Advisory Catalog

WWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and SMTP Credentials

WWBN AVideo has a Path Traversal in Locale Save Endpoint Enables Arbitrary PHP File Write to Any Web-Accessible Directory (RCE)

Serendipity has a Host Header Injection allows SMTP header injection via unvalidated HTTP_HOST in Message-ID email header

MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting

OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean

Composer has a command injection via malicious perforce repository

Composer has a command injection via malicious perforce reference

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php

Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php

Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php

Webkul Krayin CRM has Server-Side Request Forgery (SSRF)

gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall

Nest Affected by DoS via Recursive handleData in JsonSocket (TCP Transport)

SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

Craft Commerce hasVariant/hasProduct Blind SQL Injection

Craft Commerce has a SQL Injection can lead to Remote Code Execution via TotalRevenue Widget

FITS GZIP decompression bomb in Pillow

simple-git Affected by Command Execution via Option-Parsing Bypass

Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API

Keras has an untrusted deserialization vulnerability

Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI

Dolibarr has SQL injection vulnerability in the rowid parameter of the admin dict.php

Adobe Acrobat and Reader Prototype Pollution Vulnerability

mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes

n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

uv vulnerable to arbitrary file deletion through RECORD entries

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

PraisonAI: Hardcoded `approval_mode="auto"` in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command Execution

Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read

Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure

PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass

@vitejs/plugin-rsc has a Denial of Service with React Server Components

Next.js has a Denial of Service with Server Components

LiteLLM has a sandbox escape in custom-code guardrail

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS

PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in the context of the OpenCTI platform proces