CVE Vulnerability Catalog

A buffer overflow vulnerability was found in H3C Magic B0 routers up to 100R002 in the Edit_BasicSSID_5G function of /goform/aspForm. The attack can be launched remotely and the exploit is public.

A buffer overflow vulnerability has been detected in the Tenda F456 device version 1.0.0.5 in the frmL7ImForm function of the /goform/L7Im file. The attack can be carried out remotely by manipulating the page argument. The exploit has been published and may be used.

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. An unknown part of the file /intrams/admin/login.php allows manipulation of the Username argument leading to SQL injection. Remote exploitation is possible and the exploit has been disclosed.

All versions of the HuggingFace transformers library prior to 5.3.0 contain a critical remote code execution vulnerability. An attacker can craft a malicious config.json file with the _attn_implementation_internal field set to an attacker-controlled HuggingFace Hub repository ID. When a victim loads the model via AutoModelForCausalLM.from_pretrained(), the library downloads and executes arbitrary Python code from the attacker's repository with full OS privileges.

A buffer overflow vulnerability was found in Edimax BR-6675nD version 1.12 in the formPPTPSetup function of /goform/formPPTPSetup. Manipulation of the pptpUserName argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.

A buffer overflow vulnerability was detected in Edimax BR-6675nD router version 1.12 in the formPPPoESetup function of /goform/formPPPoESetup. The attack can be launched remotely and the exploit is public.

A buffer overflow vulnerability was detected in Edimax BR-6675nD router version 1.12 in the formL2TPSetup function of /goform/formL2TPSetup. The attack can be launched remotely and the exploit is public.

ItzCrazyKns Vane up to version 1.12.1 is vulnerable to server-side request forgery (SSRF) in the file src/app/api/providers/route.ts of the Model Provider API component. Manipulation of the baseURL argument allows remote exploitation.

A vulnerability in NousResearch hermes-agent up to version 2026.4.16 affects the execute_code function in the file tools/code_execution_tool.py of the Environment Variable Handler component. Manipulation leads to a sandbox issue. The attack can be launched remotely, and the exploit is publicly available.

A command injection vulnerability was found in NousResearch hermes-agent up to commit 5157f5427f19488b31c6fdebbacd15d798ce7f63 in the detect_dangerous_command function of tools/approval.py. The attack can be performed remotely. The vendor did not respond.

A vulnerability was found in NousResearch hermes-agent version 2026.4.23 in the function _scan_context_content of the file agent/prompt_builder.py. The manipulation results in injection. The attack may be performed remotely. The exploit has been made public and could be used. The vendor was contacted but did not respond.

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. An unknown function in /admin/adminHome.php allows manipulation of the social_linked argument leading to SQL injection. Remote attack is possible and the exploit has been published.

A buffer overflow vulnerability was discovered in Edimax EW-7438RPn version 1.28a in the formwlencrypt24g function of /goform/formwlencrypt24g. The attack can be launched remotely and the exploit is public.

A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. An unknown function in /admin/patients/manage_history.php allows manipulation of the ID argument leading to SQL injection. Remote attack is possible and the exploit has been disclosed.

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. An unknown function in /classes/Master.php?f=save_patient_history allows manipulation of the ID argument leading to SQL injection. Remote attack is possible and the exploit has been published.

A vulnerability was found in NousResearch hermes-agent up to version 2026.4.23 in an unknown function of the file agent/skills_guard.py in the Skills Guard Multi-Word Prompt Handler component. Manipulation of the argument THREAT_PATTERNS leads to injection. Remote exploitation is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted but did not respond.

In Prefect version 3.6.18, the prefect-github integration injects the reference field into a git clone command without sanitization, allowing injection of git options. This can lead to SSRF, credential theft, or RCE.

NousResearch hermes-agent up to version 2026.4.16 is vulnerable to missing authorization in the function check_all_command_guards in the file tools/approval.py of the Batch Runner component. The attack can be launched remotely.

A stack-based buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the /goform/mp file. The attack can be launched remotely and the exploit is public.

In GNU SASL before version 2.2.3, the DIGEST-MD5 mechanism has a NULL pointer dereference affecting both clients and servers, triggered by a known token without an accompanying = character. This occurs in lib/digest-md5/getsubopt.c.