CVE-2026-37342

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/viewparkeddetails.php...

CVE-2026-37342

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/viewparkeddetails.php...

SourceCodester Vehicle Parking Area Management System 安全漏洞

The SourceCodester Vehicle Parking Area Management System is an open-source parking management system developed by SourceCodester. Version 1.0 of the SourceCodester Vehicle Parking Area Management System contains a security vulnerability, which stems from the file /parking/managecategory.php bein...

CVE-2026-37341

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/managecategory.php...

CVE-2026-37341

The SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection within the /parking/manage_category.php file. This vulnerability allows an attacker to insert malicious SQL statements into entry fields to manipulate the underlying database. No information regarding a ...

CVE-2026-37342: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/viewparkeddetails.php...

CVE-2026-37341: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/managecategory.php...

CVE-2026-37344: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/managelocation.php...

CVE-2026-37345: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/managepark.php...

CVE-2026-37343: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manageuser.php...

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access systems lies in the fact that they allow functions to be accessed from an untrusted controlled area, enabling attackers to compromise the confidentiality of protected information.

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access lies in the fact that these systems enable functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality of protected information...

The vulnerability of the shell-env package for the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary code.

The vulnerability of the shell-env package for the AI agent OpenClaw formerly known as ClawdBot or MoltBot lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of the PAN-OS operating system, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the PAN-OS operating system is related to the disclosure of system data by unauthorized parties within the controlled area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2026-33705 Chamilo LMS has unauthenticated access to Twig template source files exposes application logic

Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files .tpl under /main/template/default/ are directly accessible without authentication via HTTP GET requests. These templates expose internal application logic, variable names, AJAX endpoint URLs, and admin panel...

BIT-JOOMLA-2026-21629 Joomla! Core - [20260301] - ACL hardening in com_ajax

The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers...

[SECURITY] Fedora 42 Update: libcgif-0.5.3-1.fc42

A fast and lightweight GIF encoder that can create GIF animations and images. Summary of the main features: - user-defined global or local color-palette with up to 256 colors limit of the GIF format - size-optimizations for GIF animations: - option to set a pixel to transparent if it has identica...

VulnCheck KEV: CVE-2024-21833

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

CVE-2026-5814 PHPGurukul Online Course Registration check_availability.php sql injection

A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/checkavailability.php. The manipulation of the argument regno leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2026-31401

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 D-Link DI-8003G version 19.12.10A1 Description A buffer overflow exists due to improper handling of the wan ping parameter in the /wan ping.asp API endpoint. Recommendations Update D-Link DI-8003 to a version...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006778)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006778 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix -anonvma race If an -anonvma is attached to the VMA, collapseandfreepmd...