CVE Vulnerability Catalog

AgentGPT through 1.0.0 contains an authorization bypass vulnerability allowing authenticated users to attach tasks to another user's agent run by supplying a run_id without ownership verification.

APIFold before commit 7f19b52280f414f57af2b79a95333d1c8fbeece5 accepts unauthenticated JSON requests on /webhooks/:serverSlug/:eventName endpoints and stores them in Redis and PostgreSQL without signature verification. Any network client knowing a valid server slug can inject arbitrary data, which is then served as trusted to MCP clients.

ITFlow prior to version 26.05 has a vulnerability that allows a low-privileged authenticated agent to retrieve plaintext credentials and TOTP secrets belonging to another client by directly requesting the credential edit modal with an arbitrary credential_id. The endpoint does not enforce client scoping or object-level authorization before loading and decrypting the credential record.

Void through version 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open workspace by injecting instructions into content the agent processes. Attackers can supply absolute paths or file:// URIs through the read_file, ls_dir, get_dir_tree, and search_* tools, which lack workspace confinement and bypass the approval gate, enabling silent exfiltration of sensitive files such as SSH private keys or cloud credentials via subsequent tool calls.

Fathom Lite through 1.3.1 contains a stored XSS vulnerability in the analytics collection endpoint. Unauthenticated attackers can inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the /collect endpoint. The parseHostname and parsePathname functions perform no URI scheme validation, allowing the malicious link to be stored and rendered in the authenticated dashboard, enabling session hijacking and full account takeover when clicked.

Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API. Authenticated users can list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in path parameters. The missing ownership check allows access to target user records without the filteredFields filter, leaking sensitive data including email addresses and plexId values.

Office-Word-MCP-Server through version 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute paths or ../ traversal sequences directly to document open and save operations, bypassing the check_file_writeable and ensure_docx_extension helpers which perform no base-directory confinement or realpath validation.

An out-of-bounds read vulnerability was found in the gdk-pixbuf library when parsing a specially crafted ICO file with pixel values exceeding the defined palette range. An attacker can extract heap content via the generated output, such as a thumbnail.

GFI Archiver before version 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored by ReportScheduling.btnSaveReport_Click() without output encoding and is executed in the browser of the user who created the scheduled report when they subsequently view the MailInsights page.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the default import settings. An authenticated attacker can inject arbitrary script or HTML via the configured folders parameter in /Archiver/ImportSettingsWizard.ashx. The injected payload is stored without output encoding and executed in the browsers of users viewing the default import settings.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the File Archive Assistant configuration. An authenticated attacker can inject arbitrary script or HTML via the excluded extensions parameter in /Archiver/FileArchiveAssistantWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the File Archive Assistant settings.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the General Settings SMTP configuration. An authenticated attacker can inject arbitrary script or HTML via the SMTP server address parameter in /Archiver/GeneralSettingsWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the General Settings page.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the Call Home proxy server configuration. An authenticated attacker can inject arbitrary script or HTML via the proxy server address parameter in /Archiver/CallHomeSettingsWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the General Settings Additional Settings page.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the IMAP Server configuration. An authenticated attacker can inject arbitrary script or HTML via the server URL parameter in /Archiver/ImapServerWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the IMAP Server configuration page.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the File History Retention Policy configuration. An authenticated attacker can inject arbitrary script or HTML via the policy name parameter in /Archiver/FAARetentionPolicyWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the File History Retention Policies page.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the Retention Policy configuration. An authenticated attacker can inject arbitrary script or HTML via the policy name parameter in /Archiver/RetentionPolicyWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the Retention and Spam Policies page.

GFI Archiver before version 15.13 has a stored XSS vulnerability in the Classification Rules configuration. An authenticated attacker can inject arbitrary script or HTML via the rule name and email criteria parameters in /Archiver/CategorizationPolicyWizard.aspx. The injected payload is stored without output encoding and executed in the browsers of users viewing the Classification Rules page.

Tridium Niagara Framework and Niagara Enterprise Security on Windows, Linux, QNX before versions 4.14.6 and 4.15.5 have improper permission handling, allowing privilege abuse.

BizimHesap Online Pre-Accounting Software has a vulnerability of resource allocation without limits or throttling, allowing excessive allocation. This affects versions through 17072026.

DOMPurify before version 3.3.2 has a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper context during reparsing, reactivating dangerous markup with event handlers to execute JavaScript.