CVE Vulnerability Catalog

Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the login_banner field. Attackers can submit a single-line banner containing '}' to escape the unquoted strongswan.conf attr value and define charon.start-scripts entries that charon executes as root on restart.

pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit crafted POST values that configure_cron() writes unescaped into /etc/crontab, running arbitrary root commands on schedule.

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a limiter, then delete it so delete_queue() passes the unquoted value to dnctl via /bin/sh as root.

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as root by storing an unvalidated CARP VHID. Attackers can supply a VHID containing shell metacharacters that executes via interface_ipalias_configure() ifconfig calls or get_carp_interface_status() when CARP status is rendered.

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. Attackers can set a gateway Monitor IP whose unvalidated zone carries a payload, which start_dpinger() passes unescaped to the dpinger shell command when monitoring is applied.

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability. An authenticated user with limited Wireless Edit or Interface Assignments privileges can supply a crafted wireless parent interface name (e.g. ath0;<cmd>), which is interpolated unescaped into an ifconfig shell command, allowing commands to be executed as root.

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability. An authenticated user with QinQ edit privilege can store an unvalidated parent interface name that is later interpolated into ifconfig shell commands, executing commands as root.

LightLLM through 1.2.0 contains a denial of service vulnerability. An unauthenticated attacker can send a single request to the /generate endpoint with the internal pd_kv_trans_params field, causing pickle.loads to fail in InferSamplingParams and killing the inference thread while /health stays up and later requests hang until restart.

undici, an HTTP client library for Node.js, in versions 6.23.0-6.29.0, 7.18.0-7.30.0, and 8.0.0-8.12.1 crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects the response due to a content-encoding limit, but the internal response stream was created before that check without an error listener or request abort, so the early close surfaces an unhandled error and terminates the process.

undici in versions 7.0.0-7.30.0 and 8.0.0-8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, builds the cache key from the original request URL before the redirect handler changes the origin. A response produced after a cross-origin redirect is stored under the original key, allowing persistent cache poisoning and disclosure of private data to a later unauthenticated caller.

undici in versions 4.0.0-6.29.0, 7.0.0-7.30.0, and 8.0.0-8.12.1 passes Agent constructor options through a JSON-based deep clone before forwarding them to each per-origin pool. Because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped, so a TLS peer whose certificate the custom callback was written to reject but which passes Node's default checks is silently accepted.

A flaw in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or modify an HTTPRoute attached to a shared Gateway can supply a crafted path, header, or query match value that causes the predicate to skip those checks, while the request is still forwarded to the route's backend.

HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded TEXTAREA and TITLE character content without entity encoding because both elements are treated as special content. During a parse-and-serialize round trip, entity references inside these escapable raw-text elements are decoded by the parser and then emitted as raw markup, changing the document's semantics.

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\Http\Browser uses ClientRequestStream::handleData() to append response-header bytes to an internal buffer without enforcing a size limit. A remote server can send a valid status line and partial header, withhold the \r\n\r\n or \n\n terminator, and continue streaming data so the buffer grows for the life of the connection.

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an application applies this matcher to an attacker-controlled route parameter, a long slug ending in a character rejected by the final assertion causes quadratic backtracking and excessive CPU use.

The bincookie library (a header-only binarycookies parser) prior to version 0.1.9 contains a heap buffer overflow in bincookie_init_file(). The function allocates a buffer based on the actual .binarycookies file length but uses the file-controlled num_pages field as the loop bound for byte-swapping page_sizes entries, allowing reads and writes beyond the heap allocation. Related unvalidated page sizes and cookie_offsets can drive additional out-of-bounds accesses.

Discourse ActivityPub prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5 does not sufficiently verify that the actor authenticated by the signed request matches the Activity actor and owns the referenced federated post. These missing identity and ownership checks allow a remote attacker to edit, delete, or reply to federated posts without the required permissions.

A remote code execution vulnerability in the rlottie library used by Telegram, caused by lack of proper validation of user-supplied data, resulting in a write before the start of an allocated buffer. Exploitation requires user interaction — visiting a malicious page or opening a malicious file.

In @libp2p/webrtc prior to 6.0.28, the webRTCDirect() Node.js listener processes unauthenticated STUN Binding Requests before PeerId authentication, Noise, muxing, and protocol negotiation. The packet-controlled request.ufrag is forwarded to DirectRTCPeerConnection.setLocalDescription and reused as an ICE password without validating its required length and character set, causing an uncaught native invalid_argument and process abort with SIGABRT.

A flaw in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, used by WildFly and JBoss EAP for deployment management, allows an attacker with the Deployer RBAC role to use path traversal sequences to access files outside the deployment directory. This can lead to deletion of arbitrary directories or creation of files with arbitrary content, resulting in full privilege escalation to the SuperUser role.