CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: Fuga de secreto en ZTE H298A / H108N a través de ETHCheat Desglose técnico de CVE-2026-34474, donde una solicitud no autenticada ETHCheat=1 provoca que los routers ZTE ZXHN H298A 1.1 y H108N 2.6 afectados devuelvan la contraseña de administrador activa, el ESSID y la PSK de WLAN e...

EUVD-2026-92179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105179

The SourceCodester Drug Recommendation System 1.0 is affected by a vulnerability in the Password Handler component, specifically within the Admin/add_user.php file. A manipulation of the Password argument leads to the missing encryption of sensitive data . This vulnerability is exploitable via re...

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 Una implementación de una prueba de concepto para CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 Lo siguiente es una actualización de CVE-2018-5767, una vulnerabilidad que explota una llamada no protegida a sscanf que ocurre al analizar el encabezado 'Cookie' para una...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

CVE-2026-105179: Missing Encryption of Sensitive Data

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-97873

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

PT-2026-104675

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

PT-2026-106280

Name of the Vulnerable Software and Affected Versions Joplin Server versions prior to 3.7.2 Description In the packages/server/src/models/TokenModel.ts file, CSRF, account-confirmation, email-change, and password-reset tokens are stored without a designated purpose. Additionally, the...

CVE-2026-95263: Improper Access Control

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

PT-2026-106256

Name of the Vulnerable Software and Affected Versions openSIS Classic version 9.3 Description An authenticated user with the teacher role can reset the password of any staff account. This is achieved by selecting an arbitrary staff record via the staff id variable within the School Information...

EUVD-2026-92783

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

PT-2026-106224

Name of the Vulnerable Software and Affected Versions Feehi CMS version 2.1.1 Description Incorrect Access Control allows a low-privilege backend administrator with administrator-update permission to change the password of the built-in super administrator account. This occurs because the server...

CVE-2026-91107: Authorization Bypass Through User-Controlled Key

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staffid and cause the School Information update path to reset that selected account's password...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control (CWE-284). A low-privilege backend administrator possessing administrator-update permissions can modify the password of the built-in super administrator account. This is possible because the server fails to enforce protections for the supe...

CVE-2026-105156

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...