CVE Vulnerability Catalog

The parseusbs tool before version 1.9 contains an OS command injection vulnerability. The volume path argument (-v flag) is passed unsanitized to os.popen() with the ls command, allowing arbitrary command injection via shell metacharacters.

A vulnerability in parseusbs prior to version 1.9 allows OS command injection via unsanitized LNK file paths passed to os.popen(). An attacker can embed shell metacharacters in a .lnk filename, leading to arbitrary command execution on the forensic examiner's machine.

ALEAPP (Android Logs Events And Protobuf Parser) through version 3.4.0 contains a path traversal vulnerability in the NQ_Vault.py parser. An attacker can use a controlled database value as the output filename, allowing file writes outside the report directory, potentially leading to code execution.

Sleuth Kit w wersjach do 4.14.0 zawiera podatność na przejście ścieżki w funkcji tsk_recover, która pozwala atakującemu na zapis plików w dowolnych lokalizacjach poza zamierzonym katalogiem odzyskiwania. Atakujący może stworzyć złośliwy obraz systemu plików z wbudowanymi sekwencjami /../ w nazwach plików, co prowadzi do zapisu plików poza katalogiem wyjściowym.

A weakness has been identified in code-projects Easy Blog Site up to version 1.0 in the file /users/contact_us.php. Manipulation of the Name argument leads to SQL injection. The attack can be launched remotely and the exploit is publicly available.

Vulnerability in the MW WP Form plugin for WordPress up to version 5.1.1. Insufficient validation of the $name parameter allows an unauthenticated attacker to move arbitrary files on the server, potentially leading to remote code execution.

PraisonAI before version 4.5.115 contains a template injection vulnerability in the create_agent_centric_tools() function. User input passed to agent.start() is processed without proper escaping, allowing template expressions to be executed instead of being treated as literal text.

PraisonAI before version 4.5.115 exposes the A2U (Agent-to-User) event stream server without authentication. The create_a2u_routes() function registers endpoints /a2u/info, /a2u/subscribe, /a2u/events/{stream_name}, /a2u/events/sub/{id}, and /a2u/health with no access controls.

The mcp-from-openapi library in FrontMCP prior to version 2.3.0 does not restrict $ref dereferencing in OpenAPI specifications, enabling SSRF and local file read attacks when processing untrusted specifications.

In OpenTelemetry-Go from 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the BSD kenv command using a bare name, allowing the same PATH hijacking attack on BSD and Solaris platforms.

kcp before versions 0.30.3 and 0.29.3 exposes the cache server directly via the root shard without authentication. Anyone with access to the root shard can read and write to the cache.

A command injection vulnerability in the HTTP Interface component of idachev mcp-javadc up to 1.2.4. Manipulating the jarFilePath argument leads to OS command injection. The attack is remotely exploitable and the exploit is publicly available.

In Kamailio (formerly OpenSER and SER) prior to versions 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access vulnerability exists in the core. A remote attacker can send a specially crafted TCP packet, causing a process crash (denial of service). This affects Kamailio instances with TCP or TLS listeners.

Tophat before version 2.5.1 is vulnerable to remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments parameter is passed unsanitized to /bin/bash -c execution, allowing an attacker to execute arbitrary commands on a developer's macOS workstation.

LiquidJS before version 10.25.3 has a vulnerability that allows reading arbitrary files. Although root is set to constrain access, top-level file loads do not enforce that boundary. A Liquid instance configured with an empty temporary directory as root can return the contents of arbitrary files.

InvenTree before versions 1.2.7 and 1.3.0 allows authenticated users to fetch files from arbitrary URLs (remote_image) without internal IP validation. An attacker can use this for internal network scanning or SSRF attacks.

LiquidJS before version 10.25.3 has a path restriction bypass vulnerability in {% include %}, {% render %}, and {% layout %} directives. The containment check is path-based, not realpath-based, so a symlink inside the allowed root pointing outside bypasses the restriction.

Vulnerability in InvenTree from 0.16.0 to 1.2.7. Any authenticated user can create a valid API token for any other user, including administrators, by supplying the target's user ID in a POST /api/user/tokens/ request. The token is immediately usable for full API authentication.

InvenTree is an Open Source Inventory Management System. Prior to 1.2.7 and 1.3.0, a non-staff authenticated user can elevate their account to a staff level via a POST request against their user account endpoint. The write permissions on the API endpoint are improperly configured, allowing any user to change their staff status. This vulnerability is fixed in 1.2.7 and 1.3.0.

A denial of service vulnerability in React Server Components (react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack) versions 19.0.0-19.0.4, 19.1.0-19.1.5, and 19.2.0-19.2.4. Specially crafted HTTP requests to Server Function endpoints cause excessive CPU usage for about a minute, ending in a catchable error.