110109 matches found
CVE-2026-74012: Deserialization of Untrusted Data
Editor PHP Object Injection in TaxoPress = 3.51.0 versions...
CVE-2026-73380: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...
CVE-2026-73376: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...
CVE-2026-73366: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Easy Google Maps = 1.13.0 versions...
CVE-2026-66620: Deserialization of Untrusted Data
Editor PHP Object Injection in OptionTree = 2.7.3 versions...
CVE-2026-32470: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-32465: Deserialization of Untrusted Data
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-75080: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...
CVE-2026-75079: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editsubject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...
PT-2026-76897
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check availability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
PT-2026-77043
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
PT-2026-77086
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
PT-2026-77109
Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...
PT-2026-77103
Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...
PT-2026-77056
Name of the Vulnerable Software and Affected Versions OptionTree versions prior to 2.7.4 Description PHP Object Injection occurs when untrusted data is passed to the unserialize function, allowing an attacker to manipulate serialized objects and potentially execute arbitrary code. Recommendations...
PT-2026-77047
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
EUVD-2026-61091
An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...
CVE-2026-45117: Improper Control of Generation of Code
MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written to the configuration file, resulting in PHP code injection and remote code execution when the installer is available...
PT-2026-77171
MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written to the configuration file, resulting in PHP code injection and remote code execution when the installer is available...