PT-2026-77113

Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

PT-2026-77117

Name of the Vulnerable Software and Affected Versions Youzify versions prior to 1.3.8 Description The software contains an unauthenticated deserialization flaw. This issue allows an attacker to process untrusted data without requiring authentication or user interaction, making it exploitable over...

CVE-2026-74012: Deserialization of Untrusted Data

Editor PHP Object Injection in TaxoPress = 3.51.0 versions...

CVE-2026-73380: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...

CVE-2026-73376: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73366: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Easy Google Maps = 1.13.0 versions...

CVE-2026-66620: Deserialization of Untrusted Data

Editor PHP Object Injection in OptionTree = 2.7.3 versions...

CVE-2026-32470: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32465: Deserialization of Untrusted Data

Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...

CVE-2026-75080: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-75079: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editsubject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...

PT-2026-76897

A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check availability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...

PT-2026-77043

Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...

PT-2026-77132

Name of the Vulnerable Software and Affected Versions TaxoPress versions prior to 3.51.1 Description TaxoPress is subject to an object injection issue caused by the deserialization of untrusted data. This occurs when the application processes specially crafted serialized data, allowing an attacke...

PT-2026-77086

Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...

PT-2026-77109

Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...

PT-2026-77103

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

PT-2026-77056

Name of the Vulnerable Software and Affected Versions OptionTree versions prior to 2.7.4 Description PHP Object Injection occurs when untrusted data is passed to the unserialize function, allowing an attacker to manipulate serialized objects and potentially execute arbitrary code. Recommendations...

PT-2026-77047

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

EUVD-2026-61091

An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...