CVE Vulnerability Catalog

A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0, allowing SQL injection through manipulation of the ID argument in the /admin/patients/manage_history.php file. The attack can be performed remotely.

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0 that allows SQL injection through manipulation of the ID argument in the file /classes/Master.php?f=save_patient_history.

A vulnerability has been detected in NousResearch hermes-agent up to version 2026.4.23, affecting an unknown function in the file agent/skills_guard.py of the Skills Guard Multi-Word Prompt Handler component. Manipulation of the argument THREAT_PATTERNS leads to injection.

A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field. This leads to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE).

A vulnerability was identified in NousResearch hermes-agent up to version 2026.4.16, affecting the function check_all_command_guards in the file tools/approval.py of the Batch Runner component. Manipulation of this function leads to missing authorization.

A vulnerability was found in Edimax EW-7438RPn up to version 1.31, related to an unknown functionality of the file /goform/mp of the component webs. Manipulation of the argument webs results in stack-based buffer overflow, allowing for remote attack.

W GNU SASL przed wersją 2.2.3 występuje dereferencja wskaźnika NULL w mechanizmie DIGEST-MD5, która dotyczy zarówno klientów, jak i serwerów. Problem ten występuje w pliku lib/digest-md5/getsubopt.c, gdy używany jest znany token bez towarzyszącego znaku =.

A flaw has been found in Edimax EW-7438RPn up to version 1.31, affecting the function formWirelessTbl in the file /goform/formWirelessTbl. Manipulating the submit-url argument can lead to buffer overflow.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31, affecting the function formWizSurvey in the file /goform/formWizSurvey. Manipulating the arguments ssid/manualssid/ip/mask/gateway results in a buffer overflow.

A vulnerability has been identified in Edimax EW-7438RPn devices up to version 1.31, leading to a stack-based buffer overflow. The issue affects an unknown function in the file /goform/formWpsStart of the webs component, where manipulation of the pinCode/wlan-url argument can lead to an attack.

D-Link DIR601 version 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the table_name parameter in POST requests.

SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute arbitrary code.

Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious input in the Interpret or Album fields that triggers a buffer overflow, overwriting SEH pointers and executing injected shellcode with application privileges.

Redaxo CMS Mediapool Addon version 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions. Attackers with editor accounts can upload executable files using obfuscated extensions to evade the blacklist filter.

The WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the entry_id POST parameter.

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the username parameter.

The Ek Rishta component in Joomla! version 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the user_detail view with malicious cid values containing SQL commands.

The WordPress Contact Form Maker plugin version 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the 'name' and 'search_labels' parameters.

The WordPress Form Maker plugin version 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries. Attackers can submit POST requests with malicious SQL payloads in the name and search_labels parameters.

A local buffer overflow vulnerability exists in 10-Strike Network Scanner 3.0 in the host name field, allowing attackers to bypass SafeSEH protections and execute arbitrary code. Malicious payloads in the host name or address field trigger the flaw via Trace route or System information functions.