CVE Vulnerability Catalog

Griptape version 0.19.4 has a path traversal vulnerability in the ComputerTool component. A remote attacker can manipulate the filename argument to access files outside the intended directory. An exploit has been published.

SQL Injection vulnerability in griptape 0.19.4. An unknown functionality in the file griptape/tools/sql/tool.py in the SqlTool component allows manipulation leading to SQL injection. The attack can be performed remotely, and the exploit is publicly available. The vendor did not respond.

FileZilla 3.40.0 has a denial of service vulnerability in the local search functionality. A local attacker can crash the application by supplying a malformed path string containing 384 'A' characters followed by 'BBBB' and 'CCCC' sequences in the search directory field.

CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms. Attackers can trick authenticated administrators into visiting crafted pages that submit POST requests to the users.php endpoint with parameters like source=add_user, source=edit_user, or del=1 to create, modify, or delete admin accounts.

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. The crash occurs when opening an archive and pressing the test button.

TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the 'New User Name' or 'New Serial Number' textboxes, causing a denial of service.

SpotAuditor 3.6.7 has a local buffer overflow in the Base64 Password Decoder component. An attacker can supply an oversized Base64 string to crash the application.

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the 'Email' and 'Activation code' fields, causing a denial of service.

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting, overwriting the SEH chain and corrupting exception handlers.

LanHelper 1.74 has a local buffer overflow in the Form Send Message feature. An attacker can crash the application by pasting 6000 bytes into the message text field.

ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name. Attackers can paste 180 or more characters into the Project name field during project creation to trigger an application crash.

a-Mac Address Change version 5.4 contains a local buffer overflow vulnerability. An attacker can supply oversized input (212 bytes) to registration form fields, causing the application to crash.

AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion function. Attackers can paste a large buffer into the source or destination image file fields and click 'Convert Now' to trigger a crash.

Local buffer overflow vulnerability in IP TOOLS 2.50 in the SNMP Scanner component. A local attacker can supply oversized input in the 'From Addr' and 'To Addr' fields and click the Start button, causing a crash and SEH overwrite.

A path traversal vulnerability was found in griptape-ai griptape 0.19.4 in the FileManagerTool component. The functions load_files_from_disk, list_files_from_disk, save_content_to_file, and save_memory_artifacts_to_disk improperly validate paths, allowing remote attack. The exploit has been publicly disclosed and may be used.

Code injection vulnerability in premAI-io premsql up to version 0.2.1. The eval function in premsql/agents/baseline/workers/followup.py allows manipulation of the result argument, leading to code injection. Remote attack possible. Exploit published. Vendor unresponsive.

SQL Injection vulnerability in MAC-SQL (up to commit 31a9df5e0d520be4769be57a4b9022e5e34a14f4). The _execute_sql function in core/agents.py of the Refiner Agent component allows manipulation leading to SQL injection. Remote attack is possible, exploit is public. Vendor did not respond.

zhongyu09 openchatbi up to version 0.2.1 is vulnerable to SQL injection via the 'keywords' argument in the Multi-stage Text2SQL Workflow component. An attacker can remotely manipulate this argument, leading to unauthorized SQL queries. The exploit has been publicly disclosed.

In Tencent AI-Infra-Guard 4.0, there is a vulnerability in an unknown function of common/websocket/task_manager.go in the Task Detail Endpoint component. Manipulation leads to information disclosure. The attack can be remote. The exploit is public, and the vendor has not responded.

SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown part of /my-profile.php in Parameter Handler allows manipulation of fullname argument, leading to SQL injection. Remote attack possible. Exploit published.