CVE Vulnerability Catalog

A weakness has been identified in NousResearch hermes-agent up to version 2026.4.23 in the _make_run_env function of the tools/environments/local.py file in the Messaging Gateway Handler component. Manipulation can lead to information disclosure. The attack can be launched remotely, and the exploit has been made public and could be used for attacks. The vendor did not respond.

A path traversal vulnerability exists in NousResearch hermes-agent up to version 2026.4.16 in the _is_blocked_device function of the read_file Tool component. Remote exploitation is possible and the exploit has been released.

Vulnerability in calcom cal.diy up to version 4.9.4. The getServerSideProps function in apps/web/modules/bookings/views/bookings-single-view.getServerSideProps.tsx of the Generic React API component causes information disclosure via manipulation of cancelledBy/rescheduledBy arguments. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWizSurvey function in /goform/formWizSurvey. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWpsStart function in /goform/formWpsStart. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

A SQL Injection vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0 in the file /admin/patients/view_history.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been made public.

CSRF vulnerability in Joomla component jomres 9.11.2. An attacker can trick an authenticated user into modifying account details, including password and email.

userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header, which execute when administrators visit the audit log page.

CSRF vulnerability in Smartshop 1. An attacker can trick an authenticated admin into modifying their profile, including email and password.

A SQL Injection vulnerability has been identified in QuantumNous new-api up to version 0.12.1 in the SearchUserTopUps/SearchAllTopUps function in file model/topup.go of the self Endpoint component. The attack can be initiated remotely, and the exploit has been made public. The vendor did not respond.

A vulnerability was found in calcom cal.diy up to 4.9.4 in the validateUrlForSSRF function in the file apps/web/app/api/logo/route.ts of the Logo API component. Manipulation leads to server-side request forgery. The attack is remote but difficult to exploit. The exploit has been published. The vendor did not respond.

A CSRF vulnerability has been identified in calcom cal.diy up to version 4.9.4. An unknown function allows CSRF attacks that can be initiated remotely. The exploit is publicly available. The vendor did not respond.

In 546669204 vps-inventory-monitoring up to commit 98c00b370668c96ae75e91c15548d9ea113652d9, the eval function in app/index/command/VpsTest.php of the VpsTest Console component allows remote code injection via the vf argument.

In the omec-project amf up to version 2.1.1, a vulnerability was found in the NGReset Message Handler component that leads to memory corruption. The attack can be carried out remotely and the exploit has been published.

In the omec-project amf up to version 2.1.1, a vulnerability was found in the NGSetupRequest Handler component that leads to memory corruption. The attack can be carried out remotely and the exploit has been disclosed.

In the omec-project amf up to version 2.1.1, a vulnerability was found in the PDUSessionResourceModifyIndication function of the file /go/src/amf/ngap/handler.go that leads to memory corruption. The attack can be carried out remotely and the exploit has been published.

A vulnerability was found in the PathSwitchRequest Handler component of omec-project amf up to version 2.1.1, leading to memory corruption. The attack can be launched remotely and the exploit is publicly available.

A command injection vulnerability was identified in Edimax BR-6428NS version 1.10 in the formWlbasic function of the /goform/formWlbasic file. An attacker can remotely manipulate the repeaterSSID argument, leading to arbitrary command execution. The exploit has been publicly disclosed and may be used.

A command injection vulnerability has been found in Edimax BR-6428NS version 1.10 in the system function of the /goform/formWlanM file. The attack can be launched remotely by manipulating multiple arguments.

In M365 Copilot, a command injection vulnerability exists due to improper neutralization of special elements used in a command. An unauthorized attacker can disclose information over a network.