CVEs added in
May 2026

Injection in NousResearch hermes-agent _compress_context

Injection in hermes-agent Plugin Skill Endpoint

OS Command Injection in GoClaw write_file Tool

OS Command Injection in chatgpt-on-wechat Bash Tool

SQL Injection in Online Hospital Management System

SQL Injection in Online Hospital Management System

SQL Injection in Users Save Endpoint of Hospital Patient

SQL Injection in Users Deletion Endpoint of Hospital

SQL Injection in OpenCATS DataGrid Filter Handling

SQL Injection in OpenCATS DataGrid sortDirection Parameter

SQL Injection in AdminEditAlbum.php of Online Music Site

Improper Authentication in BrinaryBrains School Student

Improper Authentication in Open5GS NGAP PathSwitchRequest

SQL Injection in MOGG Web Simulator Script play.php

SQL Injection in sambitraj STUDENT-MANAGEMENT-SYSTEM Login

SQL Injection in Student Details Management System

SSRF in Spatie Laravel Media Library addMediaFromUrl()

Template Injection / Code Injection in Formie Craft CMS

HTTP Response Splitting / Header Injection in cpp-httplib

SSRF in FastGPT Dataset Preview Endpoint

Broken Access Control / Authorization in Shopper Admin Team

Broken Access Control in Shopper Headless E-commerce Admin

SSRF in SillyTavern SearxNG Search Proxy

Path Traversal in SillyTavern Extensions API

Improper Authentication / Trusting Unvalidated Identity

Hard-Coded Credentials in Danelec MacGregor Voyage Data

Hard-Coded Credentials in PUSR USR-W610 Industrial Gateway

Cross-Site Scripting (XSS) in 1xxx Series NVR Web Interface

Missing Authentication for Critical Function in Frontier X2

Path Traversal / Arbitrary File Read in Arcane Docker

Missing Authorization in Arcane Docker Management Interface

Path Traversal File Write in Dokploy Remote Deployment

OS Command Injection in Dokploy /docker-container-logs

Broken Access Control with Remote Command Execution

Hardcoded Cryptographic Secret in Dokploy PaaS Admin

OS Command Injection in Dokploy tRPC Traefik Configuration

OS Command Injection in Dokploy /listen-deployment

Command Injection in Dokploy PaaS

Cross-Site Scripting (XSS) in Arcane logo Endpoint

Missing Authorization in Arcane Git Repository Management

Path Traversal in xiaomusic {file_path} Endpoint

SSRF in MoviePilot Image Proxy Endpoint

SQL Injection in agno ClickHouse Vector Backend

Improper Authorization / Access Control in GitHub CLI TUF

Command Injection in Dokploy Docker File Upload Path

OS Command Injection in Dokploy Registry Deletion Function

Path Traversal in Emlog Pro Theme Handling

Authorization Bypass in OpenClaw Gateway chat.send Route

Missing Authorization / Access Control in OpenClaw QQBot

Authorization Bypass / Missing Authorization in OpenClaw

SSRF in mcp-security Dynamic Client Registration

Unrestricted File Upload in Falco Solutions PHPPageBuilder

Unsafe Deserialization in manga-image-translator Shared API

Hard-Coded Credentials in FreePBX User Control Panel

Improper Access Control in n8n-MCP Multi-Tenant HTTP Mode

Out-of-Bounds Read / Input Validation Error in asn1c-Generat

OS Command Injection in WWBN AVideo Live YPTSocket

Code Injection / Untrusted Plugin Loading in Roslyn

Insecure WebView JavaScript Bridge Exposure in Home

SQL Injection in FreePBX CDR Reports Module Ordering

Cross-Site Scripting (XSS) in HAX CMS saveNode Endpoint

XSS in Mautic 7 Projects Tags and Popovers

Authorization Bypass in Mautic 7 API v2

Path Traversal File Write in Mautic 7 Campaign Import

SQL Injection in Mautic API Contact Filtering

Command Injection in AnythingLLM Filesystem Agent

Improper Rate Limiting in Better Auth HTTP Rate Limiter

Injection in Configuration Data in LinkAce Setup Flow

Path Traversal in go-billy Filesystem Abstractions

Missing Authorization in Portainer Kubernetes Proxy

Symlink Traversal in Portainer Git-Backed Stacks

Authorization Bypass in Portainer Docker Environments

Missing Authorization in Portainer Endpoint Security for

Missing Authorization in Portainer CE

SQL Injection in Marten Full-Text Search APIs

Path Traversal in MPD Local Storage Plugin

Path Traversal in DeepCode SPA Catch-all Route

Broken Access Control in Automad Setup API

Authentication Bypass via Hard-Coded Credentials

Unrestricted File Upload in SourceBans Material Admin

Improper Input Validation in SourceBans Material Admin

Weak Cryptography and Missing Integrity (CWE-326/CWE-353) in Electerm Synced Data Encryption

Insecure Code Execution / Remote Code Execution

SSRF in CodeWhale Terminal Agent

Code Injection & Excessive Privileges (CWE-94) in Electerm Terminal Client

Stored XSS in pyLoad Modern WebUI Theme

XSS in MeshCore Lovelace Card for Home Assistant

Arbitrary Code Execution via Untrusted Project Code

SSRF in CodeWhale fetch_url Tool

Broken Access Control / Authorization in OpenReplay Python

Server-Side Request Forgery (SSRF) in Nautobot

Code Injection / Sandbox Escape in SandboxJS

Privilege Management / Escalation in Rancher Local Path

OS Command Injection in Zed Terminal Tool Permissions

Command Injection in Zed IDE Project Opening

Command Injection in Zed Terminal Tool Permissions

OS Command Injection in Zed Remote Commands

Cryptographic Authentication Bypass in PyJWT with Mixed

XSS in TinyMCE Protected Comments Feature

Stored XSS in TinyMCE Media Plugin via data-mce-* Attributes

Cross-Site Scripting (XSS) in TinyMCE Rich Text Editor

Cross-Site Scripting (XSS) in TinyMCE Editor

Path Traversal / Arbitrary File Inclusion (CWE-22) in Python Liquid FileSystem Loaders

Local File Inclusion in esm.sh esbuild Plugin

Authentication Bypass / Improper Authentication in phpMyFAQ

Path Traversal in Canonical Multipass sshfs_server VM File

Unsafe Deserialization in Sms-core

Server-Side Request Forgery (CWE-918) in FlowIntel External Reference URL Probe

Arbitrary File Upload in GutenBee Gutenberg Blocks for

Stored XSS in SlimStat Analytics WordPress Plugin via

Broken Access Control / Authorization in Rocket.Chat DDP API

Authentication and Authorization Bypass in Microsoft UFO

Path Traversal in Microsoft UFO Automation Framework

OS Command Injection in Microsoft UFO Shell Action Replay

Command Injection in uniget Metadata Processing

Missing Authentication / Authorization in Goobi Viewer

Authorization Bypass / Access Control Misconfiguration

Improper Input Validation in Solana Anchor Program<'a

Command/Code Injection via Unsanitized String Interpolation (CWE-78/CWE-94) in claude-code-cache-fix quota-statusline hook

OS Command Injection in pam_usb tmux Helper

OS Command Injection in pam_usb Hardware Authentication

Improper Link Handling / Authentication Bypass

OS Command Injection in pam_usb pamusb-pinentry

Authorization Logic Error in pam_usb Remote Session Handling

Improper Authentication in pam_usb Hardware Token

Unsafe Deserialization in LangSmith Client SDK Prompt Pull

Authorization Bypass / Improper Authorization

Code Injection in Pi.Alert SaveConfigFile

Code Injection in Pi.Alert Web Configuration Editor

OS Command Injection in systeminformation

Command Injection in Sherlock GitHub Actions Workflow

Stored XSS in RELATE Participation Admin

Improper Input Handling in JSON/SQL Path Construction

SSRF in Budibase OAuth2 SDK fetchToken

Broken Access Control / Authorization in Budibase REST

Missing Authorization in Budibase

Stored XSS in Budibase Markdown Text Component

SSRF in Budibase OAuth2 Token Fetch

Sensitive Information Exposure in Budibase Snowflake

Stored Cross-Site Scripting via Unrestricted File Upload

Missing Authorization in Budibase SCIM API Endpoints

Missing Authorization in Budibase REST API

Broken Access Control / Improper Privilege Management

SSRF in Budibase REST Datasource Redirect Handling

SSRF in Budibase AI Automation URL Processing

Improper File System Access Control in Dalfox REST API

Improper File Access / Local File Inclusion via API

Command Injection in Dalfox REST API Server

SSRF in Budibase Plugin URL Upload Endpoint

SQL Injection in elFinder MySQL Volume Driver

Authentication and Session Management in FileRise TOTP

Command Injection in Build Pipeline in BentoML

OS Command Injection in BentoML Containerization Pipeline

Authorization Bypass / Insecure Direct Object Reference

Command Injection in Raynet rvia Java Discovery Logic

Authorization and Association Bypass in Ella Core 5G Network

Missing Authorization in free5GC

Missing Authorization / Broken Access Control in free5GC SMF

Denial of Service via Improper Authentication and Null

Missing Authentication and Authorization Controls

Missing Authorization in free5GC NEF

Type Confusion / Input Validation Error in free5GC NRF SBI

Missing Authentication and Improper Error Handling

Missing Authentication / Authorization on Sensitive Endpoint

Denial of Service via Improper Error Handling

Missing Authorization in free5GC NEF

Improper TLS Certificate Hostname Validation (CWE-295) in Erlang OTP public_key

Improper Input Validation in free5GC UDM SUPI Path Handling

Missing Authorization in free5GC PCF Npcf_SMPolicyControl

Command Injection in Raynet rvia Path Search Handling

Path Traversal in Taipy ElementLibrary.get_resource()

Improper Input Encoding in SSH Exec Command (CWE-116) in go-git SSH Transport

SSRF in GuardDog Remote Project Scanning

Authorization Bypass via Unescaped Regex Variable Substitution (CWE-863) in RabbitMQ MQTT Plugin

Authorization Bypass / Improper Authorization

SSRF in Tauri is_local_url()

Code Injection in Dolibarr ERP/CRM commonobject.class.php

Code Injection RCE in Dolibarr Cron Job Handler

Code Injection in Dolibarr ERP/CRM

Missing Authorization in Craft CMS Migration Endpoint

OS Command Injection in Netis AC1200 Router NC21

Information Disclosure in Netis AC1200 Router NC21

Hard-Coded Credentials in Netis AC1200 Router NC21

OS Command Injection in picoclaw ExecTool Component

OS Command Injection in @pensar/apex smart_enumerate Tool

OS Command Injection in Perl HTTP::Daemon

Code Injection via Dynamic Evaluation in Perl IO::Compress

SQL Injection in /manage_user.php of Courier Management

Server-Side Request Forgery (CWE-918) in GitHub Enterprise Server Upload Endpoint

SQL Injection in Login Component chk.php of Project

Improper Certificate Validation in epa4all-client for

SSRF in Dozzle Webhook Test Endpoint

Improper Certificate Validation in epa4all Java Client

Improper Access Control in JeecgBoot Login Department

Broken / Missing Authentication in MaxKB Webhook Trigger

Unsafe Deserialization in LangChain Runtime Serialization

Command Injection via Build Pipeline Scripts in Lumiverse

SQL Injection in Student Transcript Processing System Admin

SQL Injection in Student Transcript Processing System

SQL Injection in Student Transcript Processing System

Broken Access Control / Authorization in Snipe-IT User API

Authorization Bypass / Insecure Direct Object Reference

Hard-Coded Credentials in Eppendorf BioFlo 320 Control

OS Command Injection in FastNetMon MikroTik Router Plugin

Command Injection in FastNetMon

SQL Injection Leading to Remote Code Execution

Improper Access Control in OpenCTI Organization User

Code Injection in Babel JavaScript Compiler

SQL Injection in Chatwoot Conversation and Contact Filters

Stored Cross-Site Scripting (XSS) in FACTION

Missing Authentication / Broken Access Control

XSS in FACTION Remediation Verification Attachments

Improper Access Control in STUDENT-MANAGEMENT-SYSTEM

Improper Certificate Validation in FastNetMon Telemetry

Path Traversal in Algernon Domain Routing

Improper Input Validation / Insecure Handler Resolution

XSS in Twenty CRM File Serving Endpoints

SQL Injection in MikroORM Identifier and JSON Path Helpers

Missing Authentication in FastNetMon gRPC Control API

OS Command Injection in FastNetMon Juniper Router

Host Header Injection in e107 CMS

Command Injection in luci-app-https-dns-proxy setInitAction

SSRF in Karakeep Internal Request Processing

Code Injection / Dynamic Code Evaluation in OpenKM Admin

SQL Injection / Unrestricted SQL Execution in OpenKM

Command Injection in gix-submodule

OS Command Injection in Totolink N300RH Web Management

Access Control Bypass in @koa/router When Using

SQL Injection in Electronic Judging System delete_judge.php

SQL Injection in Electronic Judging System edit_team.php

SQL Injection in Electronic Judging System Admin Panel

Improper Input Validation in bitsery smart pointer

Path Traversal via Symlink (CWE-59) in Archive::Tar

Improper Access Control in CodeIgniter Student Management

Cross-Site Scripting (XSS) in Roundcube Webmail

SSRF in Roundcube Webmail HTML Email Rendering

SQL Injection in Roundcube virtuser_query Plugin

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection (CWE-78) in Totolink A8000RU

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

SQL Injection in StudentManagementSystem /studentdel.php

SQL Injection in StudentManagementSystem confirm_logged_in

SQL Injection in StudentManagementSystem /success.php User

SQL Injection in Twitter-Clone Search Functionality

SQL Injection in Twitter-Clone follow.php userid Parameter

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

Command Injection in FoundDream miniclawd SkillsLoader

OS Command Injection in FoundDream miniclawd

SQL Injection in Simple POS and Inventory System search.php

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

Missing Authorization in MLflow --serve-artifacts Mode

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

Improper Authorization in Besen BS20 OTA Update

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

OS Command Injection in Totolink A8000RU Web Management

SQL Injection in Electronic Judging System Admin Login

Remote Code Execution via Unsafe Model Configuration Deserialization (CWE-502) in HuggingFace Transformers

SSRF in Vane Model Provider API baseURL Handling

OS Command Injection in hermes-agent terminal_tool

Prompt / Command Injection into Generated Instructions

SQL Injection in Online Art Gallery Shop Admin Panel

SQL Injection in Hospital Patient Records Management System

SQL Injection in SourceCodester Hospitals Patient Records

Injection (Improper Neutralization of Input) in Hermes-Agent

Missing Authorization in Hermes-Agent Batch Runner

Code Injection in Dolibarr ERP CRM Installer

SQL Injection in Smartshop Search Functionality

SQL Injection in Smartshop Product ID Parameter

SQL Injection in Smartshop category.php id Parameter

Cross-Site Scripting (XSS) in NukeViet CMS Request Handling

Authentication Bypass in RT Issue Tracker

SQL Injection in RT Issue and Ticket Tracking System

CSRF in RT Issue Tracking System

Unsafe Deserialization in Amazon Braket SDK Job Results

Privilege Management Bypass in authentik User Update API

Authorization Bypass / Improper Access Control

SSRF in Typebot HTTP & Code Blocks

Server-Side Request Forgery (SSRF) in TypeBot Webhook Blocks

SSRF in Typebot Preview Chat Endpoint

Authentication Bypass in Sunshine Game Stream Host

XSS in Typebot RatingButton Embed Component

Command Injection in shell-quote quote()

Insecure Direct Object Reference (IDOR) in AudioIgniter

Improper Authorization in LiteLLM update Endpoint

Improper Authorization / Access Control in LiteLLM API Key

Hardcoded Credentials in Open ISES Tickets import_mdb.php

Hardcoded Credentials in Open ISES Tickets loader.php

SQL Injection in Open ISES Tickets statistics rollup

SQL Injection in Open ISES Tickets Incidents Summary Report

SQL Injection in Open ISES Tickets ajax/mobile_main.php

SQL Injection in Open ISES Tickets message.php Parameters

SQL Injection in Open ISES Tickets db_loader.php

SQL Injection in Open ISES Tickets GPS Tracking Integration

SQL Injection in Open ISES Tickets list_requests.php ORDER

SQL Injection in Open ISES Tickets ajax/sit_incidents.php

SQL Injection in Open ISES Tickets

SQL Injection in Open ISES Tickets tables.php Query

Authentication Bypass via XML Injection in authentik

Local File Inclusion in Yii2 View::renderPhpFile

Authentication Bypass / Missing Authentication

Broken Access Control in CtrlPanel Admin Write Controllers

Stored XSS in CtrlPanel Ticket Reply Notifications

Command Injection in CtrlPanel Billing Software

Broken Access Control / Authorization in Innoshop 0.6.0

SSRF in Terrascan Server Mode URL Resolution

SSRF in Terrascan Server Remote Scan API

SSRF in Terrascan Server File Scan Webhook

OS Command Injection in Zenshin /stream-to-vlc Express Route

Unsafe Deserialization in APScheduler JSONSerializer and

Missing Authentication in LalanaChami Pharmacy Management

Improper Privilege Management in LalanaChami Pharmacy

SQL Injection in BillaBear EventRepository Metric Filters

SSRF in Scalar Proxy scalar_url Parameter

Code Injection in Scalar Astro Proxy Endpoint

Directory Traversal in gohttp HTTP Server

Code Injection in ModelScope

Unsafe Deserialization in HestiaCP Web Terminal

Unsafe Deserialization in AutoGPT Backend Cache

Privilege Management and Untrusted Path Execution

Broken Access Control / Insecure Direct Object Reference

Zip Slip / Path Traversal in Archive Extraction

SQL Injection in SOGo ACL Management addUserInAcls Endpoint

Code Injection in Amazon Redshift Python Driver vector_in()

OS Command Injection in Dokploy PaaS Service Operations

Command Injection in WebdriverIO Git Metadata Helper

Server-Side Request Forgery (SSRF) via UI Event Abuse

Path Traversal / Insecure File System Access in Summarize

Path Traversal in DumbAssets delete-file Endpoint

Path Traversal in HSC MailInspector dw.php Endpoint

Local File Inclusion / Path Traversal in HSC MailInspector

Improper Access Control in NOVUS AirGate 4G get Endpoint

Pre-auth Code Injection (CWE-94) in ChromaDB API

Command Injection in ngrok v4.3.3 and 5.0.0-beta.2

Path Traversal in Dify Plugin Daemon Tenant Routing

Authorization Bypass / Insecure Direct Object Reference

Unsafe Deserialization in SGLangs Multimodal Generation

Path Traversal in SGLangs Multimodal Generation Runtime

Unsafe Deserialization in SGLang Multimodal Runtime Router

SQL Injection in Hospital Management System PHP

SQL Injection in Litemall WeChat Front-end API

SSRF in Vercel AI Provider Utils download-blob

Path Traversal in Hive Delete Request Handler

Path Traversal in Bert-VITS2 Gradio Interface

Path Traversal in Bert-VITS2 Model Handler _get_all_models

Authentication and Authorization Weakness in GitBucket

SQL Injection in Redaxo CMS MyEvents Addon myevents_id

SQL Injection in Oinone Pamirs RSQLToSQLNodeConnector

SSRF in CoreWorxLab CAAL test-hass Endpoint

SQL Injection in Fuel CMS Activity Log 'col' Parameter

Cross-Site Request Forgery (CSRF) Leading to Remote Code

Code Injection / Unsafe Deserialization in python-jsonpickle

Path Traversal in Home Assistant Community Store (HACS)

Stored XSS in Open WebUI Banner Component

Missing Authorization / Access Control in Open WebUI Chat

SSRF in Open WebUI OAuth Picture URL Handling

Stored XSS in Open WebUI Audio Transcriptions

Cross-Site Scripting (XSS) in Open WebUI HTML Chat Renderer

Broken Access Control in Open WebUI File Management API

Insecure Direct Object Reference in Open WebUI Memories API

Missing Authorization / Insecure Direct Object Reference

Authorization Bypass / Access Control in Open WebUI Role

Path Traversal in File Upload Handling in Open WebUI

Path Traversal in Open WebUI Audio Uploads

Cross-Site Scripting (XSS) in Open WebUI Excel Preview

Authorization Logic Error in Open WebUI

Broken Access Control in Open WebUI Knowledge & Folder APIs

SSRF in Open WebUI Retrieval Helpers

Server-Side Request Forgery (SSRF) in Open WebUI

Broken Access Control / Insecure Direct Object Reference

Authorization Bypass / Broken Access Control in Open WebUI

XSS in Open WebUI Model Chat Interface

Improper Privilege Management with TOCTOU Race

Broken Access Control in Open WebUI File API

Broken / Missing Authorization in Open WebUI Task

Broken Access Control in Open WebUI Chat Completions API

SSRF in Open WebUI URL Validation Logic

Broken Access Control in Open WebUI

Missing Authorization in Open WebUI Model Composition

Missing Authorization in Open WebUI Retrieval Collections

Improper Authentication in Open WebUI LDAP Simple Bind

Insecure Direct Object Reference in Vvveb Checkout Cart

Insecure Direct Object Reference in Vvveb Admin API Token

Stored Cross-Site Scripting (XSS) in phpMyFAQ URL Parsing

Broken Access Control / Missing Authorization

SQL Injection in phpMyFAQ Captcha API

SQL Injection in phpMyFAQ OAuth Token Handling

Improper Authentication Throttling in phpMyFAQ check

Cross-Site Scripting (XSS) in Anote Markdown Handling

Insecure Symlink Handling in Microsoft APM CLI Prompt and

Improper Input Validation of Untrusted URIs in Tabby

Command Injection in Tabby Terminal

Command Injection in Tabby Terminal Emulator

Improper Access Control in Traefik Kubernetes Gateway REST

Code Injection in MCP Calculate Server

Path Traversal in Microsoft APM Plugin Normalization

Template Injection / Remote Code Execution in OpenMRS

Command Injection in Turborepo LSP VS Code Extension

Command Injection in Oinone Pamirs

Improper Privilege Management in Linux Kernel ptrace

Authentication Bypass in Form Notify WordPress Plugin

LDAP Injection in ZITADEL LDAP Identity Provider

OS Command Injection in python-utcp

XSS in PrestaShop Back-Office Customer Service View

Improper Remote Code/Command Execution Environment Control

Improper Authorization / Privilege Escalation

Command Injection in Fleet Software Installer Pipeline

Authentication Bypass in Crabbox Shared-Token Flows

XSS in SiYuan Bazaar Marketplace Package Metadata

Missing Authorization in Live Helper Chat 4.84v

Missing Authentication / Improper Authorization

XSS in SiYuan Bazaar Marketplace Electron App

Cryptographic Key Management Weakness in Note Mark

OS Command Injection in mdserver-web Scheduled Task

Improper Query Sanitization / Injection-Adjacent Data

Improper Certificate Validation in Fleet Windows MDM

SQL / Database Query Injection in Strapi Content-Type

Path Traversal in FileBrowser Quantum Public Share Deletion

Injection / Query Manipulation in Mongoose sanitizeFilter

Arbitrary Code Execution via Remote Code Loading

Code Injection / Unsafe Remote Code Loading in Hugging Face

Code Injection / Expression Language Injection

SSRF in Gotenberg downloadFrom and Webhook Features

SSRF in Gotenberg Chromium URL-to-PDF Endpoint

Server-Side Request Forgery (SSRF) in Gotenberg PDF API

Command Injection in Gotenberg PDF Metadata API

Cross-Origin WebSocket / Information Exposure

SSRF in MagicMirror² /cors Endpoint

Improper File System Access Control in Gotenberg PDF API

HTML Injection / Cross-Site Scripting in Electron

Stored XSS in vCluster Platform templateRef Name Field

Unrestricted File Upload / Remote Code Execution

Authentication Bypass in Burst Statistics WordPress Plugin

SQL Injection in SOGo changePasswordForLogin with Cleartext

SQL Injection in SOGo with PostgreSQL Backend

Authorization Bypass in Hoppscotch Onboarding Config

SQL Injection in ERPNext HTTP Endpoints

SQL Injection in ERPNext HTTP Endpoints

Missing Authorization in ERPNext Sensitive Endpoints

SSRF in PlaywrightCapture Web Page Capture Service

OS Command Injection in OPNsense Local User Synchronization

Insecure Direct Object Reference in SQLBot Data Source

Server-Side Template Injection in CubeCart Smarty Templates

Code Injection in CubeCart Invoice Editor

Open Redirect / Untrusted Host Header Handling

Arbitrary File Upload in CubeCart REST API File Manager

Improper Authorization in MISP Administrator Accounts

Server-Side Template Injection (SSTI) in CubeCart Smarty

Authentication Bypass / Improper Authentication

SQL Injection in CubeCart Product and Log Sorting

Authentication Bypass in fast-jwt Async Key Resolver

SQL Injection in Flight SimplePdo Helpers

HTTP Request/Response Mismatch in Netty HttpClientCodec

Improper Input Validation in Netty Framework

HTTP Header Injection in Netty HttpProxyHandler CONNECT

Authorization Bypass / Broken Access Control in CKAN

SQL Injection in CKAN datastore_search_sql Endpoint

Improper Certificate Validation in CKAN SMTP Configuration

SSRF in Self-Hosted Next.js Node Server

Improper Access Control in vm2 NodeVM Nesting

Code Injection / Sandbox Escape in vm2 Node.js Sandbox

Sandbox Escape / Prototype Pollution in vm2 for Node.js

Authorization Bypass / Sandbox Escape in vm2 NodeVM Builtin

Code Injection / Sandbox Escape in vm2 Node.js Sandbox

Missing Authorization in Next.js Pages Router i18n Data

Directory Traversal via NTFS Junction (CWE-59) in Claude Desktop CoworkVMService on Windows

Code Injection in protobufjs-cli Static Code Generator

Code Injection in protobufjs

Code Injection in protobufjs Code Generation

Cross-Site Scripting via HTML Command Injection (CWE-79) in JupyterLab CommandLinker

OS Command Injection in protobufjs-cli pbts JSDoc Invocation

Command Injection in U-SPEED AC1200 Router NTP

Arbitrary File Upload in qihang-wms

Improper Authorization in Fleet Helm Deployer

Path Traversal in compressedEndpoint within Rancher UI

Unsafe Deserialization / PHP Object Injection

CSRF in ChurchCRM Deletion Endpoints

Broken Authentication in ChurchCRM Public User API

Improper Privilege Management (CWE-269) in ChurchCRM

Code Injection in ChurchCRM Setup Wizard

Authorization Bypass / Improper Authorization in Heym

Path Traversal in Heym File Upload Endpoint

LDAP Injection in Lemur LDAP Authentication Module

Path Traversal / Unconstrained Filesystem Access

Code Injection in Scramble Laravel API Documentation

Missing Authorization in efw4.X <efw:elFinder> Component

SSRF in Nginx UI Cluster Node Proxying

Improper Authorization in wger Gym-Scoped User Management

Improper Authentication in arduino-esp32 WebServer Digest

Privilege Escalation / Authorization Bypass in Grav API

Improper Input Validation / Robustness Issue in Granian

Broken Access Control / Missing Authorization

Prompt Injection / Output Manipulation in nnU-Net GitHub

Improper Privilege Management in Wiki.js users.update

Path Traversal / Sandbox Escape in Pulpy Desktop Packager

Authorization Bypass in ArcadeDB Cross-Database Access

Authorization Bypass / Insecure Direct Object Reference

Improper Input Validation in WGDashboard

Authentication Bypass in Pingvin Share X

Authentication Bypass in PocketBase

Server-Side Request Forgery (SSRF) Defense Bypass

Code Injection / Cross-Site Scripting in AntSword noxss()

Path Traversal and External File Path Control

SSRF in Xibo CMS Library Upload

Path Traversal in Langflow Knowledge Bases Deletion API

XML External Entity (XXE) Processing in changedetection.io

Broken Access Control in mem0 Memory Reset API

Missing Authentication in mem0 Memory Management API

Unsafe Deserialization in MambaLMHeadModel.from_pretrained

Unsafe Deserialization in Ludwig Model Serving

Unsafe Deserialization in Ludwig predict() Data Loading

Code Injection in llm CLI --functions Argument

Unsafe Deserialization in imgaug BackgroundAugmenter

Unsafe Deserialization in Horovod KVStore HTTP Server

Code Injection in Guardrails AI Hub Package Installation

Unsafe Deserialization in CosyVoice Model Loading

Code Injection in Cognee Notebook Cell API

Command Argument Code Injection (CWE-94) in ART Kubeflow

Unsafe Deserialization in ART Kubeflow Component

SSRF in JunoClaw WAVS Bridge computeDataVerify

Information Exposure in JunoClaw MCP Write Tools

OS Command Injection in JunoClaw plugin-shell Command

OS Command Injection in JunoClaw plugin-shell run_command

Improper Input and File Path Validation in JunoClaw

Code Injection in Open Source Kubectl MCP Server Web

Code Injection in ART Kubeflow Robustness Evaluation for

OS Command Injection in TinyZero HDFS File Operation

Code Injection in superduper Query Parser

Unsafe Deserialization in Snorkel MultitaskClassifier.load()

Unsafe Deserialization in Snorkel BaseLabeler.load()

Unsafe Deserialization in Snorkel Trainer.load()

Unsafe Deserialization in PyTorch Lightning

Code Injection / Remote Code Execution in PySyft Server

Unsafe Deserialization in Optimate neural_magic_training.py

Unsafe Deserialization in Optimate _load_model()

Arbitrary Code Execution in optimate

Unsafe Deserialization in ml-engineering

Unrestricted File Upload in MK-Auth 23.01K4.9

Improper Authorization in Pocket ID OIDC Provider

XSS in YetAnotherForum.NET Thread Posting

Stored XSS in YetAnotherForum.NET Event Log Rendering

Authorization Bypass Leading to SQL Execution

SSRF in Open-WebSearch URL Safety Utilities

SQL Injection in Elixir.Postgrex.Notifications Channel

Sensitive Information Exposure in sealed-env Enterprise

Authentication Rate Limiting Bypass in Vaultwarden

Missing Authorization in Vaultwarden Organization Purge

Improper Authorization in Vaultwarden Organization Group

Cross-Site Scripting (XSS) in DeepChat SvgArtifact Component

Improper Input Validation in DeepChat Electron Shell

Broken Access Control / Insecure Direct Object Reference

Path Traversal in Outline ZipHelper.extract

Cross-Site Scripting (XSS) in Outline User Mentions

Authorization Bypass / Privilege Management in Outline

SSRF in WWBN AVideo URL Fetch Logic

Path Traversal in jotty·page app-icons Endpoint

Code Injection in WWBN AVideo YPTSocket

Privilege Escalation via Insecure Configuration Handling

Code Injection in QuickJS-NG js_mapped_arguments_mark

Authentication Bypass in inkeep Agents runAuth Middleware

Authentication Bypass / Access Control in s3-proxy

Authentication Bypass via Hardcoded Cryptographic Secret

OS Command Injection in EDIMAX BR-6428nS V3 WLAN

Path Traversal / Arbitrary File Read in MLflow Model

Path Traversal in Crabbox Islo Provider Workspace Resolution

SSRF in FireFighter Jira Bot Endpoint

Improper Authentication in OpenClaw BlueBubbles Webhook

Missing Authorization in OpenClaw Gateway Configuration

Server-Side Request Forgery (SSRF) in Flowise Tools

Missing Authorization in Bitwarden Cloud Provider

SSRF in Open edX Enterprise Service SAML Metadata Fetch

SSRF in Open edX SAML Provider Sync Endpoint

Path Traversal / Arbitrary File System Access

Improper Authorization in pyLoad Core API

Broken Access Control / Insecure Direct Object Reference

SQL Injection in HireFlow v1.2 Login and Search Endpoints

CSRF in HireFlow State-Changing POST Endpoints

Command Injection in D-Link DCS-932L LightSensorControl

SQL Injection in MuuCMF T6 Search Controller Endpoint

Command Injection in automagik-genie MCP Server

SSRF in MLflow Webhook Handling

Information Disclosure in Grav Twig Rendering

Authorization Bypass / Insecure Direct Object Reference

Remote Code Execution via CI/CD Misconfiguration

Authorization Logic Error in Clerk JavaScript Authorization

Insufficient Cryptography in Meari IoT SDK Image Handling

Missing Authorization in Meari IoT Cloud Alibaba OSS

Missing Authorization in Meari Device Status OpenAPI

Improper Authorization in Meari IoT Cloud MQTT Broker

Unsafe Deserialization in Flash-Attention Training Framework

Unsafe Deserialization in CosyVoice gRPC Server

Unsafe Deserialization in CosyVoice average_model.py

Unsafe Deserialization in CosyVoice make_parquet_list.py

XML Entity Expansion (Billion Laughs / XML Bomb)

Unsafe Deserialization in pgAdmin 4 FileBackedSessionManager

OS Command Injection in pgAdmin 4 Import/Export

SQL Injection in pgAdmin 4 Maintenance Tool VACUUM/REINDEX

Broken Access Control in pgAdmin 4 Server Mode Object &

Code Injection in Angular Expressions

Authorization Bypass via Improper Input Validation

XSS in Grav detectXss() HTML Event Attribute Filtering

Cross-Site Scripting (XSS) in Grav Page Creation

Authorization and Access Control Logic Error in Grav Admin

Path Traversal in Grav FormFlash Session Handling

Code Injection in Grav Direct Install

Directory Traversal in docuFORM Managed Print Service

XSS in dfm-menu_orderopt.php of Mercury Managed Print

XSS in docuForm dfm-menu_markeralerts.php

Cross-Site Scripting (XSS) in docuForm acc-menu_pricess.php

Cross-Site Scripting (XSS) in docuForm dfm-menu_alerts.php

OS Command Injection in Cockpit System Logs UI

Cleartext Transmission of Sensitive Information

Code Injection in Aero CMS Admin Post Creation

Code Injection in Evolution CMS

Authentication and Access Control Failure in OpenCATS

SQL Injection in PHP PDO Firebird Driver

Path Traversal in AzuraCast Media Upload Endpoint

Path Traversal via Symlinks in apko APK Extraction

Missing Authentication / Authorization Controls in phpVMS

Improper Privilege Management in Plainpad User Role Update

Command Injection in Ruby Net::IMAP Symbol Arguments

Command Injection in Ruby Net::IMAP Raw String Commands

Missing Authentication Rate Limiting in Signal K Server

Improper Authentication in Patreon OAuth Provider

Missing Authorization / Access Control in Arcane Docker

Code Injection via Unvalidated Input in pyp2spec RPM Spec

Missing Authorization in Argo Workflows Sync Service

Authorization Bypass / Access Control Misconfiguration

Privilege Misuse via ptrace (CWE-269) in bubblewrap

SSRF in Linkwarden fetchTitleAndHeaders

Cross-Site Scripting (XSS) in Postiz Post Preview Rendering

OS Command Injection in Termix Docker Container Management

SSRF in pygeoapi OGC API Process Execution

Path Traversal in pygeoapi STAC FileSystemProvider

SSRF in FastGPT Metadata Protection Logic

Server-Side Request Forgery (SSRF) in New API LLM Gateway

Missing Authentication for Critical Function in FastGPT

Code Injection in CI/CD Workflow in Postiz

XSS in ipl/web Components for Icinga Web

Information Exposure in Cilium Bugtool Output with

Improper Input Validation / Broken Payment Webhook

Broken Access Control in Avo ActionsController for Ruby on

Arbitrary Code Execution via Unsafe Deserialization

SSRF in n8n-MCP Webhook and API URL Handling

SQL Injection in pgx PostgreSQL Driver

Directory Traversal in fohrloop dash-uploader HTTP Request

Input Validation / Path Traversal & SSRF in i18next-http-mid

Improper Origin Validation in Cross-Window Messaging

Path Traversal / Arbitrary File Access in i18next-fs-backend

Prototype Pollution in 18next-http-middleware

HTTP Response Splitting / Header Injection in i18next-http-m

Improper Authentication (CWE-287) in openvpn-auth-oauth2

Timing Side-Channel in RELATE Authentication Logic

Cross-Site Scripting (XSS) / HTML Injection in Brave CMS

Authentication Bypass in Nhost Account Linking

Stored XSS in Brave CMS Rich-Text Content Rendering

SQL Injection in Beauty Parlour Management System

Code Injection in Dolibarr User Extrafields

Path Traversal / Archive Extraction Vulnerability

Missing Authentication / Broken Access Control

Path Traversal File Write in PraisonAI MCP File-Handling

SSRF in PraisonAI URL Validation Logic

Code Injection in PraisonAI Recipe Runner

Code Injection in ai-scanner

Code Injection in math-codegen

OS Command Injection in PraisonAI MCP Command Handling

SQL Injection in PraisonAI Conversation Store Backends

Path Traversal in YARD Documentation Server

Access Control Bypass via Path Normalization in Dapr

OS Command Injection in LibreNMS Controllers and Poller

Use of Hard-Coded Credentials in yeti-platform Yeti

Command Injection in BYOB 2.0 Payload Build Generator

XML External Entity (XXE) in Alkacon OpenCms CMIS Chemistry

SQL Injection in FilePress Shares Filelist API

SQL Injection in CodeAstro Leave Management System login.php

SQL Injection in SUP Online Shopping replymsg.php

SQL Injection in SUP Online Shopping message.php

SQL Injection in SUP Online Shopping 1.0

Code Injection / Unsafe Input Handling in Electerm Deep

OS Command Injection in electerm SFTP Editor Integration

Improper URL / Protocol Handling in Electerm Terminal

Path Traversal and Untrusted File Loading in Electerm

Path Traversal / Symlink Following in zrok WebDAV Drive

Command Injection in LiteLLM AI Gateway

SSRF in PromptHub Skill Fetcher

SQL Injection in LiteLLM API Key Verification Query

Template Injection (CWE-1336) in LiteLLM Prompt Tester

Remote Code Execution / Sandbox Escape in OpenLearnX Code

Command Injection in electerm Linux Installer Script

Command Injection in Electerm macOS Update Handler

SQL Injection in SUP Online Shopping viewmsg.php

SQL Injection in SourceCodester Comment System

Use of Hard-coded Cryptographic Key in MAXHUB Pivot Client

Information Disclosure in Argo CD

SSRF in GitHub Enterprise Server Notebook Viewer

SQL Injection in code-projects Feedback System 1.0 Admin

Server-Side Request Forgery (SSRF) in n8n-MCP SDK Embedder

Information Exposure in Inngest serve()

SQL Injection in Pharmacy Sales and Inventory System

Code Injection via Configuration Manipulation

Path Traversal / Directory Traversal in GitPython

Command Injection in GitPython Push APIs

Code Injection in NotepadNext

Improper Authorization / Insecure Direct Object Reference

SSRF in FreeScout URL Sanitization Helper

XSS in FreeScout Mailbox Auto-Reply Messages

Insecure Access Control / Authorization in Snipe-IT

Missing Authentication / Access Control in Yarbo Embedded

Use of Hard-coded Credentials in Yarbo Firmware v2.3.9

SSRF in Wallos Webhook Handling

Improper Input Validation / Server-Side Request Forgery

Predictable Token / Identifier Generation in RELATE

SQL Injection in Daptin :typename API Endpoint

SQL Injection in ChestnutCMS cms_content Tag Backend

Command Injection in npm Package next-npm-version 1.0.1

OS Command Injection (CWE-78) in npm node-ts-ocr package

Path Traversal in Wish SCP Middleware Allows Arbitrary File

SQL Injection in Dagster Dynamic Partition I/O Managers

SSRF in monetr Lunch Flow Integration

Improper Input Validation / Path Traversal in Open Notebook

Server-Side Template Injection in Open Notebook User

Cross-Site Request Forgery & Insecure CORS in Open Notebook

SQL Injection in NocoBase SQL Collections

Unsafe Deserialization (CWE-502) in Fabric Channel

SQL Injection in YesWiki Bazar EntryManager Module

Expression Injection (CWE-94) in Math.js Parser Engine

XML Injection via Processing Instructions (CWE-91)

Unescaped DOCTYPE Fields (CWE-91) in xmldom XMLSerializer

Unbounded XML Recursion (CWE-674) in xmldom Parser

XML Comment Injection (CWE-91) in xmldom Serializer

Input Validation Error in SSO / SAML Processing

Authorization Logic Error in Admidio User Management

SQL Injection in NocoBase queryParentSQL Recursive CTE

XSS in CI4MS Backup Module Filename Handling

SSRF in OpenClaw Zalo Plugin sendPhoto

Authorization Bypass in OpenClaw Matrix Room Control

Broken / Missing Authorization in OpenClaw Navigation Guard

Server-Side Request Forgery in OpenClaw CDP Endpoint

Missing Authorization in OpenClaw noVNC Helper Route

Path Traversal / Zip Slip in OpenMRS Module Upload Endpoint

Unrestricted File Upload in Vvveb Media Upload Handler

XML External Entity (XXE) Injection in Vvveb Admin Import

Missing Authentication / Hard-Coded Administrative Access

Sensitive Data Exposure in ZTE ZXHN H298A/H108N Web

SQL Injection in Rucio postgres_meta DID Search FilterEngine

Path Traversal / Filesystem Boundary Violation

SQL Injection in Rucio DID Search

Path Traversal in OpenMRS ModuleResourcesServlet Static

Improper Input Validation in Claude Code Folder Trust Logic

Authorization Bypass / Access Control Misconfiguration

SSRF in Gotenberg Webhook Handling

Broken / Improper Authentication in CoreDNS DoH Transports

SQL Injection in ProFTPD mod_wrap2_sql

SSRF in Gotenberg Webhook & Download Deny-Lists

Path Traversal in Jupyter Server REST API contents Handling

Unsafe Deserialization and Server-Side Request Forgery

Improper Authorization in CoreDNS Transfer Plugin Zone

SQL Injection via Prompt Injection in SQLBot Text2SQL

SQL Injection in Kestra HTTP GET Parameter Handling

Improper Authentication in OpenCTI API

XML External Entity (XXE) in OpenCMS Admin Import DB

OS Command Injection in GoAhead Web Server on MeiG Smart

Missing or Improper Access Control in Realtek rtl8192cd

Command Injection in ipTIME C200 ApplyRestore Endpoint

SSRF in OpenClaw Existing-Session Browser Interaction Routes

Path Traversal in OpenClaw QQBot Media Tags

Missing Authorization / Policy Enforcement in OpenClaw Exec

SSRF in OpenClaw Browser SSRF Policy

SSRF in OpenClaw QQBot Media URL Handling

Authorization Bypass / Missing Authorization in OpenClaw

Authorization Bypass in OpenClaw Outbound Host-Media

Improper Access Control in OpenClaw Browser Snapshot and

Authorization Bypass in OpenClaw Sandbox Execution Routing

Improper Authentication Rate Limiting in OpenEMR Login

Code Injection / Sandbox Escape in ERPNext Frappe

OS Command Injection in Totolink A8000RU setAppFilterCfg

Command Injection in MCP Tool Server

Path Traversal in code-mcp MCP File Handler is_safe_path

Path Traversal in python-notebook-mcp Notebook File

Path Traversal in Axle-Bucamp MCP-Docusaurus Document Routes

OS Command Injection in A-G-U-P-T-A wireshark-mcp

Path Traversal in RTGS2017 NagaAgent Skills Endpoint

Code Injection in nginx-ui

Broken / Missing Authentication on Critical Functionality

Missing Authentication in Nginx UI

Path Traversal in fast-uri

SQL Injection in n8n Snowflake and Legacy MySQL v1 Nodes

XSS in n8n MCP OAuth Client Name Handling

Code Injection in n8n Python Task Runner

SQL Injection in n8n Oracle Database Node

SQL Injection in n8n SeaTable Node Row Search and Retrieval

Missing Authorization in n8n Dynamic Credential Resolution

Sensitive Data Exposure in Prometheus Azure AD Remote Write

Unrestricted File Upload in OpenSTAManager Module Update

Path Traversal in Detect-It-Easy

Missing Authentication / Authorization on Critical Function

SQL Injection in OpenC3 COSMOS Time-Series Database (TSDB)

Authentication Bypass in Note Mark

Insecure Direct Object Reference (IDOR) in Easy PayPal

Authentication Bypass / Hardcoded Credentials

Stored Cross-Site Scripting (XSS) in Notesnook Export Flow

Code Injection in PPTAgent LLM-Generated PowerPoint

OS Command Injection in Evolver _extractLLM() Command

Path Traversal in Evolver Skill Download Command

Sandbox Escape / Code Injection in vm2 for Node.js

Code Injection / Sandbox Escape in vm2 inspect Function for

Sandbox Escape / Code Injection in vm2 Node.js Sandbox

Code Injection / Sandbox Escape in vm2 Node.js Sandbox

Command Injection in Caesium Image Compressor

Missing Authentication in Prefect

Unrestricted File Upload in MindsDB BYOM Integration

Improper Authentication in JwtAuthenticationTokenFilter of

Code Injection in AV Stumpfl Pixera Two Media Server

Improper Authentication in YunaiV yudao-cloud OAuth2 Token

SQL Injection in Jinher OA UserSel.aspx

Improper Authorization in ChatGPTNextWeb NextChat MCP

SQL Injection in Online Hospital Management System

Improper Authentication in InnoShop Installation Endpoint

Missing Authorization in Paid Memberships Pro for WordPress

Path Traversal in Flux159 mcp-game-asset-gen MCP Interface

OS Command Injection in Sunwood-ai-labs

SQL Injection in Courier Management System edit_staff.php

OS Command Injection in Preview Endpoint of

Privilege Escalation via Insecure Kernel Driver Interface

Path Traversal / Zip Slip with TOCTOU Race in AGL

Improper Access Control in AGL afb-daemon

Improper Privilege Management in AGL afb-daemon Supervision

Unsafe Deserialization in MixPHP Framework File-Based

Unsafe Deserialization in MixPHP Framework Redis

Unsafe Deserialization in MixPHP Framework Sync-Invoke

Unsafe Deserialization in MixPHP Sync-Invoke TCP Server

Hard-Coded Credentials in AstrBot Dashboard Authentication

Untrusted Deployment Image Execution (CWE-829) in IPA

SQL Injection in Electronic Judging System Login