CVE Vulnerability Catalog

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device.

The Auto Image Attributes From Filename With Bulk Updater plugin for WordPress up to version 4.9 is vulnerable to Stored XSS via attachment metadata. Attackers with Author-level access can inject arbitrary scripts that execute when a page is visited.

A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_payment.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.

In MetaGPT up to version 0.8.2, the function Message.check_instruct_content in metagpt/schema.py is vulnerable to deserialization via manipulation of the mapping argument. The attack requires local access.

The AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) on Android has an XSS vulnerability in the GeniexWebView component. A remote attacker can execute arbitrary JavaScript in the WebView context via a crafted web_action_data URL parameter.

The Simple Custom Login Page plugin for WordPress up to version 1.0.3 is vulnerable to Stored XSS via color settings fields. Attackers with administrator access can inject arbitrary CSS rules that are rendered on the login page for all unauthenticated users, enabling UI-redress and phishing attacks.

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. An unknown function in /index.php allows remote file inclusion via the page argument. The exploit has been published.

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. An unknown function in /admin/index.php allows remote file inclusion via the page argument. The exploit is now public.

In eladmin up to version 2.7, a command injection vulnerability was found in the Application Deployment Module via the uploadPath argument in App.java. The attack is remotely exploitable. The exploit is public, and the project has not responded.

NousResearch hermes-agent up to version 2026.4.23 has a vulnerability in the _sync_anthropic_entry_from_credentials_file function in agent/credential_pool.py, leading to improper authentication. The attack requires local access.

The Slider Revolution plugin for WordPress versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized data modification. Lack of permission verification allows authenticated attackers with Contributor-level access or higher to deactivate any active plugin on the site.

The Slider Revolution plugin for WordPress versions 7.0.0 – 7.0.14 exposes sensitive data via the 'slider.get.full' AJAX action. Authenticated attackers with Contributor-level access or higher can extract raw social media API credentials, including Instagram OAuth token, Flickr API key, YouTube Data API key, and Facebook App ID.

A flaw was found in Fees Management System 1.0 in the file /manage_fee.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.

In itsourcecode Fees Management System 1.0, an XSS vulnerability exists in an unknown function of index.php. Manipulating the page argument leads to client-side script execution. The attack can be performed remotely, and the exploit is publicly available.

In eLabFTW before version 5.4.2, an authenticated user performing a numeric reference/search can return results that include resources the user is not authorized to view. The exposed information is limited to titles, but may include sensitive data such as project names or patient identifiers.

An Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms prior to version 9.3.0 allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks.

Kiteworks prior to version 9.3.0 has an IDOR vulnerability in Secure Data Forms, allowing an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks.

Kiteworks prior to version 9.3.0 has a stored XSS vulnerability in Secure Data Forms, allowing an authenticated attacker to execute arbitrary JavaScript code in other users' sessions.

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership.

A vulnerability was identified in Fees Management System 1.0 in the file /manage_course.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.