CVE Vulnerability Catalog

High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES encryption keys, a Man-in-the-Middle attacker can decrypt network traffic.

The production build of M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

The ai_cmd utility runs with full root permissions and pipes socket inputs directly to popen(), allowing unauthenticated users to execute arbitrary root commands.

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). Any client can subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.

Vulnerability in FieldX MDM: the adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.

OpenStack Mistral through version 22.0.0 contains a remote code execution vulnerability when the API is exposed. Endpoints allow code execution, which can lead to exfiltration of service credentials.

In the Linux kernel, a vulnerability in RAW sockets using IPPROTO_RAW allows malicious ICMP packets to set the protocol field to 255 and match such a socket, leading to FNHE cache changes.

In the Linux kernel netfilter nft_inner module, there is a desynchronization between the transport offset and layer 4 protocol for inner IPv6 packets. The bug overwrites the correct offset calculated by ipv6_find_hdr() with a constant 40 bytes, enabling transport header forgery and potential firewall bypass. This affects stable kernel versions from 6.2.

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization by overriding the trust_remote_code parameter with untrusted configuration data.

An unauthenticated remote attacker can recover a default, hard-coded password from a firmware image and gain full access to all affected devices.

The ZDRES-232 and ZDRES-233 library contains two vulnerabilities: (1) Bypass of acceptMatchers filter via java.lang.reflect.Proxy because resolveProxyClass is not overridden, allowing deserialization of arbitrary proxy classes. (2) Calling Class.forName with static initialization for allow-listed classes can trigger dangerous static initializers.

ABB T-MAC Plus version 4.0-24 contains a vulnerability allowing external parties to access files or directories.

LibreChat up to version 0.8.3 has a vulnerability in the MCP server integration that resolves ${VAR} placeholders from process.env during Zod schema validation of user-supplied MCP URLs. An authenticated user can create a malicious MCP configuration that sends critical secrets (CREDS_KEY, CREDS_IV, JWT_SECRET, MONGO_URI) to an attacker-controlled server.

Vulnerability in authentik (identity provider) prior to versions 2025.12.6, 2026.2.4, and 2026.5.1 allows bypassing the Source stage by sending an empty POST request.

XSS vulnerability in the AutosubmitStage component in authentik (open-source identity provider) prior to versions 2025.12.5 and 2026.2.3, allowing an attacker to inject malicious scripts.

The ARMember Premium plugin for WordPress up to version 7.3.1 stores a plaintext password reset key in the `arm_reset_password_key` user meta field. Combined with other vulnerabilities (e.g., SQL Injection), this allows an attacker to take over any user account, including administrators.

Vulnerability in CrowCpp Crow through v1.3.1 HTTP allows response header injection via unvalidated response header values.

OpenClaude prior to version 0.5.1 exposes the dangerouslyDisableSandbox parameter in the BashTool input schema, allowing a prompt-injected model to escape the sandbox and achieve full host-level code execution.