202110 matches found
ImageMagick resource management error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the UHDR decoder performs range checks only after decoding, allowing attackers to bypass image size restrictions and deliver specially crafted ultra-large UHDR images,...
vLLM input validation error vulnerability
Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This flaw stems from Rust’s gRPC frontends failing to properly restrict logprobtokenids. Remote attackers can exploit this by sending a Generate or GenerateStream request that enables outputlogprobs and contains...
Rclone path traversal vulnerability
Versions of Rclone prior to 1.75.2 contain a path traversal vulnerability. This vulnerability arises because the serve webdav component fails to validate ‘..’ path components, allowing unauthorized attackers to write files above the service root directory. This may result in creation, overwriting...
Rclone information disclosure vulnerability
Versions of Rclone from 1.64.0 up to but including 1.75.2 contain an information disclosure vulnerability. This vulnerability stems from an authentication bypass in the serve webdav component; unauthenticated attackers can send OPTIONS requests to bypass authentication, then probe arbitrary paths...
Rclone server request forgery vulnerability
Versions 1.37 through 1.74.2 of Rclone contain a server-side request forgery vulnerability. This flaw stems from improper handling of double slashes in the root path by --rc-serve, making it susceptible to server-side request forgery attacks. Unauthenticated attackers can redirect HTTP and...
SiYuan path traversal vulnerability
Versions prior to SiYuan 3.8.7 contain a path traversal vulnerability. This vulnerability stems from incomplete inclusion of sensitive file paths in the blacklist used by the validateAssetUploadPaths dependency within the MCP asset tool; files such as .env are omitted. As a result, authenticated...
Rotki encryption issue vulnerability
Versions prior to rotki 1.44.2 contain an encryption vulnerability. This vulnerability arises because the premium synchronization key is a single unsalted SHA-256 hash of the user’s password, resulting in weak key derivation. Attackers can brute-force backups and decrypt databases containing...
ImageMagick resource management error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability stems from a memory leak in the FPX encoder; attackers can exploit it by providing specially crafted images that trigger repeated memory leaks, ultimately leading to resource exhaustion...
ImageMagick numeric error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a numerical error vulnerability. This vulnerability stems from a heap buffer overflow when requesting convex hull information on 32-bit systems. An attacker can supply specially crafted images processed via convex hull computation, thereby...
RuoYi authorization issue vulnerability
Versions RuoYi 2026.09 and earlier contain a security vulnerability. This vulnerability stems from improper limits on excessive authentication attempts in the function SmsCodeServiceImpl.validateSmsCode0 within the file /file/service/sms/SmsCodeServiceImpl.java in the SMS Code Verification...
YesWiki cross-site scripting vulnerability
Versions 4.2.0 through 4.7.0 of YesWiki contain a cross-site scripting vulnerability stemming from a stored XSS issue. Authenticated users can inject scripts into comment bodies via the wakka raw HTML syntax. Attackers can post comments using the /api/comments endpoint; however, Twig’s raw filter...
ImageMagick resource management error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the MAT decoder fails to release allocated memory on certain error paths; attackers can exploit this by providing specially crafted MAT files, thereby repeatedly triggeri...
YesWiki SQL injection vulnerability
Versions prior to 4.7.0 of YesWiki contain an SQL injection vulnerability. This flaw arises because the datemajfiche field in Bazar entry creation requests within PageManager::save is concatenated into the INSERT statement without proper escaping. As a result, it is susceptible to SQL injection...
vLLM input validation error vulnerability
Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Rust gRPC Generate and GenerateStream services; it allows unvalidated prompt token IDs to be forwarded to EngineCore. As a result, attackers can supp...
SiYuan cross-site scripting vulnerability
Versions of SiYuan from 2.10.0 through 3.8.7 contain a cross-site scripting vulnerability. This vulnerability arises because, when KaTeX trust rendering is enabled, the javascript: URLs placed within mathematical block content are not adequately validated. Users with editing privileges can inject...
DedeCMS input validation error vulnerability
DedeCMS versions 5.7.118 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the vtime parameter in the requireonce function within the file dede/updateguide.php, potentially leading to code injection...
azzar budiyanto The Designer MCP path traversal vulnerability
Azzar Budiyanto: Versions 2.1.0 and earlier of the Designer MCP contain a path traversal vulnerability. This vulnerability stems from improper handling of the Name parameter in the getreference function within the skills/motion-designer/references/motion-dev-guidelines.md file in the MCP Interfac...
ImageMagick resource management error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because PerlMagick fails to release returned values when reading image properties, resulting in memory leaks. Attackers can repeatedly trigger this behavior to exhaust memory and...
ImageMagick resource management error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the JNG encoder fails to release allocated memory when processing specially crafted images. Attackers can exploit this by providing a specially...
KodCloud KodExplorer server request forgery vulnerability
KodCloud KodExplorer versions 4.56 and earlier contain a server-side request forgery vulnerability. This vulnerability stems from an issue in the requesturlsafe function within the app/function/webfunction.php file in the Remote Download component, potentially allowing remote attackers to perform...
YesWiki cross-site scripting vulnerability
Versions prior to YesWiki 4.7.0 contain a cross-site scripting vulnerability. This flaw arises because filtertags fails to encode output for token values controlled by attackers. Anonymous attackers can exploit this by injecting tags via the action-attribute parameter, thereby bypassing the...
ImageMagick resource management error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises from a lack of cleanup after a magick compare command fails, potentially leading to memory leaks. Attackers can exploit this by providing input that triggers repeated comparison...
SiYuan cross-site scripting vulnerability
Versions 2.9.0 through 3.8.7 of SiYuan contain a cross-site scripting vulnerability. This flaw arises because unauthenticated /check-auth pages assign the to parameter to window.location.href without performing protocol validation, potentially enabling cross-site scripting attacks. Attackers can...
Rclone encryption issue vulnerability
Versions of Rclone prior to 1.75.2 contain an encryption vulnerability. This vulnerability arises because the b2 backend leaks real-time account Authorization tokens and SSE-C keys in HTTP redirects originating from the --b2-download-url host, potentially leading to credential leakage...
SiYuan encryption issue vulnerability
Versions 3.6.0 through 3.8.7 of SiYuan contain an encryption vulnerability. This flaw arises because networkServeTLS settings are accepted and persisted but never enforced, allowing kernel ports to provide full API access via plain HTTP outside of HTTPS. Compromised attackers on adjacent networks...
OpenRemote core authorization issue vulnerability
Versions of OpenRemote prior to 1.31.0 contain an authorization issue vulnerability. This vulnerability stems from authorization bypass, allowing authenticated users to retrieve gateway tunnel information for other realms via getGatewayActiveTunnelInfos. As a result, internal target hosts, ports,...
vLLM server request forgery vulnerability
Versions prior to vLLM 0.24.0, specifically version 0.9.2, contain a server-side request forgery vulnerability. This vulnerability arises from embedding a decoding address within the X-Request-Id header, enabling server-side request forgery. Attackers can pre-populate the P2pNcclConnector with...
ImageMagick buffer error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and versions prior to 7.1.2-33 contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow when processing bzip2-compressed images. Attackers can exploit this by providing specially crafted bzip2-compressed images; during...
Rclone encryption issue vulnerability
Versions of Rclone from 1.55.0 through 1.75.2 contain an encryption vulnerability. This vulnerability arises because the selfupdate trust PGP signature SHA256SUMS block in stable releases fails to sign the checksum entries preceding it; attackers can exploit this by controlling the distribution...
DingQz Docker-Proxy authorization issue vulnerability
Versions 5.1.9 and earlier of DingQz Docker-Proxy contain an authorization issue vulnerability. This flaw stems from a lack of authentication in hubcmdui routes/config.js. Unauthenticated attackers can read and modify configurations via /api/config, thereby obtaining the WeChat webhook URL and...
ImageMagick authorization issue vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain an authorization issue vulnerability. This vulnerability stems from improper parsing of delegation calls, potentially allowing attackers to bypass administrator-defined policies by having ImageMagick process input that...
Anantha Kumaran Paisa path traversal vulnerability
Versions prior to Anantha Kumaran Paisa 0.7.8 contain a path traversal vulnerability. This vulnerability stems from path traversal issues in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers. Unauthenticated attackers can exploit this by using the ../ sequence within filenames...
Eventcatalog path traversal vulnerability
EventCatalog versions 2.29.0 and earlier contain a path traversal vulnerability. This vulnerability stems from improper handling of the options.path parameter by the getCustomDoc/writeCustomDoc/rmCustomDoc functions in packages/sdk/src/custom-docs.ts within the Custom Documentation Helpers...
Parse Platform Parse Server authorization issue vulnerability
Versions prior to 8.6.102 and versions 9.0.0 through 9.10.5-alpha.2 of the Parse Platform’s Parse Server contain an authorization issue vulnerability. This vulnerability arises because the validateSetUp, validateLogin, and validateUpdate methods inherited from AuthAdapter are not invoked via cust...
Rclone input validation error vulnerability
Versions of Rclone from 1.52.0 through 1.75.2 contain an input validation error vulnerability. This vulnerability stems from the pCloud backend’s failure to verify the localhost OAuth callback status and trusting the hostname parameter. It makes the system susceptible to cross-site request forger...
ImageMagick resource management error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and versions prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the MSL decoder fails to release allocated memory when processing specially crafted MSL images, potentially leading to memory leaks...
ImageMagick resource management error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability stems from a lack of cleanup when using the -set profile option, potentially leading to memory leaks, resource exhaustion, and even a denial of service...
Firecrawl server request forgery vulnerability
Versions prior to Firecrawl 2.11.586 contain a server-side request forgery vulnerability. This flaw stems from an SSRF proxy within the Playwright service; attackers can exploit it by using DNS rebinding to bypass the isInternalHost check. As a result, when validating requests, they receive publi...
Improper ImageMagick exception handling vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain an improper exception handling vulnerability. This vulnerability arises because the DJVU decoder fails to validate memory allocation results; as a result, attackers can supply specially crafted DJVU images that cause the...
Grokability Snipe-IT authorization issue vulnerability
Versions of Grokability Snipe-IT prior to 8.5.0 contain an authorization issue vulnerability. This flaw stems from the non-atomic nature of nonce checks within the SAML acs handler, potentially enabling SAML assertion replay. Attackers can send concurrent POST requests to /saml/acs to reuse...
YesWiki cross-site request forgery vulnerability
Versions of YesWiki prior to 4.7.0 contain a cross-site request forgery vulnerability. This flaw stems from cross-site request forgery in the despam action tools/security/actions/despam.php. Attackers can insert automatically submitted raw HTML forms into wiki pages, tricking administrators into...
vLLM resource management error vulnerability
Versions vLLM 0.10.2 through 0.25.0 contain a resource management error vulnerability. This vulnerability arises because the Nemotron-VL processor sets the global variable Image.MAXIMAGEPIXELS to None. Unauthenticated attackers can exploit this by submitting specially crafted decompression bomb...
KodCloud KodExplorer permission and access control issue vulnerability
KodCloud KodExplorer versions 4.55 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the ‘path’ parameter in the file app/controller/editor.class.php within the Online Editor Save Endpoint component. As a result, unrestricted file uploads are possibl...
ImageMagick processing logic error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-32 contain a logic error vulnerability stemming from an incomplete fix for policy bypass issues. This allows security policy bypass, enabling attackers to circumvent configuration restrictions that would otherwise prevent certain...
dbcli mycli command injection vulnerability
Versions 2.29.0, 2.29.1, 2.29.2, 2.29.3, 2.29.4, 2.30.0, and 2.30.1 of dbcli mycli contain a command injection vulnerability. This vulnerability stems from an OS command injection flaw in the sourcespecialcommandissafe function within the file mycli/packages/special/source.py in the Whitelist...
Rclone numeric error vulnerability
Versions of Rclone prior to 1.75.0 and 1.75.2 contain a numerical error vulnerability. This vulnerability arises because an integer overflow in multi-part reordering memory statistics allows bypassing configured buffer limits. Attackers can exploit this by sending two concurrent current-part PUT...
Grokability Snipe-IT authorization issue vulnerability
Versions of Grokability Snipe-IT prior to 8.6.3 contain an authorization issue vulnerability. This vulnerability stems from GoogleAuthController::handleGoogleCallback failing to enforce a check on the activation flag; as a result, deactivated users may log in via Google SSO and regain their...
YesWiki cross-site scripting vulnerability
Versions of YesWiki prior to 4.7.0 contain a cross-site scripting vulnerability. This flaw arises because the bazar ImageField class fails to sanitize uploaded SVG files. Low-privilege authenticated users can submit malicious SVG files via the entries API’s image field, resulting in stored...
Parse Platform Parse Server permission and access control issue vulnerability
Versions prior to Parse Platform Parse Server 8.6.104 and versions prior to 9.10.5-alpha.5 contain a permission and access control vulnerability. This vulnerability arises because, when generating SMS multi-factor authentication codes, the entire login request is stored with root privileges. User...
Krupal Employee Recruitment System input validation error vulnerability
The Krupal Employee Recruitment System has a security vulnerability. This vulnerability stems from improper handling of the parameters firstname, middlename, lastname, gender, birthdate, state, statespecify, city, and cityspecify by the mysqlquery function within the Registration component at...