CVE Vulnerability Catalog

Heimdall, a proxy and access control service, prior to version 0.17.14 handled URL-encoded slashes in a case-sensitive manner, leading to request path interpretation issues. As a result, the lowercase equivalent (%2f) was not recognized, potentially resulting in authorization bypass.

In Axios versions 1.0.0 through 1.15.1, five config properties (auth, baseURL, socketPath, beforeRedirect, insecureHTTPParser) in the HTTP adapter are read without hasOwnProperty checks, making them exploitable as prototype pollution gadgets. When Object.prototype is polluted by another dependency, Axios silently picks up these polluted values on every outbound HTTP request.

A vulnerability in PromptHub allows SSRF (Server-Side Request Forgery) attacks due to improper IPv6 address validation, enabling authenticated users to access private IP addresses. The issue affects versions from 0.4.9 to before 0.5.4.

LiteLLM versions 1.80.5 through 1.83.7 have a vulnerability in the POST /prompts/test endpoint that accepts user-supplied prompt templates and renders them without sandboxing. A crafted template can execute arbitrary code within the LiteLLM Proxy process.

OpenLearnX to otwartoźródłowa, zdecentralizowana platforma do nauki i oceniania. Przed wersją 2.0.3 zidentyfikowano podatność na zdalne wykonanie kodu (RCE) w środowisku wykonawczym OpenLearnX, co umożliwia ucieczkę z piaskownicy i wykonywanie dowolnych poleceń.

A vulnerability was found in SourceCodester SUP Online Shopping 1.0 that allows SQL injection through manipulation of the msgid argument in the /admin/viewmsg.php file. The attack can be carried out remotely.

A flaw has been found in SourceCodester Comment System 1.0 affecting some unknown processing of the file post_comment.php. Manipulation of the argument 'Name' leads to SQL injection vulnerability.

A vulnerability in the MAXHUB Pivot client application versions prior to v1.36.2 may allow an attacker to obtain encrypted tenant email addresses and related metadata. Due to the presence of a hardcoded AES key within the application, the encrypted data can be decrypted, enabling access to tenant email addresses in cleartext.

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled JSON request bodies without size or depth limits.

A server-side request forgery (SSRF) vulnerability in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

OpenStack Cyborg before version 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope.

Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.

A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.

In Copilot Chat (Microsoft Edge), improper neutralization of special elements used in commands leads to command injection vulnerability. This allows an unauthorized attacker to disclose information over a network.

Azure Machine Learning has an improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) vulnerability. This allows an unauthorized attacker to perform spoofing over a network.

W M365 Copilot występuje niewłaściwe neutralizowanie specjalnych elementów używanych w poleceniach, co prowadzi do podatności na wstrzykiwanie poleceń ('command injection'). Umożliwia to nieautoryzowanemu atakującemu ujawnienie informacji przez sieć.

W M365 Copilot występuje niewłaściwe neutralizowanie specjalnych elementów używanych w poleceniach, co prowadzi do podatności na wstrzykiwanie poleceń ('command injection'). Ta luka umożliwia nieautoryzowanemu atakującemu ujawnienie informacji przez sieć.

A vulnerability has been detected in Feedback System 1.0 that allows SQL injection through manipulation of the email argument in the /admin/checklogin.php file. The attack can be executed remotely.

n8n-MCP versions 2.47.4 through 2.47.13 have an incomplete URL validator in SSRFProtection.validateUrlSync() that lacks IPv6 checks. IPv4-mapped IPv6 addresses such as http://[::ffff:169.254.169.254] bypass cloud-metadata, localhost, and private-IP range checks, allowing an attacker to make the server issue requests to sensitive targets and return responses plus the x-n8n-api-key header. The issue is fixed in version 2.47.14.