Kendrickzou

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sess nowait of the file s71.py of the component Session Management. This manipulation of the argument session id causes authorization bypass. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent version 0.18.0 **Description** A server-side request forgery exists in the Link Title Fetch component. A remote attacker can manipulate the `url` argument within the `fetchLinkTitle()` function located in the apps/desktop/src/app/artifacts/index.tsx file to trigger this issue. Server-side request forgery is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** As a temporary workaround, consider restricting the use of the `fetchLinkTitle()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent version 0.18.0 **Description** A remote attack can be initiated against the Electron Main Process component by manipulating the `resourceBufferFromUrl()` function located in the `apps/desktop/electron/main.ts` file, leading to the allocation of resources. **Recommendations** Update NousResearch hermes-agent to a version where the `resourceBufferFromUrl()` function is patched or removed. As a temporary mitigation, restrict remote access to the Electron Main Process component.

**Name of the Vulnerable Software and Affected Versions** OFFIS DCMTK versions up to 3.6.9 **Description** A flaw exists in the DCMTK library, specifically within the `DcmQueryRetrieveIndexDatabaseHandle::startFindRequest` and `DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest` functions located in the `dcmqrdb/libsrc/dcmqrdbi.cc` file of the `dcmqrscp` component. This manipulation can lead to a null pointer dereference. Local access is required for exploitation. **Recommendations** Upgrade to version 3.7.0 to resolve this issue.

**Name of the Vulnerable Software and Affected Versions** OFFIS DCMTK versions prior to 3.7.0 **Description** A flaw exists in the `DcmByteString::makeDicomByteString` function within the `dcmdata/libsrc/dcbytstr.cc` file of the `dcmdata` component. This manipulation can lead to memory corruption and can be exploited remotely. **Recommendations** Upgrade to version 3.7.0 to resolve this issue.