CVE Vulnerability Catalog

A vulnerability in the Apache Camel IRC component allows an attacker to inject control headers (e.g., irc.sendTo) via untrusted HTTP input, redirecting IRC messages to an arbitrary channel or user. The issue stems from improper input validation and lack of special element neutralization in headers that bypass the HTTP filter strategy.

A vulnerability in the DAPR component of Apache Camel allows an attacker to redirect messages to arbitrary Dapr Pub/Sub components and topics. This is due to improper validation of the CamelDaprPubSubName and CamelDaprTopic headers, which are copied from inbound CloudEvents and used as producer routing.

A vulnerability in the Apache Camel JIRA component allows an attacker to bypass authorization and input validation via user-controlled HTTP headers. In routes bridging an HTTP consumer to a JIRA producer, an attacker can supply headers like IssueKey or ProjectKey, enabling unauthorized operations on the JIRA instance with the configured service account's privileges.

In Apache Camel's camel-elasticsearch-rest-client component, improper input validation allows an attacker to bypass authorization via user-controlled headers. Unprefixed header names (e.g., SEARCH_QUERY, OPERATION) bypass the HTTP header filter, enabling remote manipulation of Elasticsearch queries without authentication.

A vulnerability in uniFLOW Universal Login Manager (ULM) Standalone allows an authenticated administrator to access sensitive configuration information via the RUI interface. The flaw affects SMTP and LDAP integration settings.

A weakness has been identified in imhamzaazam ecommerceFlask up to commit cb7d9e24c30a99379651b7493b32048126ef402b, in an unknown function, allowing Cross-Site Request Forgery (CSRF). The attack can be initiated remotely, and the exploit has been made public, increasing the risk of exploitation.

A SQL injection vulnerability has been discovered in CodeAstro Ecommerce Website 1.0 in the file /customer/my_account.php?my_wishlist. Manipulation of the delete_wishlist argument allows remote attackers to execute unauthorized database queries. The exploit has been publicly released, increasing the risk of attacks.

A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the visitor-entry.php file. Remote attackers can manipulate the visname argument to inject SQL. The exploit is publicly available.

A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/edit-apartment.php. Manipulating the editid argument allows remote attack execution. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/report.php. An attacker can remotely manipulate the fromdate argument, leading to SQL injection. The exploit has been made public, increasing the risk of exploitation.

A SQL injection vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/action-visitor.php. An attacker can remotely manipulate the 'remark' argument to inject SQL code. The exploit has been publicly disclosed, increasing the risk of exploitation.

A flaw in Craft CMS up to version 4.18.0.1 affects the Charts endpoint. The actionGetNewUsersData function in ChartsController.php improperly authorizes access via the userGroupId argument, allowing unauthorized actions. The attack can be carried out remotely.

A vulnerability was found in Craft CMS up to version 4.18.0.1 in the actionReorderSets function of GlobalsController.php. Manipulation of the reorder-sets endpoint leads to authorization bypass.

A security vulnerability was found in Formbricks 5.0.0 in the Survey Handler component (file apps/web/modules/survey/link/actions.ts). Manipulation leads to improper access controls, allowing remote exploitation.

Vulnerability in Mojo::JSON for Perl before version 9.47 causes memory exhaustion due to unbounded recursion in the pure-Perl JSON decoder. A deeply nested JSON document can exhaust process memory.

A vulnerability was found in vxcontrol PentAGI up to version 2.1.0 in the file backend/pkg/docker/client.go of the Docker API component. Manipulation leads to a sandbox issue. The attack can be initiated remotely.

A path traversal vulnerability was found in hermes-agent version 2026.5.29.2 in the skill_view function of tools/skills_tool.py. An attacker can remotely manipulate the Name argument, leading to unauthorized file access. The exploit has been publicly disclosed and may be used.

A weakness in SourceCodester Online Examination & Learning Management System 1.0 in the file /announcements.php allows unrestricted file upload. The attack can be executed remotely, and the exploit is publicly available.

A security flaw in SourceCodester Online Examination & Learning Management System 1.0 allows unrestricted file upload via the /upload_files.php file due to improper filename extension validation. Remote exploitation is possible and the exploit has been publicly released.

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0 in the file /process_lesson.php. An unknown function allows unrestricted file upload via manipulation of the user_id argument. The attack can be launched remotely and the exploit is publicly available.