CVE Vulnerability Catalog

In KLiK SocialMediaWebsite 1.0, the uniqid function in upload.inc.php allows unrestricted file upload. The attack can be performed remotely, and the exploit is publicly available.

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product's web console, they may be able to execute arbitrary OS commands via adjacent network.

NitroSense 3.x before 3.01.3052 contains a Local Privilege Escalation vulnerability. The program exposes a misconfigured Windows Named Pipe that allows any authenticated local user to execute arbitrary code with SYSTEM privileges and delete arbitrary files with SYSTEM privileges.

Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formWlSiteSurvey function of the /goform/formWlSiteSurvey file in the POST Request Handler component. Manipulation of the selSSID argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formWanTcpipSetup function of the /goform/formWanTcpipSetup file in the POST Request Handler component. Manipulation of the pppUserName argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formsetPPPoE function of the /goform/formsetPPPoE file in the POST Request Handler component. Manipulation of the pppUserName argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and other Windows executables. In some configurations, handling an EXE file causes it to be blindly executed with the invoker's permissions, allowing escape from Flatpak and Snap sandboxes.

A weakness has been identified in Besen BS20 EV Charging Station up to 20260426 in the OTA Update Installation Handler component. Manipulation leads to improper authorization. The attack can be carried out remotely but requires high complexity.

A buffer overflow vulnerability was found in H3C Magic B0 routers up to 100R002 in the Edit_BasicSSID_5G function of /goform/aspForm. The attack can be launched remotely and the exploit is public.

A buffer overflow vulnerability has been detected in the Tenda F456 device version 1.0.0.5 in the frmL7ImForm function of the /goform/L7Im file. The attack can be carried out remotely by manipulating the page argument. The exploit has been published and may be used.

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. An unknown part of the file /intrams/admin/login.php allows manipulation of the Username argument leading to SQL injection. Remote exploitation is possible and the exploit has been disclosed.

All versions of the HuggingFace transformers library prior to 5.3.0 contain a critical remote code execution vulnerability. An attacker can craft a malicious config.json file with the _attn_implementation_internal field set to an attacker-controlled HuggingFace Hub repository ID. When a victim loads the model via AutoModelForCausalLM.from_pretrained(), the library downloads and executes arbitrary Python code from the attacker's repository with full OS privileges.

A buffer overflow vulnerability was found in Edimax BR-6675nD version 1.12 in the formPPTPSetup function of /goform/formPPTPSetup. Manipulation of the pptpUserName argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.

A buffer overflow vulnerability was detected in Edimax BR-6675nD router version 1.12 in the formPPPoESetup function of /goform/formPPPoESetup. The attack can be launched remotely and the exploit is public.

A buffer overflow vulnerability was detected in Edimax BR-6675nD router version 1.12 in the formL2TPSetup function of /goform/formL2TPSetup. The attack can be launched remotely and the exploit is public.

ItzCrazyKns Vane up to version 1.12.1 is vulnerable to server-side request forgery (SSRF) in the file src/app/api/providers/route.ts of the Model Provider API component. Manipulation of the baseURL argument allows remote exploitation.

A vulnerability in NousResearch hermes-agent up to version 2026.4.16 affects the execute_code function in the file tools/code_execution_tool.py of the Environment Variable Handler component. Manipulation leads to a sandbox issue. The attack can be launched remotely, and the exploit is publicly available.

A command injection vulnerability was found in NousResearch hermes-agent up to commit 5157f5427f19488b31c6fdebbacd15d798ce7f63 in the detect_dangerous_command function of tools/approval.py. The attack can be performed remotely. The vendor did not respond.

A vulnerability was found in NousResearch hermes-agent version 2026.4.23 in the function _scan_context_content of the file agent/prompt_builder.py. The manipulation results in injection. The attack may be performed remotely. The exploit has been made public and could be used. The vendor was contacted but did not respond.

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. An unknown function in /admin/adminHome.php allows manipulation of the social_linked argument leading to SQL injection. Remote attack is possible and the exploit has been published.