CVE Vulnerability Catalog

A flaw was found in Eleveo Call Recording Software 9.7.0 in an unknown function of the file /callrec/audio.jsp in the Play Audio Page component. Manipulating the viewRoleId/cfType arguments leads to cross-site scripting, and the attack can be launched remotely. The exploit has been published and may be used; the vendor did not respond.

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4 in the mass invoice status update function at /admin/sales/invoices/mass-update/state. Manipulation results in missing authorization, and the attack can be initiated remotely. The exploit is public, and the issue is fixed in version 2.5.0-beta5.

A security flaw was discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2 in the loadProfile function of the file packages/boot/app-boot/src/profile.ts in the Bundle Patch Handler component. Manipulating the dsh.bundle.patch argument results in path traversal, and the attack may be performed remotely, though it requires high complexity. The exploit has been released publicly and may be used; the vendor did not respond.

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3 in an unknown function of the file packages/e2b/e2b/src/index.ts in the dsh component. Manipulating the E2B_API_KEY argument leads to reliance on untrusted inputs in a security decision, and local access is required. The exploit is publicly available and might be used; the vendor did not respond.

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This occurs when attacker-controlled input strings match up to the edge of their page and the neighboring page is either not mapped or not readable.

A vulnerability in agentverus-scanner up to 0.8.1 affects the isSecurityDefenseSkill function in dist/scanner/analyzers/context.js. Manipulation results in reliance on untrusted inputs in a security decision, and the attack must be initiated from a local position. The exploit has been made public and could be used; the project has not responded to the issue report.

A flaw in the Micrometer user-event metrics listener of Keycloak occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using arbitrary provider aliases, causing the system to create an unlimited number of metric time series, leading to excessive memory consumption and degraded performance of the server and monitoring tools.

A cross-site scripting (XSS) vulnerability was found in mini-inventory-and-sales-management-system in the Items.php file. Manipulating the itemName argument allows remote attack. The exploit is publicly available.

A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 2.2.6 is recommended to address this issue.

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. Not independently exploitable: a defense-in-depth absence that amplifies CVE-2026-100880. The vendor was contacted early about this disclosure but did not respond in any way.

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints.

A cross-site scripting (XSS) vulnerability has been identified in zhistaredu StarTraining up to 3.8.1, in the Upload Endpoint component, specifically in MimeTypeUtils.java. Manipulation of the File argument allows remote attack. The exploit is publicly available, and the vendor did not respond.

The MCP plugin utcp-mcp (part of python-utcp) through 1.1.2 connects to HTTP and WebSocket MCP server URLs from mcpServers configuration without the ensure_secure_url validation, allowing connections to non-HTTPS/WSS or internal hosts. Fixed in 1.1.3 by validating server URLs before connection.

Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected destination directory. Attackers can exploit path traversal sequences in downloader metadata to write files to unexpected locations.

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities). The deprecated cursor-pagination helper interpolated the sort/order key into the SQL ORDER BY clause without an allowlist, allowing authenticated users with read access to order results by arbitrary columns. Impact is read-only and bounded to columns on the activity_past table not otherwise returned.

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof displayed text when victims enter the directory.

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite window titles, hide text, or trigger emulator-specific behavior when victims run onefetch.