CVE-2026-112147

A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made...

CVE-2026-112151

A SQL injection vulnerability exists in the vraj404 Criminal Management System within the Submission Form component. The flaw is located in the home.php file, where manipulating arguments such as id , name , offName , crime , dob , arrDate , crimeDate , sex , address , folder , and more allows fo...

EUVD-2026-104390

A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...

CVE-2026-112151 vraj404 Criminal Management System Submission Form home.php sql injection

A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...

CVE-2026-112151 vraj404 Criminal Management System Submission Form home.php sql injection

A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...

CVE-2026-112151 vraj404 Criminal Management System Submission Form home.php sql injection

A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...

EUVD-2026-104387

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112150

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) is vulnerable to a remote SQL injection flaw. The vulnerability exists within an unknown function of the search.php file, where manipulating the Search argument allows an attacker to execute arbitrary ...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

EUVD-2026-104384

A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made...

CVE-2026-112146 D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials

A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and m...

CVE-2026-112146 D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials

A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and m...

CVE-2026-112146

A vulnerability exists in the MQTT Broker component of D-Link E15, M32, R15, and R32 devices. The issue stems from unknown processing of the file /etc/emDaemon/passwd , which can be manipulated to result in hard-coded credentials . This vulnerability allows for remote attacks . Public exploit cod...

CVE-2026-112291 Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem path...

CVE-2026-112291

The Flarum Extension Manager version 2.0.0-beta.1 before 2.0.0-beta.8 is vulnerable to an unauthenticated information disclosure due to missing authorization and admin checks on the TaskResource index endpoint. Remote attackers can send GET requests to /api/extension-manager-tasks to retrieve tas...

CVE-2026-112291 Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem path...

CVE-2026-112274 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

CVE-2026-112274

libtins through version 4.6 is vulnerable to an out-of-bounds read within the DNS::soa_record::init function. The root cause is the lack of NUL termination checks when processing SOA data ; specifically, attackers can provide raw SOA RDATA without a zero byte, causing the strlen function to overr...

CVE-2026-111915 Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...