CVE Vulnerability Catalog

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the non_interactive parameter to true, bypassing the human consent gate.

A security vulnerability in jina-ai reader up to commit 1574bfd380d249c86c82db4dace0d9c8fe17e2b1 affects the function isValidTLD in /backend/functions/src/cloud-functions/crawler.ts of the Crawler/Puppeteer component. The manipulation leads to server-side request forgery (SSRF). Remote exploitation is possible and the exploit has been publicly disclosed.

ip-address is a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. Prior to 10.3.1, Address4 accepts an octet with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo decode a leading zero as octal. This causes a disagreement between the library and the network stack about which host a string names. For example, new Address4('012.0.0.1') reports correctForm() as 12.0.0.1 and isPrivate() as false, but fetch('http://012.0.0.1/') connects to 10.0.0.1.

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to versions 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory.

Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory.

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can inject command substitution payloads into the filter parameter to execute arbitrary commands as the webconfig user, and due to extensive NOPASSWD sudo privileges granted to that user by default, immediately escalate to root.

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, as CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST are unconditionally disabled across sendStream(), sendImageRequest(), send(), and fetchSearchHtml() with no option to re-enable verification.

Ouroboros before version 0.39.0 loads the .env file from the current working directory, allowing injection of malicious environment variables. Cloning a malicious repository and running Ouroboros commands can lead to arbitrary code execution and system takeover.

Sangfor Operation and Maintenance Security Management System up to version 3.0.13 contains an OS command injection vulnerability in the DpLoginController function. The attack can be performed remotely and the exploit is publicly available.

Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 lacks authentication for critical functions. A local attacker with low privileges can elevate their privileges.

Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 has improper access control. A local attacker with low privileges can elevate privileges and execute arbitrary code.

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.

Omada devices rely on embedded certificates shared across deployments to establish trust between controllers and managed devices. An attacker who obtains these certificates can impersonate trusted controllers or devices and intercept communications.

The Omada adoption protocol uses hard-coded cryptographic keys to establish trust and protect authentication between controllers and managed devices. An attacker may impersonate a trusted controller or device and gain access to sensitive adoption-related communications.

WebsiteBaker CMS before version 2.13.10 allows authenticated administrators to upload crafted ZIP archives containing a PHP webshell during module installation. After extraction, the webshell is accessible to any unauthenticated user via HTTP.

WebsiteBaker CMS before version 2.13.10 has a code injection vulnerability in the Droplets editor. An authenticated administrator can save arbitrary PHP code in the Code field, which is written to a publicly accessible file, enabling remote code execution by unauthenticated users.

The brace-expansion library prior to versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9 contains a vulnerability where the expand() function does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences. This allows attacker-controlled input to exhaust memory or block the event loop.

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAuth2 client and use the password grant to obtain an API access token, bypassing normal web interface authentication and any enforced multi-factor authentication controls.

OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an administrator approves the registered client, attackers can use the client_credentials grant with a self-signed JWT assertion to obtain access tokens granting read access to all FHIR resources across all patients in the system.

Apache Jena Fuseki through version 6.1.0 contains a path traversal vulnerability. An attacker can bypass path restrictions and access files outside the allowed directory.