CVE Vulnerability Catalog

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file.

An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses an insecure timing comparison that leads to an attacker being able to bruteforce the admin password by measuring timing differences in the comparison.

An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using an open redirect vulnerability.

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.

A missing authentication vulnerability was determined in 0x4m4 HexStrike AI up to commit d689933ff579d839c676c82b231f8e98326c5f04, in an unknown function of hexstrike_server.py (API Command Endpoint component). The manipulation causes missing authentication. The attack can be initiated remotely and the exploit has been publicly disclosed. The product uses rolling releases, so no version details are available.

An OS command injection vulnerability was found in 0x4m4 HexStrike AI up to commit d689933ff579d839c676c82b231f8e98326c5f04, in an unknown function of hexstrike_server.py (Execute Endpoint component). Manipulating the code/script argument leads to command injection. The attack is possible remotely and the exploit has been disclosed publicly. The product uses rolling releases, so no version details are available.

An OS command injection vulnerability was found in GH05TCREW PentestAgent up to commit cf882dabea3ed91cef016cdd115e5426315665a2, in the LocalRuntime.execute_command function of runtime/runtime.py (LocalRuntime component). The manipulation leads to command injection. The attack may be performed remotely and the exploit has been published. The pull request to fix this issue awaits acceptance.

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. The vulnerability affects the run_task function in interface/main.py of the MCP HTTP Server component and allows OS command injection. The attack can be carried out remotely and the exploit is publicly available.

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. The Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RRC Reconfiguration message.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an information leak occurs due to insertion of sensitive information into debugging code.

A security vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. It affects an unknown part of /subject1.php, and manipulation of the subject argument leads to cross site scripting. The attack can be executed remotely and the exploit has been publicly disclosed.

A weakness was identified in FedML-AI FedML up to 0.9.6. It affects the S3Storage.read_model function in fedml/core/distributed/communication/s3/remote_storage.py of the MQTT+S3 Communication Backend component, and manipulation of the s3_key_str argument causes deserialization. Remote exploitation is possible and the project has not responded to the report.

In GPAC up to f1219cde, a vulnerability was found in the function stbl_GetSampleInfos of file isomedia/stbl_read.c in the MP4Box component. The manipulation results in a reachable assertion, the attack requires local access, and the exploit has been publicly released.

In GPAC up to f1219cde, a vulnerability was identified in the function gf_sm_dump_command_list of file scene_manager/scene_dump.c in the MP4Box component. The manipulation leads to a reachable assertion, the attack requires local access, and the exploit is publicly available.

In GPAC up to f1219cde, a vulnerability was determined in the function xmt_parse_element of file scene_manager/loader_xmt.c in the MP4Box component. The manipulation leads to a reachable assertion, the attack is restricted to local execution, and the exploit has been publicly disclosed.

In GPAC up to f1219cde, a vulnerability was found in the function gf_svg_attributes_copy of file scenegraph/svg_attributes.c in the MP4Box component. The manipulation results in a buffer over-read, the attack is only possible with local access, and the exploit has been made public.