CVE-2026-42517

This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to gain unauthorized access to sensitive...

CVE-2026-42517

The CVE-2026-42517 entry affects the e-Sushrut HMIS system, where a vulnerability arises from using reversible Base64 encoding to protect sensitive data. The root cause is that sensitive parameters in the request URL are Base64-encoded rather than securely protected, allowing an authenticated att...

CVE-2026-42516

This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability by manipulating encoded parameters in the request URL to gain unauthorized access to patient accounts on the targeted system...

CVE-2026-42515

This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system...

CVE-2026-42513

CVE-2026-42513 affects e-Sushrut HMIS. The vulnerability stems from improper authentication logic that relies on client-side response parameters to determine login status, enabling a remote attacker to intercept and modify server responses to bypass authentication and gain unauthorized access to ...

CVE-2026-40967

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0...

PT-2026-35881

Name of the Vulnerable Software and Affected Versions e-Sushrut affected versions not specified Description Improper authentication logic relies on client-side response parameters to determine authentication status. A remote attacker can intercept and modify the server response to bypass...

PT-2026-35883

Name of the Vulnerable Software and Affected Versions e-Sushrut affected versions not specified Description Improper access control in resource access validation allows an authenticated attacker to gain unauthorized access to sensitive patient information by manipulating parameters in the API...

The vulnerability of the ishtp_cl_bus_match() function in Linux operating system kernels allows a attacker to cause a system crash in the kernel.

The vulnerability of the ishtpclbusmatch function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system crash in the Linux kernel...

The vulnerability of the ieee80211_subif_start_xmit() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the ieee80211subifstartxmit function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the debugfs_remove() function in Linux operating systems allows a hacker to compromise the accessibility of protected information.

The vulnerability of the debugfsRemove function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

CDAC e-Sushrut 安全漏洞

CDAC e-Sushrut is a system platform provided by the Indian CDAC company that facilitates hospital information management and medical process support. There is a security vulnerability in CDAC e-Sushrut, which stems from improper authorization checks during resource access. This vulnerability coul...

PT-2026-36020

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description A buffer overflow can be triggered remotely via the strcpy function within the file route/goform/NTP. This occurs when the Profile argument is manipulated. Recommendations Upda...

PT-2026-36022

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description A buffer overflow exists in the strcpy function within the 'route/goform/ConfigAdvideo' file. This issue allows a remote attacker to trigger the flaw by manipulating the Profil...

The vulnerability of the erofs_worker() function in Linux operating system kernels, which allows a hacker to compromise the accessibility of protected information

The vulnerability of the erofsworker function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the cxl_port_attach_region() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the cxlportattachregion function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the devm_cxl_add_region() function in Linux operating systems, which allows a hacker to trigger a service failure

The vulnerability of the devmcxladdregion function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-36019

Name of the Vulnerable Software and Affected Versions Algovate xhs-mcp version 0.8.11 Description An issue exists in the MCP Interface component within the xhs publish content function of the src/server/mcp.server.ts file. A remote attacker can perform server-side request forgery SSRF—a flaw that...

PT-2026-36905

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.32 n8n versions prior to 2.17.4 n8n versions prior to 2.18.1 Description An unauthenticated attacker can register a malicious MCP OAuth client using a crafted client name. If a victim user authorizes the OAuth conse...

CDAC e-Sushrut 安全漏洞

CDAC e-Sushrut is a system platform provided by the Indian CDAC company that handles hospital information management and medical process support. There is a security vulnerability in CDAC e-Sushrut. This vulnerability stems from the use of reversible Base64 encoding to protect sensitive data. It...