CVE Vulnerability Catalog

A buffer overflow vulnerability was discovered in Edimax EW-7438RPn version 1.28a in the formwlencrypt24g function of /goform/formwlencrypt24g. The attack can be launched remotely and the exploit is public.

A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. An unknown function in /admin/patients/manage_history.php allows manipulation of the ID argument leading to SQL injection. Remote attack is possible and the exploit has been disclosed.

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. An unknown function in /classes/Master.php?f=save_patient_history allows manipulation of the ID argument leading to SQL injection. Remote attack is possible and the exploit has been published.

A vulnerability was found in NousResearch hermes-agent up to version 2026.4.23 in an unknown function of the file agent/skills_guard.py in the Skills Guard Multi-Word Prompt Handler component. Manipulation of the argument THREAT_PATTERNS leads to injection. Remote exploitation is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted but did not respond.

In Prefect version 3.6.18, the prefect-github integration injects the reference field into a git clone command without sanitization, allowing injection of git options. This can lead to SSRF, credential theft, or RCE.

NousResearch hermes-agent up to version 2026.4.16 is vulnerable to missing authorization in the function check_all_command_guards in the file tools/approval.py of the Batch Runner component. The attack can be launched remotely.

A stack-based buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the /goform/mp file. The attack can be launched remotely and the exploit is public.

In GNU SASL before version 2.2.3, the DIGEST-MD5 mechanism has a NULL pointer dereference affecting both clients and servers, triggered by a known token without an accompanying = character. This occurs in lib/digest-md5/getsubopt.c.

A buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the formWirelessTbl function of /goform/formWirelessTbl. The attack can be launched remotely and the exploit is public.

A buffer overflow vulnerability was found in Edimax EW-7438RPn up to version 1.31 in the formWizSurvey function of /goform/formWizSurvey. Manipulation of the ssid/manualssid/ip/mask/gateway arguments leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.

A stack-based buffer overflow vulnerability was detected in Edimax EW-7438RPn up to version 1.31 in the formWpsStart function of /goform/formWpsStart. The attack can be launched remotely and the exploit is public.

A vulnerability in D-Link DIR601 version 2.02NA allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the table_name parameter in POST requests. Attackers can send requests to /my_cgi.cgi with table_name values like admin_user, wireless_settings, and wireless_security to extract administrative credentials and wireless network keys in clear text.

SIPp 3.6 and earlier has a local buffer overflow vulnerability in command-line argument handling. Attackers can supply oversized input to the -3pcc, -i, or -log_file parameters, causing strcpy to write beyond buffer boundaries in sipp.cpp, potentially leading to arbitrary code execution.

Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious input in the Interpret or Album fields that triggers a buffer overflow, overwriting SEH pointers and executing injected shellcode with application privileges.

Vulnerability in Redaxo CMS Mediapool Addon version 5.5.1 and older – authenticated users can bypass the file extension blacklist by uploading executable files with obfuscated extensions (e.g., php71, php53), allowing arbitrary code execution.

WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below has an SQL injection vulnerability allowing authenticated attackers to manipulate database queries via the entry_id POST parameter. Attackers can send POST requests to admin-ajax.php with the ufbl_get_entry_detail_action action to extract, modify data, or escalate privileges in the WordPress database.

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the username parameter.

The Ek Rishta 2.10 component for Joomla! contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the user_detail view with malicious cid values containing SQL commands to extract sensitive database information.

WordPress Contact Form Maker Plugin version 1.12.20 has SQL injection vulnerabilities allowing authenticated attackers to manipulate database queries via the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the 'name' and 'search_labels' parameters to extract sensitive database information or escalate privileges.

WordPress Form Maker Plugin version 1.12.24 and below contains SQL injection vulnerabilities allowing authenticated attackers to manipulate database queries by injecting SQL code through the FormMakerSQLMapping and generete_csv actions. Attackers can submit POST requests with malicious SQL payloads in the name and search_labels parameters to extract, modify, or escalate privileges within the WordPress database.