CVE Vulnerability Catalog

A cross-site scripting vulnerability was found in openstatusHQ openstatus up to commit 1b678e71a85961ae319cbb214a8eae634059330c in the Onboarding Endpoint component in file apps/dashboard/src/app/(dashboard)/onboarding/client.tsx via manipulation of the callbackURL argument. The attack can be launched remotely.

The Post Blocks & Tools plugin for WordPress up to version 1.3.0 inclusive contains a Stored Cross-Site Scripting vulnerability via the 'sliderStyle' attribute in the Posts Slider block, due to insufficient input sanitization and output escaping.

OpenClaw before version 2026.3.31 (patched in 2026.4.8) has a request body replay vulnerability in fetchWithSsrFGuard, allowing unsafe request bodies to be resent across cross-origin redirects. Attackers can exploit this to exfiltrate sensitive request data or headers to unintended origins.

XSS vulnerability in Hayabusa before version 3.8.0. An attacker can inject JavaScript in the Computer field of JSON logs, which executes in the analyst's browser when viewing the HTML report.

The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser where the parse_susp() function trusts len_id, len_des, and len_src fields from the disk image to memcpy data into a stack buffer without verifying that the source data falls within the parsed SUSP block. An attacker can craft a malicious ISO image that causes reads past the end of the SUSP data buffer, and a zero-length SUSP entry can trigger an infinite parsing loop.

The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser class follows attacker-controlled length fields without bounds checking, causing heap reads past the allocated buffer. An attacker can craft a malicious APFS disk image that triggers information disclosure or crashes when processed by any Sleuth Kit tool that parses APFS volumes.

monetr before 1.12.3 has a transaction integrity flaw allowing authenticated users to soft-delete synced non-manual transactions via the transaction update endpoint, bypassing the normal DELETE block. This hides protected transactions from normal views.

The bigsk1 openai-realtime-ui project up to commit 188ccde27fdf3d8fab8da81f3893468f53b2797c has an SSRF vulnerability in server.js in the API Proxy Endpoint component. Manipulating the Query argument leads to server-side request forgery. The attack can be performed remotely.

Stored XSS in the Extensions for Leaflet Map plugin for WordPress up to version 4.14. Attackers with Contributor-level access can inject script via the 'elevation-track' shortcode, which executes for other users.

The OpenTelemetry-Go library prior to version 1.43.0 reads the full HTTP response body into an in-memory buffer without a size cap, which can lead to memory exhaustion when the configured collector endpoint is attacker-controlled or when the connection is intercepted.

Vim prior to version 9.2.0316 has a command injection vulnerability in its netbeans interface. A malicious netbeans server can execute arbitrary Ex commands when Vim connects, via unsanitized strings in defineAnnoType and specialKeys messages.

NiceGUI, a Python-based UI framework, prior to version 3.10.0 is vulnerable to arbitrary file write on Windows. Because PurePosixPath only recognizes forward slashes (/) as path separators, an attacker can bypass sanitization by using backslashes (\) in the upload filename.

AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data. Prior to version 6.8, a stored cross-site scripting (XSS) vulnerability was identified in the modal item preview functionality. When item content longer than 800 characters was processed, attacker-controlled content was returned without an explicit text/plain content type, allowing the browser to interpret the response as active HTML. This could result in execution of arbitrary JavaScript in the context of an authenticated user viewing a crafted item. This vulnerability is fixed in version 6.8.

Frappe Learning Management System (LMS) before version 2.46.0 allows students to modify quiz scores before submission. The application relies on client-side calculations that can be altered using browser developer tools, compromising score integrity.

MinIO from RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z is vulnerable to memory exhaustion when processing CSV files containing lines longer than available memory. The CSV reader's nextSplit() function calls bufio.Reader.ReadBytes('\n') with no size limit, buffering the entire input in memory until a newline is found. A CSV file with no newline characters causes the entire contents to be read into a single allocation, leading to an OOM crash of the MinIO server process. This is exploitable by any authenticated user with s3:PutObject and s3:GetObject permissions. The attack is especially practical when combined with compression: a ~2 MB gzip-compressed CSV can decompress to gigabytes of data without newlines.

Remnawave Backend prior to version 2.7.5 contains a glitch in the HWID device registration logic that allows an authenticated user to bypass the configured limit for HWID devices and register more devices than expected, enabling reselling subscriptions and consuming excessive traffic.

Kamailio before versions 6.0.5 and 5.8.7 contains an out-of-bounds read vulnerability in the auth module. A specially crafted SIP packet can cause a process crash (DoS) after successful user authentication without a database backend.

LightRAG prior to version 1.4.14 is vulnerable to a JWT algorithm confusion attack where an attacker can forge tokens by specifying 'alg': 'none' in the JWT header. The jwt.decode() call does not explicitly deny the 'none' algorithm, so a crafted token without a signature is accepted as valid, leading to unauthorized access. Fixed in version 1.4.14.

Vulnerability in LiquidJS before version 10.25.4, where the sort_natural filter bypasses the ownPropertyOnly security option. This allows template authors to extract values of prototype-inherited properties through a sorting side-channel attack.

LobeHub prior to 2.1.48 has a vulnerability in the webapi authentication layer that trusts a client-controlled X-lobe-chat-auth header that is only XOR-obfuscated, not signed or otherwise authenticated. Because the XOR key is hardcoded in the repository, an attacker can forge arbitrary auth payloads and bypass authentication on protected webapi routes including /webapi/chat/[provider], /webapi/models/[provider], /webapi/models/[provider]/pull, and /webapi/create-image/comfyui.