EUVD-2026-73933

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

EUVD-2026-72932

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation of the argument outerSrc/selectPhoto leads to cross site scripting. The attack may be performed from remote. The...

CVE-2026-71377

creationtimestamp| type| source ---|---|--- 2026-09-08 09:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117234599449065388 2026-09-08 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3muynvmevpa2q 2026-09-08 10:08:05+00:00| seen|...

CVE-2026-86510

CVE-2026-86510 affects D-Link DIR-822A (firmware A_101) in the L2TP Control Message Parser component, specifically the tunnel_set_params function, where manipulation leads to an out-of-bounds write . The vulnerability is remotely exploitable with low privileges required and no user interaction, r...

PT-2026-88293

A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip spaces and comments of the file src/mjs tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized...

PT-2026-88155

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

PT-2026-86983

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add entry of the file src/meta/txtp parser.c of the component txtp. Such manipulation of the argument range start/range end leads to resource consumption. The attack may be performed from remote. The...

EUVD-2026-72448

A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is...

CVE-2026-86319 java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption

A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is...

CVE-2026-86310

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2026-86310 itsourcecode Sales and Inventory System cust_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

EUVD-2026-72450

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2026-86307

A cross-site request forgery (CSRF) vulnerability was identified in light0011 cms , affecting unknown code within commits c774dce and f72cf46. The attack is remotely initiated with low complexity and requires no authentication, but does require user interaction. Impact is limited to low integrity...

CVE-2026-86307 light0011 cms cross-site request forgery

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

CVE-2026-86296

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

EUVD-2026-72336

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

EUVD-2026-72301

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...

CVE-2026-86284

CVE-2026-86284 affects jaychouchannel Tourism-Management-System (a Java-based project hosted on GitHub). The vulnerable component is the getOption function in CommonController.java , where unsanitized tableName/columnName arguments enable remote, unauthenticated information disclosure (CVSS 3.1: ...

EUVD-2026-72263

A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This affects the function...

CVE-2026-79697

A command injection vulnerability in the basicstation_apply function of the Basic Station Certificate-Deletion Handler affects multiple Advantech WISE-6610 industrial gateway models (WISE-6610-NB, -EB, -TB, -JB, -CB, EL variants, and P-DEA/DNA/DTA) running firmware 1.2.1_20251110 . Manipulation o...