currently known.

ServiceNow has remediated a code injection vulnerability in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond what was intended. ServiceNow deployed a security update to hosted instances and provided the update to partners and self-hosted customers. No malicious exploitation is currently known.

Affected versions of Flowintel do not revoke existing authenticated sessions when a user's password is changed. An attacker with a valid session retains access until it expires. The fix detects password changes and explicitly invalidates user sessions after the database update, applied in edit_user_core() and admin_edit_user_core(). Versions >=3.3.0 are affected.

In the mcp-http-server package of UI-TARS-desktop, startServer.ts defaulted the listen address to '::' (all interfaces), and authentication middleware was optional. The commands and filesystem servers exposed tools without requiring credentials, allowing unauthenticated clients to run arbitrary commands or read/write files. The listen default changed to 127.0.0.1 in commit c2ad42e3eb9b27830db41a3e6f51ca7179d9b168; package version remained 1.2.4.

openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line. Attackers can deliver crafted identity bundles to manipulate terminal output and display a fraudulent fingerprint, bypassing out-of-band verification.

openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can replace legitimate keys with their own while maintaining the claimed fingerprint, enabling silent key substitution.

openssl_encrypt before 1.4.9 uses a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins to achieve arbitrary code execution in the CLI process with access to passwords and cryptographic keys.

openssl_encrypt before 1.4.9 contains a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers with compromised-then-revoked or expired keys can bypass signature verification to execute malicious plugins.

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. Requests without credentials could initialize and dispatch tools, forwarding the server's stored credentials (Telnyx API key, client secret, code-execution key) to the upstream endpoint. The current code defaults to loopback, requires a server API key, and enforces it in middleware.

ToolUniverse ran caller-supplied Python inside an escapable sandbox on a server with no authentication. The executor left attribute-lookup builtins available and did not block dunder attributes reached via string lookup or permitted modules, allowing escape to process and subprocess modules. HTTP and MCP servers bound to all interfaces with debugging enabled and no authentication, so any caller could execute code as the server process. Version 1.3.0 adds bearer-token authentication, defaults to loopback, and hardens attribute checks.

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. A default invocation exposed the aggregator and every MCP server it fronted to anyone able to reach the port. Release 0.6.3 defaults the host to loopback and refuses to start without a token when the host is not loopback.

DJI drones contain an FTP service with hardcoded credentials shared across affected models, allowing authenticated users to upload files without limits and overwrite files in **/blackbox/upgrade/**. An attacker with network or USB RNDIS access can exhaust storage, preventing flight records and firmware updates. Uploaded files persist across reboot and factory reset.

An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components.

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ip_address parameter is embedded directly into a shell command without sanitization, enabling shell escape via single-quote injection.

In the EcoOnline EHS (com.airsweb.v10) Android application, version 0.2.499, a remote attacker can obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component.

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.