CVE-2026-84287 NousResearch hermes-agent Session Chat api_server.py denial of service

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-68948

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:23+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-mwf2-3pr3-8698...

CVE-2026-68947

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:21+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-jqh4-m9w3-8hp9...

CVE-2026-18401

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-72hv-8253-57qq...

CVE-2026-73089

creationtimestamp| type| source ---|---|--- 2026-09-01 18:35:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c83g-rgw3-j3cx 2026-09-05 16:13:11+00:00| seen| https://gist.github.com/djlan/e3b6762435f262eb64ea25ec3f8c9d82 2026-09-05 16:19:59+00:00| seen|...

CVE-2026-84111

A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxfdumptable.php. This manipulation of the argument gblOrgID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor...

CVE-2026-84200

creationtimestamp| type| source ---|---|--- 2026-09-01 12:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/64xwwmhlajzwr 2026-09-01 13:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhhzphk7q2d 2026-09-01 14:07:37+00:00| seen|...

EUVD-2026-69012

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

VulnCheck KEV: CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-82666

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

CVE-2026-82689

creationtimestamp| type| source ---|---|--- 2026-08-31 06:44:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117188768492484602 2026-08-31 11:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muesjv2zil2p...

CVE-2026-82624

code-projects Simple Inventory System 1.0 is affected by an information disclosure vulnerability in the file inventorymanagement.sql , within the Database Backup File Handler component. The specific root cause is described as "some unknown functionality" of that file. The flaw is exploitable remo...

CVE-2026-82614

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...

PT-2026-83790

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve mgr.cgi. This manipulation of the argument f dev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

PT-2026-83728

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

CVE-2026-12513

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-09-01 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-82484

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the ID parameter of the file /pages/emp_searchfrm.php. The flaw allows a remote, low-privileged attacker to manipulate the argument to inject SQL, with low impact on confidentiality, integrity, a...

PT-2026-83611

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add customer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

PT-2026-83531

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the /pages/emp searchfrm.php file. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL comman...

CVE-2026-19296

creationtimestamp| type| source ---|---|--- 2026-08-28 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100150 2026-08-29 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100150...