232326 matches found
EUVD-2026-63796
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...
CVE-2026-77391 SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...
CVE-2026-77391
SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0 is vulnerable to cross-site request forgery (CSRF) via an unidentified function. CVSS 4.0 scores it MEDIUM (5.3); the attack is remote, requires no privileges and passive user interaction, with integrity impact. A proof-of-...
CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
PT-2026-79288
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...
PT-2026-79289
A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...
PT-2026-79359
Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 24.0.0 Description An improper authorization issue exists in the Account Handler component within the file htdocs/user/card.php. A remote attacker can exploit this by manipulating the ID argument, allowing unauthoriz...
PT-2026-79350
Name of the Vulnerable Software and Affected Versions CodeAstro Online Job Portal version 1.0 Description An issue exists in the /users/update-profile.php endpoint where manipulation of the Name argument allows for unrestricted upload. This flaw can be exploited remotely. Recommendations At the...
PT-2026-79351
Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description A remote command injection flaw exists in the system function within the /cgi-bin/mbox-config?method=SET§ion=ntp timezone endpoint. This occurs when the timestr argument is manipulated, allowing ...
MINI-FHX5-4RGC-QG3C
Bulletin has no description...
MINI-WRXF-RMGC-4HFR
Bulletin has no description...
MINI-42RP-P8X6-QX5V
Bulletin has no description...
MINI-MV86-J6VH-639R
Bulletin has no description...
MINI-5H8C-23MQ-WH7Q
Bulletin has no description...
MINI-9FPV-6G3R-GQRG
Bulletin has no description...
MINI-GFP9-R82R-VVG3
Bulletin has no description...
MINI-3XMW-7R3X-C3X5
Bulletin has no description...
CVE-2026-77647
SPIP before 4.4.20 is vulnerable to unauthenticated remote code execution (CVSS 9.8, CRITICAL). The root cause is an incorrect identification of <?php blocks combined with var_export's mishandling of certain cases involving a
