CVE Vulnerability Catalog

Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This TOCTOU gap allowed an attacker with write access to the workspace to atomically replace a project file with a symlink, causing Claude Code to follow the symlink and write output to an arbitrary file outside the project sandbox. Exploitation required winning a race condition and write access to the shared workspace, enabling a lower-privileged attacker to redirect benign edits to sensitive files (e.g., shell configuration) in a higher-privileged session. Users on standard auto-update have received the fix; manual updates should update to the latest version.

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance, which in specific conditions could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

The Slider by 10Web (slider-wd) plugin contains a blind SQL injection vulnerability. The issue affects versions up to and including 1.2.63.

The WP Post Author plugin by AF themes contains a blind SQL injection vulnerability. The issue affects versions up to and including 4.0.0.

GitAhead through version 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames. Attackers can commit a file whose path contains a double quote and a payload, which runs when 'Show in Finder' is selected.

GitAhead through version 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(command) selected via .gitattributes so checkout or staging runs the command through bash -c as the victim.

patool before version 4.0.6 contains an OS command injection vulnerability on Windows because shell_quote_nt fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with shell=True to execute commands with patool process privileges.

Rundeck before version 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which CLIUtils.quoteWindowsCMDArg wraps in ineffective single quotes, running commands with node executor credential privileges.

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory.

Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server.

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality.

The Pix por Piggly (para Woocommerce) plugin contains a blind SQL injection vulnerability. The issue affects versions up to and including 2.1.2.

The WordPress plugin 'Post title marquee scroll' is vulnerable to blind SQL injection in versions up to 9.9. An attacker can manipulate input to execute unauthorized database queries.

The Site Search function in Movable Type contains an SQL injection vulnerability that may allow an unauthenticated attacker to execute arbitrary SQL queries on the affected product.

The affiliate-toolkit-starter plugin by SERVIT Software Solutions contains a Blind SQL Injection vulnerability due to improper neutralization of special elements in an SQL command. This issue affects versions up to and including 3.9.1.

The Dynamic User Directory plugin by Sarah Giles contains a Blind SQL Injection vulnerability due to improper neutralization of special elements in an SQL command. This issue affects versions up to and including 2.4.

The OMGF WordPress plugin is vulnerable to Stored Cross-Site Scripting via the 's' Search Parameter in comments-atom Feed in all versions up to and including 6.3.10 due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user accesses an injected page, provided the front-end server serves the retained .tmp file without proper Content-Type headers.

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200 web portal allows an authenticated user to read any file or list any directory accessible to the web server user by modifying the URL with a path traversal payload.

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.

In the IEEE 802.15.4 stack in Zephyr, the function ieee802154_decipher_data_frame() does not check if the frame is long enough before computing the payload length. Subtracting the header and authentication tag length from the frame length can underflow, leading to an out-of-bounds read and write. An attacker within radio range can send a short frame, causing memory corruption and system crash.