CVE Vulnerability Catalog

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

FreeRDP before version 3.28.0 treats lines beginning with a forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

Vulnerability in AgenticMail packages (@agenticmail/claudecode before 0.2.39, @agenticmail/codex before 0.1.33, @agenticmail/core before 0.9.43, @agenticmail/openclaw before 0.5.71). An external email sent to the bridge inbox causes the operator's Claude Code session to resume with bypassed permissions, enabling indirect prompt injection into a fully-privileged agent.

Vulnerability in AgenticMail (versions before 0.9.64) allows a low-privileged authenticated agent to enumerate and claim tasks assigned to other agents. Missing authorization in task endpoints.

A vulnerability in NextCRM (open source CRM) allows an authenticated low-privileged user to create, modify, archive, or soft-delete products in the CRM catalog via the MCP API.

NextCRM version 0.12.1 has a vulnerability in MCP campaign tools where handlers ignore the authenticated user ID and operate on campaigns only by object ID. A low-privileged user with a valid MCP API token can enumerate, read, modify, or delete other users' campaigns.

SSRF vulnerability in FlareSolverr before version 3.4.7 in the /v1 API endpoint. A remote attacker can obtain sensitive information.

Multiple weaknesses in AgenticMail before versions 0.9.32 (API) and 0.9.10 (core), related to validation, binding, inactive-agent hour filtering, SQL identifier validation, metadata ownership checks, blocking direct metadata access via raw SQL, outbound worker secret handling, SMTP control character validation, and TLS certificate verification.

Vulnerability in Metasoft 美特软件 MetaCRM up to version 6.4.0 Beta06. An unknown function in the file /business/qnaire/upload.jsp allows unrestricted file upload via the File argument. The attack can be performed remotely, and the exploit is publicly available.

Denial of service (DoS) vulnerability in Tenda TX9 firmware version V22.03.02.20 in the update_dev_name function of the file /goform/SetOnlineDevName. The attack can cause device unavailability.

Improper certificate validation in Apache MINA SSHD (server-side). The server did not check for force-command or verify-required options in OpenSSH certificates, allowing an authenticated user to execute other commands than specified. Fixed in versions 2.19.0 and 3.0.0-M5.

A path traversal vulnerability in the sshd-git component of Apache MINA SSHD on Windows allows an authenticated remote user to access git repositories outside the configured server root directory. The fix for CVE-2026-48827 was partially ineffective on Windows.

Path traversal vulnerability in the sshd-scp component of Apache MINA SSHD. A malicious sender can send filenames containing paths, allowing files to be written to arbitrary locations. Affects applications using SCP to receive files.

Paymenter before 1.5.1 has a vulnerability in the checkout component allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters, potentially overriding resource limits without privileges.

BOLA/IDOR vulnerability in NextCRM (versions prior to 0.12.0) in CRM contact and target update endpoints. An authenticated user can modify data belonging to other users or organizations.

BAC vulnerability in NextCRM (versions before 0.12.0) allows any authenticated user (even with 'member' or 'viewer' role) to activate or deactivate any user account, including the admin. Missing admin role check in activateUser and deactivateUser actions.

VSee Clinic 7.1.26 and API 1.3.0 contain an IDOR vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' parameter to enumerate, retrieve, and delete other users' files.

VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 expose cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present only when SFTP connections have been configured. No authentication is required. An unauthenticated remote attacker who observes these HTTP responses can obtain the credentials and access the associated SFTP server.

FreeScout before version 1.8.224 has an incomplete denylist of dangerous file extensions, missing the .pht extension. An authenticated agent can upload a .pht web shell, leading to remote code execution on the web server.

Vulnerability in FreeScout before version 1.8.223. An unauthenticated attacker can inject a message into any existing support conversation by sending an email with a crafted In-Reply-To header. The message appears as a customer reply, and the conversation is automatically reopened.