CVE Vulnerability Catalog

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands into the oldPIn field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the action_value field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the ussdValue and selectMenuValue fields, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host and ipVer fields, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges.

D-Link DWR-M961 devices (hardware version C1, firmware before 1.1.5_C1_202607071108) contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges.

In the Linux kernel, the decode_lockers() function in libceph contains two unsafe decode operations that allow a malicious or compromised OSD to trigger slab-out-of-bounds reads. Missing bounds checks before reading the locker count and lock type can lead to unauthorized memory reads. The vulnerability is fixed by replacing the unsafe operations with safe variants that include bounds checking.

The AI Copilot – Content Generator plugin for WordPress up to version 1.5.6 has an authorization bypass vulnerability. Unauthenticated attackers can create an administrator account and take over the site by saving and executing a malicious workflow with wp_create_user. This is possible because the nonce is exposed in public JavaScript.

OpenYak is a local-first agent runtime, and prior to version 1.1.3 the desktop backend binds an HTTP API to 127.0.0.1:random port without Origin validation, loopback authentication, or Content-Type enforcement, with a wildcard CORS policy. Any webpage visited while OpenYak is running can issue cross-origin requests to this local server, allowing arbitrary shell command execution on the host (RCE), service shutdown, and exfiltration of chat history and PII.

scim-patch, a library for SCIM patch operations, prior to version 0.9.1 is vulnerable to prototype pollution when applying a SCIM PATCH operation whose 'value' object contains a key like '__proto__.someProp'. After such a patch, Object.prototype.someProp is set process-wide, affecting every plain object in the Node process.

Kata Containers prior to version 3.31.0 is vulnerable to a guest-root to host-root escape in the standalone virtio-fs path. In this configuration, the host virtiofsd runs as root with --sandbox none --seccomp none, allowing an attacker with root access in the guest to bypass the guest virtio-fs client and submit raw FUSE requests to the host virtiofsd, creating symlinks in sensitive host locations such as /etc/cron.d, leading to host code execution as root.

Kata Containers prior to version 4.0.0 is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an arbitrary io.katacontainers.config_path pod annotation and loads the referenced host TOML file without restriction, allowing a pod user who can place a file at a host-visible path to supply a configuration that selects an attacker-controlled hypervisor or virtio-fs daemon binary, executing code as root on the host.

LightRAG through version 1.5.4 has an API server that binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modify the knowledge graph, cancel pipelines, clear caches, and consume LLM resources.

Meta Ads MCP prior to version 1.0.109 has a vulnerability in AuthInjectionMiddleware.dispatch() that unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a 401 response, allowing any network-reachable caller to invoke MCP tools without authentication. When no per-request credential is present, tool handlers fall back to the META_ACCESS_TOKEN environment variable, and when the downstream Meta Graph API call fails, the JSON-RPC response body includes the raw request URL with the access token, exposing the credential to the unauthenticated caller.

crypto-js prior to version 4.0.0 generates randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random(), instead of a cryptographically secure source. This generator was introduced in version 3.1.2-4 and remained in nearly every 3.x release. Requests for 128 or 256 bits of entropy produce effective search spaces of approximately 2^39 and 2^47 possibilities, small enough to enumerate on commodity hardware.