CVE Vulnerability Catalog

A security vulnerability has been detected in Toggl Track Extension version 4.11.16. It affects an unknown function in the postMessage Handler component, where manipulation leads to an origin validation error. The attack can be initiated remotely, and the exploit has been publicly disclosed.

MCPHub prior to version 1.0.30 does not enforce ownership restrictions in the tool-execution API. Any authenticated non-admin user can invoke tools on MCP servers owned by other users, even if they cannot see those servers in GET /api/servers. This can lead to arbitrary host file read (e.g., /etc/passwd) and SSRF.

MCPHub prior to version 1.0.32 has an SSRF guard flaw in src/utils/ssrf.ts. The isBlockedIpv6 function only checks for loopback, link-local, unique-local, IPv4-mapped, and IPv4-compatible IPv6 addresses, but not IPv6 transition address families (NAT64, 6to4, Teredo). An attacker can encode a private IPv4 address in these IPv6 forms to bypass the guard and reach internal infrastructure.

MCPHub before version 0.12.15 lacks authorization checks for admin-only endpoints and does not sanitize command and args fields. Any authenticated non-admin user can execute arbitrary processes as the MCPHub server OS user, often root.

MCPHub prior to version 1.0.32 allows an authenticated non-admin user to register a server pointing at an arbitrary URL and make the hub issue server-side requests to it, with no egress filtering (no block of loopback / RFC1918 / link-local). Via the OpenAPI proxy path the response body is returned to the caller (full, reflected SSRF); via the SSE/streamable-http transport the request is sent blind.

MCPHub prior to version 1.0.31 has an authorization flaw for bearer keys with accessType 'servers' or 'custom' used against group routes. isBearerKeyAllowedForRequest grants access to the entire group as long as any single server in that group appears in the key's allowedServers list, without re-checking after authorization. A key scoped to one server also grants full access to every other server in the group.

MCPHub prior to version 1.0.32 does not perform role checking in the built-in prompt and resource controllers. The mutating POST/PUT /api/prompts* and POST/PUT /api/resources* routes are attached to the authenticated router with no admin gate, and the handlers never read req.user. A non-admin can create, overwrite, and shadow global prompt templates and resources that all other users are served.

MCPHub prior to version 1.0.29 has a flaw in the PUT /api/system-config endpoint (handler updateSystemConfig) that performs no authorization check. It is protected only by the app-wide authentication middleware and a rate limiter, but never inspects req.user.isAdmin.

MCPHub prior to version 0.12.13 has a vulnerability in the MCPB file upload handler. When extracting a ZIP file, the 'name' field in the manifest is directly concatenated into a file path without sanitization, allowing arbitrary file write via path traversal. The cleanupOldMcpbServer function also uses the unsanitized name, potentially allowing deletion of arbitrary directories. This issue has been patched in version 0.12.13.

The delWiFiAclRules function in TOTOLINK T6 4.1.5cu.748_B20211015 has incorrect access control, allowing unauthenticated attackers to remove Wi-Fi ACL rules via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the delDevice function of TOTOLINK T6 allows unauthenticated attackers to request deletion of a managed slave device by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 allows unauthenticated attackers to upload a crafted firmware image by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the SystemSettings function of TOTOLINK T6 allows unauthenticated attackers to retrieve administrative import and export endpoint information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the delParentalRules function of TOTOLINK T6 allows unauthenticated attackers to remove parental-control rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

The NTPSyncWithHost function in TOTOLINK T6 4.1.5cu.748_B20211015 has incorrect access control, allowing unauthenticated attackers to change the device clock via a crafted POST request to /cgi-bin/cstecgi.cgi.

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded (RFC 5891), so a label that is not already in NFC is encoded to a different A-label than its normalized form. A label built from the precomposed Devanagari sequence U+0958 U+093E encodes to xn--72b5c without normalization but to xn--11b2fg after NFC normalization, and xn--72b5c does not round-trip back to the original label. Any caller that reads host() from a URI built from untrusted input and uses it for a security decision (an allow or deny list, an SSRF filter, deduplication, a cache key) sees the non-standard label, while a client that fetches the same URL resolves the NFC form, so the check and the fetch can disagree about the host.

In extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome, a weakness was found in the function chrome.runtime.onMessageExternal.addListener in the Background Service Worker. Manipulating the sender.id argument can lead to information disclosure. The attack requires local access.

An information disclosure vulnerability was found in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The issue is in the window.addEventListener function of the postMessage Handler component, where manipulating the vidiqEvent argument leads to information disclosure. The attack can be performed remotely and the exploit is public.

A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. It affects an unknown function in the file dist/service-worker.production-esm.js of the Google OAuth Client Secret component. Such manipulation leads to hard-coded credentials. The attack can be executed remotely, and the exploit is publicly available.

In TOTOLINK T6 router version 4.1.5cu.748_B20211015, incorrect access control in the delSmartQosCfg function allows unauthenticated attackers to remove Smart QoS rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi.