CVE Vulnerability Catalog

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, allowing a remote attacker to cause improper access control by sending prompt-injected content. This may lead to information disclosure through reading and exfiltrating host environment variables.

NVIDIA FLARE SDK contains a vulnerability in FOBS, allowing an attacker to cause deserialization of untrusted data by sending a malicious FOBS-encoded message. A successful exploit of this vulnerability might lead to code execution.

An authentication bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to validate the JWT signature when verifying host tokens, allowing an attacker to forge a JWT and impersonate any host in the network.

Memory safety bugs were found in Thunderbird 150.0.0, some showing evidence of memory corruption that could potentially be exploited to run arbitrary code. The vulnerability was fixed in version 150.0.1.

Memory safety bugs were present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption, which could potentially be exploited to run arbitrary code.

Memory safety bugs were found in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0, showing evidence of memory corruption. With enough effort, these could have been exploited to run arbitrary code.

An information disclosure vulnerability in the Audio/Video component of Firefox and Thunderbird due to incorrect boundary conditions. The flaw is fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

Wykryto podatność w D-Link DIR-825M w wersji 1.1.12, która dotyczy funkcji sub_414BA8 w pliku /boafrm/formWanConfigSetup. Manipulacja argumentem submit-url prowadzi do przepełnienia bufora, co może być wykorzystane zdalnie.

Wykryto podatność w urządzeniu D-Link DIR-825M w wersji 1.1.12, która dotyczy funkcji sub_4151FC w pliku /boafrm/formVpnConfigSetup. Manipulacja argumentem submit-url prowadzi do przepełnienia bufora, co umożliwia zdalne wykorzystanie tej podatności.

OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete.

Komponent Aranda File Server (AFS) w Aranda Software Aranda Service Desk przed wersją 8.3.12 przechowuje dzienne logi aktywności w publicznie dostępnym katalogu z przewidywalnymi nazwami. To umożliwia nieautoryzowanym zdalnym atakującym uzyskanie bezpośrednich ścieżek do przesłanych plików oraz ominięcie kontroli dostępu w celu pobrania wrażliwych dokumentów zawierających dane osobowe.

W systemie WilliamCloudQi matlab-mcp-server do wersji ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca zidentyfikowano lukę w funkcji generate_matlab_code/execute_matlab_code w pliku src/index.ts komponentu MCP Interface. Manipulacja argumentem scriptPath może prowadzić do ataku typu path traversal, który można przeprowadzić zdalnie.

An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.

mpGabinet performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass login verification by manipulating the application binary and authenticate as an arbitrary user.

An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, allows an authenticated user with user modification privileges to escalate their privileges by sending an HTTP request with a manipulated 'identifier' field. Successful exploitation could allow an authenticated user to obtain administrator privileges.

An IDOR vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/', allows an authenticated user to access the data of other registered users by modifying the ID. This enables an attacker to obtain a list of users.

An IDOR vulnerability in MphRx Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint, allows an authenticated user to modify the information of other registered users. Exploiting this vulnerability enables changing data such as email addresses and requesting a new password.

In the GNU C Library (glibc) version 2.2 and later, the deprecated functions ns_printrrf, ns_printrr, and fp_nquery fail to enforce the caller-supplied buffer length, which can lead to an out-of-bounds write when printing TSIG records.

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.

AVACAST opracowany przez eMPIA Technology ma podatność na hijacking DLL, która pozwala uwierzytelnionym lokalnym atakującym umieścić złośliwą bibliotekę DLL w określonym katalogu. To prowadzi do wykonania dowolnego kodu z uprawnieniami systemowymi w momencie ładowania tej biblioteki przez system.