PT-2026-86625

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the /pages/emp edit1.php file. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL commands o...

PT-2026-86830

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2026-86666

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly an...

ROS-20260907-73-1501

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-86438: Missing Authorization

Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote...

CVE-2026-86291: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...

Composer Dependency Arbitrary Command Execution

The vulnerability of the dependency manager for PHP Composer is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260907-73-0500

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0106

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-86736

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

PT-2026-86921

Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote...

WordPress Live Composer – Free WordPress Website Builder plugin <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Page Builder: Live Composer versions = 2.1.18...

ROS-20260907-73-0501

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-86269: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/empedit1.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may b...

CVE-2026-86222 SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqliquery of the file /admin/modaladdcourse2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-86222

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection vulnerability in the mysqli_query function within /admin/modal_add_course2.php. Manipulation of the course parameter allows a remote, unauthenticated attacker to execute arbitrary SQL queries, resulting in partial...

CVE-2026-86221

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection in the mysqli_query function within /admin/modal_add_course1.php , triggered by manipulation of the course argument. The attack can be initiated remotely without authentication. The exploit has been published with...

SUSE-SU-2026:23635-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

OPENSUSE-SU-2026:21778-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...