67693 matches found
The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges.
The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2025-26238
D-Link DI-8100G running version 17.12.20A1 is vulnerable to an improper control of generation of code . An attacker can exploit the flag parameter within the msp_info endpoint to achieve arbitrary code execution , allowing for the execution of unauthorized commands on the system. As of the provid...
PT-2026-79828
A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/view prod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public an...
CVE-2026-78199: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...
PT-2026-79804
Name of the Vulnerable Software and Affected Versions EFM ipTIME T16000M version 14.20.2 Description Improper authentication occurs within the Session Validation Handler component due to a weakness in the httpcon check session url function. This flaw allows remote exploitation to bypass...
CVE-2026-78246: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...
CVE-2026-78182: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
CVE-2026-78167: Improper Authentication
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...
ROS-20260824-73-0026
The vulnerability in gpac is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
PT-2026-79817
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
PT-2026-79805
Name of the Vulnerable Software and Affected Versions EFM ipTIME T24000M versions prior to 14.20.0 Description Improper authentication exists in the Session Validation Handler component. A remote attacker can manipulate the httpcon check session url function to bypass authentication mechanisms...
ROS-20260824-73-0015
The vulnerability in gobgp is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260824-73-0025
The vulnerability in gpac is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260824-73-0012
The vulnerability in gobgp is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...
PT-2026-79829
A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
PT-2026-80884
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Windows affected versions not specified Description A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack. A buffer overflow occurs when a program writes more data to a blo...
The vulnerability in the Firefox web browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.
The vulnerability in the Firefox web browser relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
PT-2026-80808
Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...