CVE Vulnerability Catalog

A vulnerability was found in langgraph library from langchain-ai up to version 1.2.4 in the _freeze function of _cache.py, where the default_cache_key argument causes use of a weak hash function. The attack can be performed remotely but is difficult to exploit.

A security flaw in exo-explore exo up to version 1.0.71 uses a weak hash function in the _image_cache_key function of the Vision Feature Cache component. The vulnerability allows remote attacks but is difficult to exploit due to high complexity. A public exploit has been released and may be used in attacks.

A SQL injection vulnerability was found in Hanwang e-Face General Management Platform 6.3.5.4 in the file /sysAuthStr/querySysAuthStr.do. An attacker can remotely manipulate the order argument, leading to SQL injection. The exploit is publicly available.

A vulnerability was found in Ruijie RG-UAC up to version 1.0-R1.8.2.p5 in the file user_auth_commit.php. An unknown function allows unrestricted file upload via manipulation of the upload_image argument. The attack can be performed remotely and the exploit has been made public.

A SQL injection vulnerability has been found in Smart Parking System 1.0 in the file /parkings/parkings.php. An unknown function allows manipulation of the street/city/status arguments, enabling remote SQL injection. The exploit has been publicly disclosed.

A SQL injection vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_product.php file via the ID argument. The attack can be performed remotely and the exploit has been published.

A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /edit_coursea.php. An attacker can remotely manipulate the ID argument, leading to SQL injection. The exploit is publicly available.

A SQL injection vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. The issue is in the /edit_exam.php file, where the ID argument is vulnerable to manipulation. The attack can be performed remotely, and the exploit has been publicly disclosed.

A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the file /patientreport.php. Manipulating the editid argument allows remote exploitation. A public exploit is available and could be used for attacks.

A SQL injection vulnerability has been discovered in itsourcecode Hospital Management System 1.0 in the /patientprofile.php file. An attacker can remotely manipulate the patientname argument, leading to SQL injection. The exploit has been publicly released and may be used in attacks.

A vulnerability was found in SourceCodester Online Boat Reservation System 1.0 involving an unknown functionality that leads to session expiration. The attack can be launched remotely and the exploit is publicly available.

In AD-Security AD_Miner 1.9.0, the Cache Handler component's request_a function in ad_miner/scripts/analyse_cache.py mishandles the sys.argv[1] argument, causing deserialization. The attack requires local access.

A vulnerability in TidGi-Desktop up to version 0.13.0 was found in the Git Repository Import component. An unknown function in loadWikiTiddlersWithSubWikis.ts allows remote code injection. The exploit is public and could be used.

A vulnerability was found in UTT HiPER 1250GW up to version 3.2.7-210907-180535 in the file /goform/ConfigWirelessBase_5g. Manipulation of the ssid argument leads to a stack-based buffer overflow, potentially allowing remote code execution. The exploit has been publicly disclosed.

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0 in the register.php file. Manipulation of the role argument during registration can lead to improper privilege management. The attack can be performed remotely and the exploit has been published.

A flaw in the org.keycloak.broker.oidc package causes incorrect synchronization of the email_verified claim. When an OIDC identity provider has trustEmail=true and the userinfo endpoint is enabled, Keycloak retrieves the email from userinfo but the email_verified status only from the id_token. Lack of validation allows applying email_verified=true to a different email address from userinfo.

A SQL injection vulnerability was found in Hospital Management System 1.0 in the /patientlogin.php file. An attacker can remotely manipulate the loginid argument, leading to SQL injection. The exploit is publicly available.

A security vulnerability has been detected in GoClaw up to version 3.13.0-beta.2, affecting the MethodRouter.Handle function in the internal/gateway/router.go file of the WebSocket RPC Handler component. The flaw leads to incorrect authorization, potentially allowing unauthorized access.

A missing authentication vulnerability was found in the wx Endpoint component of zhayujie chatgpt-on-wechat CowAgent 2.1.0, specifically in the verify_server function of channel/wechatmp/common.py. The attack can be initiated remotely by manipulating the wechatmp_token argument, and the exploit is publicly available.

A security vulnerability has been discovered in SourceCodester Pizzafy E-Commerce System 1.0, specifically in the file /admin/ajax.php?action=confirm_order. The ID argument is susceptible to SQL injection, allowing remote attacks. The exploit has been publicly released.