PT-2026-91859

Name of the Vulnerable Software and Affected Versions 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery versions prior to 1.16.21 Description Unauthenticated attackers can extract sensitive data from password-protected flipbooks by exploiting the id parameter. This allows th...

CVE-2023-24291: sgt-puzzles -- security update

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...

CVE-2023-24286: sgt-puzzles -- security update

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...

CVE-2026-15600: Improper Neutralization of Special Elements used in an SQL Command

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...

VulnCheck KEV: CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

PT-2026-91196

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...

EUVD-2023-60644

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...

CVE-2024-23176

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS...

CVE-2023-24291

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...

PT-2026-91443

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interpolated directly into the FROM clause without...

VulnCheck KEV: CVE-2018-10735

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

CVE-2023-24286

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...

Apache Superset SQL Injection

The vulnerability of the Apache Superset data visualization software lies in the lack of measures taken to protect the SQL query structure during the processing of the parameters sqlExpression and where. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2025-56535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into...

CVE-2026-90597

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90600

itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection in the file /pages/inv_edit1.php via manipulation of the ID argument. The attack can be initiated remotely and requires low privileges (authentication). A proof-of-concept exploit has been publicly disclosed and may be use...

CVE-2026-90600 itsourcecode Sales and Inventory System inv_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Cisco Secure_Firewall_Management_Center

CVE-2026-20079 Cisco FMC Read-Only Checker A small, deliberat...

CVE-2026-90597

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/sup_edit1.php via the ID argument. The flaw allows remote attackers with low privileges to manipulate the parameter and inject SQL, resulting in low impact ...

CVE-2026-90597 itsourcecode Sales and Inventory System sup_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...