CVE Vulnerability Catalog

In Ettercap up to version 0.8.3, a heap-based buffer overflow exists in the FUNC_DECODER function of the GG Dissector component (file ec_gg.c). Manipulation of the gg argument can lead to a remote attack, though exploitation is difficult.

A command injection vulnerability has been found in Edimax EW-7438RPn version 1.12 in the formEZCHNwlanSetup function of the /goform/formEZCHNwlanSetu file. The attack can be launched remotely by manipulating the method argument.

A command injection vulnerability has been found in Edimax EW-7438RPn version 1.12 in the formConnectionSetting function of the /goform/formConnectionSetting file. The attack can be launched remotely by manipulating the max_Conn and timeOut arguments.

A command injection vulnerability has been found in Edimax EW-7438RPn version 1.12 in the formAccept function of the /goform/formAccep file. The attack can be launched remotely by manipulating the submit-url argument.

A command injection vulnerability was identified in Edimax EW-7438RPn version 1.28a in the formHwSet function of the /goform/formHwSet file. An attacker can remotely manipulate arguments such as Anntena, Mcs, regDomain, and others, leading to arbitrary command execution. The exploit is publicly available and may be used.

Vulnerability in postcss-selector-parser up to 6.1.2/7.1.2 affects the toString function in src/selectors/container.js (AST Serialization component). Manipulation can lead to uncontrolled recursion. Remote attack is possible. Fixed in versions 6.1.3 and 7.1.3.

Vulnerability due to improper output escaping in the format_message function in Slack Agent/Mattermost Agent in hermes-agent. Manipulation of the format_message argument allows code injection.

A weakness has been identified in NousResearch hermes-agent up to version 2026.4.23 in the _make_run_env function of the tools/environments/local.py file in the Messaging Gateway Handler component. Manipulation can lead to information disclosure. The attack can be launched remotely, and the exploit has been made public and could be used for attacks. The vendor did not respond.

A path traversal vulnerability exists in NousResearch hermes-agent up to version 2026.4.16 in the _is_blocked_device function of the read_file Tool component. Remote exploitation is possible and the exploit has been released.

Vulnerability in calcom cal.diy up to version 4.9.4. The getServerSideProps function in apps/web/modules/bookings/views/bookings-single-view.getServerSideProps.tsx of the Generic React API component causes information disclosure via manipulation of cancelledBy/rescheduledBy arguments. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWizSurvey function in /goform/formWizSurvey. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWpsStart function in /goform/formWpsStart. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

A SQL Injection vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0 in the file /admin/patients/view_history.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been made public.

CSRF vulnerability in Joomla component jomres 9.11.2. An attacker can trick an authenticated user into modifying account details, including password and email.

userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header, which execute when administrators visit the audit log page.

CSRF vulnerability in Smartshop 1. An attacker can trick an authenticated admin into modifying their profile, including email and password.

A SQL Injection vulnerability has been identified in QuantumNous new-api up to version 0.12.1 in the SearchUserTopUps/SearchAllTopUps function in file model/topup.go of the self Endpoint component. The attack can be initiated remotely, and the exploit has been made public. The vendor did not respond.

A vulnerability was found in calcom cal.diy up to 4.9.4 in the validateUrlForSSRF function in the file apps/web/app/api/logo/route.ts of the Logo API component. Manipulation leads to server-side request forgery. The attack is remote but difficult to exploit. The exploit has been published. The vendor did not respond.

A CSRF vulnerability has been identified in calcom cal.diy up to version 4.9.4. An unknown function allows CSRF attacks that can be initiated remotely. The exploit is publicly available. The vendor did not respond.

In 546669204 vps-inventory-monitoring up to commit 98c00b370668c96ae75e91c15548d9ea113652d9, the eval function in app/index/command/VpsTest.php of the VpsTest Console component allows remote code injection via the vf argument.