CVE-2026-111883

Locust versions through 2.46.7 are vulnerable to a cross-site request forgery (CSRF) flaw within the Web UI. The issue allows remote attackers to perform unauthorized actions by luring an operator to a malicious page that triggers cross-site GET requests to the /stop and /stats/reset endpoints. S...

CVE-2026-111883 Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

CVE-2026-112142

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...

CVE-2026-112142 satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...

CVE-2026-112142 satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...

EUVD-2026-104261

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...

CVE-2026-112142

A SQL injection vulnerability exists in the Registration-Delete Handler component of the satya-vinay Events-Management-System (up to commit 437c77ceb69bf9fe2e3f4f46f7871b83f425383a). The flaw is located within an unknown functionality of the dodelete.php file, where manipulation of the ID argumen...

CVE-2026-112138

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...

CVE-2026-112139

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

CVE-2026-112140

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

CVE-2026-112108

A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file thirdparty/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit ha...

CVE-2026-112107

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotel...

CVE-2026-112140 llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

CVE-2026-112140

A code injection vulnerability exists in llSourcell Doctor-Dignity (up to commit 3f2ffb6c892f13b50a708d05900d3227acb40ded ). The flaw is located in the _get_lib_module function within the python/mlc_chat/chat_module.py file. Specifically, manipulating the model_lib argument allows for remote code...

CVE-2026-112140 llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

EUVD-2026-104248

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

CVE-2026-112139

A SQL injection vulnerability exists in the Administrative Mutation Handler component of the subhajitkhan online-clinic-management-system (up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578). The flaw is triggered by manipulating the docid argument within the admindocview.php file. This vulner...

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...