138107 matches found
CVE-2026-52610
The software reportico-web (version
CVE-2026-75912: Improper Neutralization of Argument Delimiters in a Command
CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the gitblame tool that allows attackers to read arbitrary files by injecting git options into the unvalidated rev parameter. Attackers can supply rev values like --contents=/path/to/file to exfiltrate sensitive files...
PT-2026-76965
Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An issue exists in the Login Form component within the /index.php file. Specifically, the Operation::select with multiple condition function is susceptible to SQL injection, a...
CVE-2026-52609
A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the reporticocriteria parameter in conjunction with the executemode=CRITERIA parameter of run.php...
PT-2026-77233
Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in a user's web browser. This occurs when a malicious payload is included in the reportico...
CVE-2026-52607
A directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the targetformat parameter in conjunction with the executemode=EXECUTE parameter of the run.php endpoint...
EUVD-2026-61095
A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the loadTemplate parameter in conjunction with the executemode=PREPARE parameter of run.php...
CVE-2026-52607
A directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the targetformat parameter in conjunction with the executemode=EXECUTE parameter of the run.php endpoint...
PT-2026-76930
Name of the Vulnerable Software and Affected Versions grav-plugin-api versions 1.0.0-beta.10 through 1.0.14 Description A path traversal issue exists in the PagesController::batchCopy method. An authenticated user with api.pages.write permissions can provide path traversal sequences in the suffix...
PT-2026-77094
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
CVE-2026-52606
A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the loadTemplate parameter in conjunction with the executemode=PREPARE parameter of run.php...
CVE-2026-52606
The software reportico-web (version
PT-2026-77163
Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.64 Description An argument injection flaw exists in the git blame tool. This occurs because the rev parameter is not properly validated, allowing attackers to inject git options. By providing specific values to...
CVE-2026-52609
A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the reporticocriteria parameter in conjunction with the executemode=CRITERIA parameter of run.php...
PT-2026-77222
Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in a user's web browser. This occurs when a malicious payload is included in the loadTemplate...
PT-2026-77234
Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description An arbitrary file write and directory traversal issue exists where remote attackers can create or overwrite files on the filesystem based on the web user permissions. This occurs at the 'run.ph...
EUVD-2026-61096
A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the reporticocriteria parameter in conjunction with the executemode=CRITERIA parameter of run.php...
CVE-2026-45118: Improper Neutralization of Script in Attributes in a Web Page
MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect and reflected JavaScript code injection. contact.php accepts the redirect target from the from HTTP parameter in $mybb-input'from'...
PT-2026-76887
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...