Agenta versions prior to 0.122.5 have a server-side request forgery (SSRF) vulnerability. This flaw allows workspace members with workflow edit permissions to redirect workflow invocations by specifying arbitrary revision URLs. Exploiting this, attackers can capture secret-resolve Authorization tokens and access provider secrets from the vault API or reach internal and cloud metadata endpoints.
ChatWiki versions before 2.10.0 have an insecure direct object reference (IDOR) vulnerability. Authenticated users can exploit this flaw to modify fast commands belonging to other tenants by submitting arbitrary sequential IDs to the POST /manage/saveFastCommand endpoint. This allows attackers to overwrite command attributes such as title, type, content, and robot binding, potentially redirecting commands to attacker-controlled URLs and reassigning commands to their own tenant.
A security flaw exists in the Email Notification Handler component of nasa-gcn (gcn.nasa.gov) up to commit b299b562af665878964b981a459f0a9c04b11adf. The vulnerability involves improper authorization due to manipulation of the Recipient argument in the /user/email file processing. The flaw can be exploited remotely. Public exploit code is available. The product uses a rolling release model, so specific affected or fixed versions are not provided. A fix has been proposed but is pending acceptance.
A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.
Fluxbox versions up to 1.3.7 have an OS command injection vulnerability in the RootTheme::reconfigTheme() function. This flaw allows attackers to execute arbitrary commands by crafting style background values that include shell metacharacters. These crafted values are concatenated without proper escaping into an fbsetbg command executed via the shell when the style loads.
ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability in SaveFormField and UpdateFormRequired that allows authenticated users to modify other tenants' form fields. Attackers can pass their own form_id to satisfy the ownership check alongside another tenant's sequential form_field id to alter field names, descriptions, types and required flags, disrupting how submitted entries are stored.
Charmbracelet wish versions before 2.0.5 have a path traversal vulnerability in the git middleware component. This flaw allows authenticated SSH users to bypass directory containment checks by using crafted repository paths with relative directory references. Exploitation enables reading or writing arbitrary repositories outside the intended root directory via git-upload-pack, git-upload-archive, or git-receive-pack.
Skyvern versions through 1.0.56 have a sandbox bypass vulnerability that allows authenticated users to execute arbitrary code on the server. This is achieved by reconstructing functions from raw bytecode using types.CodeType, enabling attackers to deploy scripts that evade the is_safe_script_code AST denylist and import restricted modules such as subprocess or socket. The vulnerability has a high severity with a CVSS score of 8.8.
Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to execute script by supplying an arbitrary type parameter that bypasses JavaScript filtering. Attackers can email an HTML attachment containing script and lure recipients to a detach.cgi link with type=text/html to run script in the victim's authenticated Usermin session.
Usermin versions up to 2.570 have a path traversal vulnerability in the mailbox/detachall.cgi script. This flaw allows remote unauthenticated attackers to write files outside the intended temporary directory by exploiting unsanitized attachment filenames containing '../' sequences. By sending specially crafted email attachments and triggering the download of all attachments, attackers can overwrite critical files such as ~/.forward, potentially enabling command execution on the affected system.
ABP Framework before 10.7.1 contains an authentication bypass vulnerability that skips account state and two-factor checks when password login succeeds through a registered IExternalLoginProvider. Attackers holding the external directory password for deactivated, locked, or 2FA-protected accounts can obtain valid access tokens from the /connect/token password grant.
Usermin versions up to 2.570 have an OS command injection vulnerability in the Read Mail module. Authenticated users can exploit unsanitized IMAP folder names containing shell metacharacters to execute arbitrary commands as their system account. This bypasses webmail-only restrictions by leveraging folder deletion functionality.
Craft CMS versions 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contain a blind SQL injection vulnerability. This occurs because the getNext() and getPrev() methods expose sandboxed template functionality that improperly passes arbitrary criteria arrays to Craft::configure() without filtering out SQL-related properties like orderBy and where. Authenticated control panel users can exploit this by supplying crafted elementIds values to execute conditional SQL queries under the Craft database account.
A regression in the enforcement of FIPS algorithms in the Python hashlib module affects only Python version 3.14.10 when using OpenSSL in FIPS mode. Other Python versions are not impacted.
Parse Server versions before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 contain a vulnerability in the email address validation logic. The validation uses a regular expression with quadratic runtime complexity and no length limit, allowing an attacker to craft a long email address that blocks the Node.js event loop. This results in a denial of service affecting all clients.
Craft CMS versions 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 are affected by an unauthenticated SQL injection vulnerability in the element search endpoint. This flaw arises because the attribute parameter is concatenated into the SQL query without proper sanitization, and the emulated PDO prepares allow stacked statements. Exploitation enables remote attackers to read and write the database, including setting the admin flag or overwriting password hashes to gain administrator access.
SiYuan before 3.8.9 contains a nil pointer dereference vulnerability in privateCacheMiddleware that allows authenticated attackers to crash the kernel by reading nonexistent MCP resources. Attackers with a valid API token can send a resources/read request in an initialized MCP session, causing a panic that terminates the kernel process and interrupts service.
Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as get-tle-sources) to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext usernames, passwords, and tokens that administrators stored for basic and token orbital sources.
Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows attackers to escape the project directory by supplying drive-letter paths that cleanup_path does not normalise. Attackers can use a malicious web page with cross-site requests or DNS rebinding against the unauthenticated local server to recursively delete directories via deleterecord or write attacker-controlled files via newattachment.
WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both requests pass isRecurringPaymentIdUsed(), obtaining duplicate wallet credits and subscription renewals.