CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78181

CVE-2026-78181 is a prototype pollution vulnerability in ractivejs ractive versions up to 1.4.4 . The flaw resides in the Ractive#set function within the Keypath Handler component, where improper control of object prototype attribute modification allows a remote, unauthenticated attacker to injec...

CVE-2026-78177

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

Exploit for CVE-2025-15100

Patch: CVE-2025-15100 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-24001

Patch: CVE-2025-24001 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-26543

Patch: CVE-2025-26543 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-27890

Patch: CVE-2025-27890 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-31800

Patch: CVE-2025-31800 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-34555

Patch: CVE-2025-34555 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-37654

Patch: CVE-2025-37654 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-38900

Patch: CVE-2025-38900 Vulnerability Details - CVE: CVE...

Exploit for CVE-2025-42558

Patch: CVE-2025-42558 Vulnerability Details - CVE: CVE...

Exploit for CVE-2026-02777

Patch: CVE-2026-02777 Vulnerability Details - CVE: CVE...

Exploit for CVE-2026-04321

Patch: CVE-2026-04321 Vulnerability Details - CVE: CVE...

Exploit for CVE-2026-06555

Patch: CVE-2026-06555 Vulnerability Details - CVE: CVE...

Exploit for CVE-2026-14290

Patch: CVE-2026-14290 Vulnerability Details - CVE: CVE...

CVE-2026-78177

TanStack devtools-vite 0.7.0 is affected by an OS command injection vulnerability in the installPackage function within packages/devtools-bundler-core/src/package-manager.ts (component: Development Devtools Event Bus). The root cause is unsanitized handling of the packageName argument, allowing a...

EUVD-2026-64694

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...