CVE Vulnerability Catalog

A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the /paymentdischarge.php file. An attacker can remotely manipulate the patientid argument, leading to unauthorized database access. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the /payment.php file. An attacker can remotely manipulate the patientid argument, leading to SQL injection. The exploit has been made public and could be used.

The MAX32xxx USB device controller driver (udc_max32.c) in Zephyr OS does not check if the endpoint buffer is NULL in the OUT and IN transfer-completion handlers. When a USB host sends a new SETUP packet during an ongoing EP0 transfer, the FIFO can be drained, causing a stale event to be processed, leading to a near-NULL pointer dereference and device crash.

The CrawlWP SEO WordPress plugin contains a CSRF vulnerability that allows an attacker to perform unauthorized actions on behalf of an administrator. The issue affects versions from n/a through 3.0.16.

The FormLayer plugin for WordPress versions up to 1.0.6 contains a vulnerability that inserts sensitive information into sent data, allowing retrieval of embedded sensitive data.

The Exclusive Addons Elementor plugin for WordPress contains a vulnerability of inserting sensitive information into sent data, allowing retrieval of embedded sensitive data. This issue affects versions from n/a through 2.7.9.9.

A SQL injection vulnerability has been discovered in CodeAstro Ecommerce Website 1.0 in the file /ecommerce-website-php/customer/confirm.php. An attacker can remotely manipulate the invoice_no argument, leading to unauthorized database access. The exploit has been publicly released, increasing the risk of attacks.

A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/search-result.php. An attacker can remotely manipulate the searchdata argument, leading to SQL injection. The exploit is publicly available.

A vulnerability in radare2 up to version 6.1.6 was found in the core_anal_bytes function of libr/core/cmd_anal.inc, causing an integer overflow. The attack requires local access and has been publicly disclosed.

A SQL injection vulnerability has been found in mjperpinosa stumasy up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be in the Notes_controller::search_scratch_data function. The attack can be launched remotely by manipulating the field_name argument. The exploit is publicly available, increasing the risk of exploitation.

A server-side request forgery (SSRF) vulnerability has been found in the mcp-wiki/wiki-summary component of AIAnytime Awesome-MCP-Server up to commit a884bb51bcd99e08e14fd712c749d55d9d9a13ab. The issue affects the file mcp-wiki/src/mcp_wiki/server.py via manipulation of the url argument. The attack can be initiated remotely and an exploit has been published.

A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the file /patientreport.php. Manipulating the editid argument allows remote exploitation. A public exploit is available and could be used for attacks.

A SQL injection vulnerability has been discovered in itsourcecode Hospital Management System 1.0 in the /patientprofile.php file. An attacker can remotely manipulate the patientname argument, leading to SQL injection. The exploit has been publicly released and may be used in attacks.

A vulnerability was found in SourceCodester Online Boat Reservation System 1.0 involving an unknown functionality that leads to session expiration. The attack can be launched remotely and the exploit is publicly available.

In AD-Security AD_Miner 1.9.0, the Cache Handler component's request_a function in ad_miner/scripts/analyse_cache.py mishandles the sys.argv[1] argument, causing deserialization. The attack requires local access.

A flaw in the org.keycloak.broker.oidc package causes incorrect synchronization of the email_verified claim. When an OIDC identity provider has trustEmail=true and the userinfo endpoint is enabled, Keycloak retrieves the email from userinfo but the email_verified status only from the id_token. Lack of validation allows applying email_verified=true to a different email address from userinfo.

A SQL injection vulnerability was found in Hospital Management System 1.0 in the /patientlogin.php file. An attacker can remotely manipulate the loginid argument, leading to SQL injection. The exploit is publicly available.

A security vulnerability has been detected in GoClaw up to version 3.13.0-beta.2, affecting the MethodRouter.Handle function in the internal/gateway/router.go file of the WebSocket RPC Handler component. The flaw leads to incorrect authorization, potentially allowing unauthorized access.

A missing authentication vulnerability was found in the wx Endpoint component of zhayujie chatgpt-on-wechat CowAgent 2.1.0, specifically in the verify_server function of channel/wechatmp/common.py. The attack can be initiated remotely by manipulating the wechatmp_token argument, and the exploit is publicly available.

A SQL injection vulnerability was found in the Online Examination 1.0 system in the quiz creation feature. An attacker can remotely manipulate the name/total/right/wrong/time/tag/desc arguments in /update.php?q=addquiz, leading to SQL injection. The exploit is publicly available.