CVE Vulnerability Catalog

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).

OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload() method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controlled filename to unlink() when rejecting the upload, potentially causing file deletion and denial of service.

SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve employee records belonging to other departments and users.

1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality intended for authorized administrators.

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter.

The "Design Scuole Italia" WordPress theme is affected by multiple authorization bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.

A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.

A flaw was found in environment-modules. A local attacker can place a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name containing shell metacharacters is evaluated as a command.

Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the HTTP clients the library ships receive the original hostname and resolve it a second time when the request is made. An attacker who controls the authoritative DNS for a name can answer the first lookup with a permitted address and the second with a blocked one, and the request then reaches a destination validation never approved. The same window opens without an attacker whenever a name legitimately resolves to different addresses across lookups, such as short record lifetimes or rotation between several addresses. This issue affects safeurl: from 0.1.0 onward.

Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blocklist. Every other address is treated as matching nothing, so a destination that is rejected in its IPv4 form is accepted when written as an IPv6 address, IPv6 entries in the blocklist never match, and a host that resolves to no IPv4 address is accepted regardless of where it points. Deployments that rely on the allowlist instead are unaffected, because there an unmatched address is rejected. This issue affects safeurl: from 0.1.0 onward.

ArcadeDB prior to 26.7.1 allows a reader-role user to submit POST /api/v1/command/{database} with language: js because PolyglotQueryEngine.command, analyze, and registerFunctions do not enforce database-administrator authorization. GraalPolyglotEngine also permits scripts to bypass the allowedPackages whitelist by reflecting from the bound database object to arbitrary host classes.

In mcp-from-openapi (2.3.0–2.5.0) and frontmcp and @frontmcp/adapters (1.2.1–1.5.0), loadOpenAPISpec() forwards untrusted OpenAPI URLs and inputs to the tool generator without proper destination validation. The external $ref guard only checks parsed hostname strings without resolving addresses, pinning validated addresses, revalidating redirects, or normalizing IPv4-mapped IPv6. An authenticated user able to import an OpenAPI specification can force requests to internal services.

The @jhb.software/payload-alt-text-plugin version 0.7.0 for Payload CMS exposes POST /api/alt-text-plugin/generate and /bulk endpoints with a default guard accepting any authenticated user. The req.payload.findByID and req.payload.update calls do not set overrideAccess: false, so Payload defaults to skipping the collection's access functions. An authenticated low-privilege user can read protected documents and overwrite their alt and keywords fields.

webhookd prior to 1.22.0 forwards all incoming HTTP headers into the hook script environment without an allowlist when htpasswd authentication is not configured. If an upstream reverse proxy does not strip a client-supplied X-WebAuthn-User header and a hook script trusts that variable, a remote unauthenticated attacker can spoof another user, bypass script security controls, and access or modify resources.

ToolHive prior to 0.31.0 has a vulnerability in remote authentication where the client trusts the MCP server for authentication discovery destinations, allowing a malicious server to issue GET requests to internal services (link-local, RFC1918, cloud metadata) outside the server's container. This can lead to data exfiltration or privilege escalation.

In Docker MCP Gateway from 0.21.0 until 0.42.2, the attacker-controlled io.docker.server.metadata OCI image label was unmarshalled into the catalog.Server structure for docker:// references and catalog snapshot imports. Runtime-shaping fields including Volumes, User, and ExtraHosts were appended to the docker run arguments without an origin allowlist. A malicious image author can force host filesystem or Docker socket mounts and UID 0 execution.

In GeoNetwork prior to 4.2.17 and 4.4.12, the POST /api/tools/ogc/sld endpoint accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server send requests to internal hosts not publicly reachable. When the response was XML, the endpoint could store and return the fetched body.

qbee transport prior to 1.26.25 has a vulnerability in the extractTar routine that uses strictly lexical path validation without accounting for on-disk symlinks created earlier. A crafted tar archive can use a symlink chain to write files one directory level above the intended extraction path, and with root privileges permits a root-privileged file write outside the intended destination.

OpenBao prior to 2.5.5 has a vulnerability where an authenticated caller with write access to transit/keys/* can terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. A mutex double-unlock error leads to a panic, no HTTP response, and denial of service.

OpenBao prior to 2.5.5 allows users granted capabilities on /sys/namespaces/root within a non-root namespace to exploit special handling of the literal root path in namespace canonicalization. ACL checks occur before root canonicalizes to an empty path, so /sys/namespaces/root resolves to the system backend's containing namespace, allowing permitted lookups, deletion, locking, or custom metadata changes against that namespace.