CVE Vulnerability Catalog

When using RPK, the client side of TLS 1.2, 1.3 and DTLS 1.2 connections could accept an unsolicited server_cert_type=RawPublicKey, allowing a malicious or misbehaving server to bypass authentication. RPK is off by default and only enabled in specific builds.

A vulnerability in wolfSSL when WOLFSSL_SMALL_CERT_VERIFY is enabled allows an attacker to bypass certificate signature verification. Due to incorrect result merging, parse errors hide invalid signatures, and date/constraint checks are performed before signature confirmation. An attacker can use a self-signed certificate with arbitrary signature bytes to pass verification if the application uses a callback that overrides date errors.

The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation check on one of its AJAX actions, allowing users with a subsite administrator role on a multisite network to write and delete arbitrary files in the network's shared filesystem, which can lead to remote code execution.

The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked download subscription form before outputting it back in an admin page, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators. This affects the commercial Pro edition only; the free Download Manager WordPress plugin before 7.5.6 published under the same slug does not ship the affected feature.

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged-in user under a configuration its own settings allow, and does not filter the content saved there. This allows users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.

A vulnerability in coollabsio Coolify up to 4.1.0 affects the Github::redirect function in /webhooks/source/github/redirect of the GitHub App Setup Handler component. Manipulation of the state argument results in missing authentication. The attack can be executed remotely, and the exploit has been made public. Version 4.1.1 mitigates the issue.

Vulnerability in Heym before 0.0.53 where workflow condition expressions are evaluated using Python's eval() with insufficient sandboxing in the workflow executor service.

heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and fallback resolver that allows authenticated users to execute arbitrary Python code. Attackers can craft workflow expressions using dunder attribute access to access os.system and execute commands as the backend process.

AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString() method that fails to sanitize Liquidsoap string interpolation sequences. Authenticated users with Media or Profile permissions can inject arbitrary Liquidsoap code into station configuration, leading to shell command execution as the azuracast user when the station restarts.

AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute arbitrary code in the Liquidsoap process, disclose internal API keys, or disrupt station operation.

Command injection vulnerability in AzuraCast before 0.23.8 in Liquidsoap config generation for live recording, due to failure to quote streamer username in process.run calls.

AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/{id}/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this endpoint and receive plaintext frontend credentials in the JSON response, then use the admin password to authenticate to the Icecast admin interface without Broadcasting permission.

AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability in the AutoDJ remote playlist fetch (getMediaFromRemoteUrl()). A user with Media permission can create a playlist with source=remote_url and remote_type=playlist pointing to a file:// path or internal HTTP endpoint. When AutoDJ builds the queue, the backend passes the URL directly to file_get_contents() with no scheme allowlist or private/loopback IP policy, allowing disclosure of host files (e.g., /etc/passwd or .env) and bodies of internal HTTP requests. No patched version was available at the time of publication.

AzuraCast before 0.23.8 contains an SSRF vulnerability in webhook URL validation. The validation only rejects link-local IP addresses, not loopback or private ranges, and non-IP hostnames bypass the check entirely. A user with WebHooks permission can configure a webhook to internal resources and trigger an HTTP POST with Now Playing data.

AzuraCast before 0.23.8 contains an SSRF vulnerability in Remote Relay URL validation. The validation only checks URL syntax and scheme, with no host or IP restrictions. A user with RemoteRelays permission can set a URL to loopback, private network, or cloud metadata addresses, and the automatic Now Playing sync will send requests to those addresses.

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder parameter in AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions to extract sensitive database information, including user credentials and station settings.

MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py. The function reads a .pkl file and passes its contents to pickle.loads without validating the data source or content. If an application invokes algo_from_pickle on an attacker-supplied pickle file, an object defining __reduce__ is executed during deserialization, resulting in arbitrary code execution.

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component. User-controlled values from the YAML configuration file and CLI/kwargs arguments are concatenated into a command string without quoting or validation and then passed to subprocess with shell=True. If a victim loads a crafted configuration file, arbitrary commands are executed with the privileges of the user running the job.

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.