CVE Vulnerability Catalog

A path traversal vulnerability was found in hermes-agent version 2026.5.29.2 in the skill_view function of tools/skills_tool.py. An attacker can remotely manipulate the Name argument, leading to unauthorized file access. The exploit has been publicly disclosed and may be used.

A weakness in SourceCodester Online Examination & Learning Management System 1.0 in the file /announcements.php allows unrestricted file upload. The attack can be executed remotely, and the exploit is publicly available.

A security flaw in SourceCodester Online Examination & Learning Management System 1.0 allows unrestricted file upload via the /upload_files.php file due to improper filename extension validation. Remote exploitation is possible and the exploit has been publicly released.

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0 in the file /process_lesson.php. An unknown function allows unrestricted file upload via manipulation of the user_id argument. The attack can be launched remotely and the exploit is publicly available.

A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the /paymentdischarge.php file. An attacker can remotely manipulate the patientid argument, leading to unauthorized database access. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the /payment.php file. An attacker can remotely manipulate the patientid argument, leading to SQL injection. The exploit has been made public and could be used.

The MAX32xxx USB device controller driver (udc_max32.c) in Zephyr OS does not check if the endpoint buffer is NULL in the OUT and IN transfer-completion handlers. When a USB host sends a new SETUP packet during an ongoing EP0 transfer, the FIFO can be drained, causing a stale event to be processed, leading to a near-NULL pointer dereference and device crash.

The CrawlWP SEO WordPress plugin contains a CSRF vulnerability that allows an attacker to perform unauthorized actions on behalf of an administrator. The issue affects versions from n/a through 3.0.16.

The FormLayer plugin for WordPress versions up to 1.0.6 contains a vulnerability that inserts sensitive information into sent data, allowing retrieval of embedded sensitive data.

The Exclusive Addons Elementor plugin for WordPress contains a vulnerability of inserting sensitive information into sent data, allowing retrieval of embedded sensitive data. This issue affects versions from n/a through 2.7.9.9.

A SQL injection vulnerability has been discovered in CodeAstro Ecommerce Website 1.0 in the file /ecommerce-website-php/customer/confirm.php. An attacker can remotely manipulate the invoice_no argument, leading to unauthorized database access. The exploit has been publicly released, increasing the risk of attacks.

A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/search-result.php. An attacker can remotely manipulate the searchdata argument, leading to SQL injection. The exploit is publicly available.

A vulnerability in radare2 up to version 6.1.6 was found in the core_anal_bytes function of libr/core/cmd_anal.inc, causing an integer overflow. The attack requires local access and has been publicly disclosed.

A SQL injection vulnerability has been found in mjperpinosa stumasy up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be in the Notes_controller::search_scratch_data function. The attack can be launched remotely by manipulating the field_name argument. The exploit is publicly available, increasing the risk of exploitation.

A server-side request forgery (SSRF) vulnerability has been found in the mcp-wiki/wiki-summary component of AIAnytime Awesome-MCP-Server up to commit a884bb51bcd99e08e14fd712c749d55d9d9a13ab. The issue affects the file mcp-wiki/src/mcp_wiki/server.py via manipulation of the url argument. The attack can be initiated remotely and an exploit has been published.

A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the file /patientreport.php. Manipulating the editid argument allows remote exploitation. A public exploit is available and could be used for attacks.

A SQL injection vulnerability has been discovered in itsourcecode Hospital Management System 1.0 in the /patientprofile.php file. An attacker can remotely manipulate the patientname argument, leading to SQL injection. The exploit has been publicly released and may be used in attacks.

A vulnerability was found in SourceCodester Online Boat Reservation System 1.0 involving an unknown functionality that leads to session expiration. The attack can be launched remotely and the exploit is publicly available.

In AD-Security AD_Miner 1.9.0, the Cache Handler component's request_a function in ad_miner/scripts/analyse_cache.py mishandles the sys.argv[1] argument, causing deserialization. The attack requires local access.

A flaw in the org.keycloak.broker.oidc package causes incorrect synchronization of the email_verified claim. When an OIDC identity provider has trustEmail=true and the userinfo endpoint is enabled, Keycloak retrieves the email from userinfo but the email_verified status only from the id_token. Lack of validation allows applying email_verified=true to a different email address from userinfo.