PT-2026-73067

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description An issue exists in the /homeaction.php file where improper handling of the cat id parameter allows for remote SQL injection. SQL injection is a technique where an attacker inserts...

CVE-2026-19933: Stack-based Buffer Overflow

A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...

PT-2026-73071

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=delete supplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public an...

PT-2026-73074

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead to improper privilege management. The attack may be...

CVE-2026-19930: Improper Neutralization of Special Elements used in an LDAP Query

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

CVE-2026-19925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

CVE-2026-19924: Improper Authentication

A security vulnerability has been detected in Tenda AC10 16.03.10.09multiTDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly an...

CVE-2026-19929: Improper Neutralization of Special Elements Used in a Template Engine

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Template Processing. The manipulation leads to improper neutralization of special elements use...

PT-2026-73177

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

CVE-2026-19920: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

PT-2026-73073

A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...

CVE-2026-19957: Server-Side Request Forgery (SSRF)

A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit is...

PT-2026-73101

A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...

CVE-2026-19926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...

CVE-2026-19934: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi...

CVE-2026-19923: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

PT-2026-73069

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout process.php. Executing a manipulation of the argument total count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to t...

CVE-2026-19920 code-projects Online Shopping System action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2026-19920 code-projects Online Shopping System action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2026-19920

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...