CVE-2026-105187: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

PT-2026-106227

Name of the Vulnerable Software and Affected Versions Newell Brands DYMO ID versions prior to 1.6.0 Description The software parses job files using the XmlDocument.Load function without disabling Document Type Definition DTD processing. The PC Job Files view automatically parses all recognized jo...

PT-2026-106019

Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description An authenticated user can retrieve API-token records via the 'GET /api/users/api-tokens/' endpoint. Additionally, the 'PATCH /api/users/api-tokens/token id/' endpoint allows a user to modify the allowe...

CVE-2026-105184: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-105185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

PT-2026-104714

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2023-29489

Introdução Uma vulnerabilidade explorável de cross-site scripting refletido XSS foi descoberta em certas versões do cPanel e recebeu o identificador CVE-2023-29489. Essa vulnerabilidade permite que atacantes executem código JavaScript arbitrário sem exigir autenticação. A vulnerabilidade XSS aind...

Fourteen_Endpoints

Os Intermediários Empresas de Fachada Dentro do Relay de Privacidade da Apple Uma LLC anônima de Delaware publica um aplicativo de orações bíblicas, um diário pessoal e uma ferramenta de identificador de chamadas na App Store. Essa entidade opera infraestrutura de relay criptografada dentro da re...

zabbix-template-CVE-2020-1472

zabbix-template-CVE-2020-1472 Template Zabbix para monitorar eventos do Visualizador de Eventos do Windows relacionados à Vulnerabilidade de Elevação de Privilégio do Netlogon - CVE-2020-1472. Monitora os IDs de evento 5827, 5828 & 5829...

CVE-2026-90781-alsa-lib-oob

CVE-2026-90781 — alsa-lib OOB राइट रिप्रोड्यूसर CVE-2026-90781 के लिए स्टैंडअलोन C रिप्रोड्यूसर, जो alsa-lib के sndctlasciielemidparse में name= कोटेड और बिना कोटेड दोनों रूपों को पार्स करते समय होने वाला 1-बाइट out-of-bounds राइट है। भेद्यता src/control/ctlparse.c v1.2.16.1 और उससे पहले के...

IkeAbuser

IkeAbuser Ein einfaches Tool-Wrapper zur Automatisierung der Enumeration, des Fingerprintings und der PSK-Extraktion eines IPSec-VPN-Gateways. Nichts Besonderes, nur ein Skript, das ich zusammengestellt habe, um bei CTFs und beim Lernen für die CPENT Zeit zu sparen. Es verknüpft ike-scan, nmap un...

fusionpbx_rce_vulnerability

प्रस्तावना यह सरल कोड डस्टिन कॉब द्वारा RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX में प्रस्तुत श्रृंखलित भेद्यता के कार्यान्वयन को पूरा करने का प्रयास करता है। RCE पुनरुत्पादन चरण 1. वेब ब्राउज़र में भेद्य ऑपरेटर स्क्रीन देखें, जो इस उदाहरण में...

CVE-2026-105097

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105096

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

CVE-2026-105097 Omega Solution CoinEx Crypto Customer Information API customer-currency authorization

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

EUVD-2026-92063

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105097 Omega Solution CoinEx Crypto Customer Information API customer-currency authorization

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105096 Omega Solution CoinEx Crypto Customer Profile API customer authorization

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105096 Omega Solution CoinEx Crypto Customer Profile API customer authorization

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...