9847 matches found
Unsafe Dependency Resolution
Overview neuro-cortex-memory is a Scientifically-grounded memory system based on computational neuroscience research Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the CLAUDEPROJECTDIR environment variable, which is treated as a trusted source directory witho...
openSUSE 16 Security Update : python-pdm (openSUSE-SU-2026:21161-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21161-1 advisory. Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files bsc1268384 - CVE-2026-47763: Do not write to paths...
PT-2026-55214
Name of the Vulnerable Software and Affected Versions neuro-cortex-memory versions 3.17.0 and later Description Local arbitrary code execution is possible because the server treats the CLAUDE PROJECT DIR environment variable as a trusted source root. When the open visualization tool is invoked, t...
CVE-2026-58371 SeaweedFS < 4.30 - Cross-Origin Information Disclosure via Unvalidated JSONP callback Parameter
SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/javascript in the shared writeJson helper weed/server/common.go, with no callback-name validation, no X-Content-Type-Options: nosniff header, and no CORS allow-list. Every JSON...
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.
The vulnerability of D-Link DIR-513 router’s microprogrammed software is related to the issue where the operation data is written outside the buffer in memory when processing the nextPage parameter. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.
The vulnerability of D-Link DIR-513 router’s microprogramming software is related to the fact that the operation results are written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.
The vulnerability of D-Link DIR-513 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the webPage parameter. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.
The vulnerability of D-Link DIR-513 router’s microprogramming software is related to the fact that the operation results are written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of D-Link DIR-513 router microprogramming software, related to buffer overflows, allows attackers to execute arbitrary code and trigger service failures.
The vulnerability of D-Link DIR-513 router microprogramming software is related to buffer overflow when processing the curTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of D-link DIR-823X router microprogramming software, which exists due to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of D-Link DIR-513 router’s microprogramming software, related to the operation of writing data outside the buffer in memory, allows a hacker to cause a service failure.
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...
The vulnerability of D-link DIR-823X router microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.
The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the formEasySetTimezone() function (/goform/formEasySetTimezone), a built-in microprogramming software function of the D-Link DIR-513 router’s web server, allows a malicious actor to cause a service failure.
The vulnerability of the formEasySetTimezone function /goform/formEasySetTimezone in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could...
The vulnerability of D-Link DIR-513 router microprogramming software, caused by buffer overflows, allows attackers to execute arbitrary code and trigger a service failure.
The vulnerability of D-Link DIR-513 router microprogramming software arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.
The vulnerability of D-Link DIR-513 router’s microprogrammed software is related to the operation of writing data outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
CVE-2026-53149
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size tbpropertyparsedir does not check that contentoffset + contentlen fits within blocklen for the root directory case. When rootdir-length equals or exceeds blocklen - 2, the...
CVE-2026-54319
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference volumeId, which may also be a volume name was forwarded to the runner and used to build the host bind-mount source path without confinement. A...
GHSA-3PVJ-JV98-QHJQ Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directory
Summary The chrome-devtools-mcp daemon writes its PID file with fs.writeFileSync to a deterministic runtime path. On typical macOS environments, and on Linux sessions where $XDGRUNTIMEDIR is unset, that runtime path falls back to /tmp/chrome-devtools-mcp-/daemon.pid. Because the write does not us...
Symlink Attack
Overview chrome-devtools-mcp is a MCP server for Chrome DevTools Affected versions of this package are vulnerable to Symlink Attack in the fs.writeFileSync process when writing the PID file to a runtime directory under /tmp if $XDGRUNTIMEDIR is unset. An attacker can overwrite or truncate arbitra...
CVE-2026-50203
A path traversal in the SFTP provider SFTPHook.retrievedirectory / SFTPOperatoroperation=get let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is a...