67693 matches found
CVE-2026-78055
SourceCodester Class and Exam Timetabling System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /BSIT2.php. The flaw is triggered by manipulating the course parameter, allowing a remote attacker to inject malicious scripts that execute in a victim's browser. The attack ...
CVE-2026-78055 SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...
PT-2026-79785
Name of the Vulnerable Software and Affected Versions code-projects Barangay Resident Profiling Management System version 1.0 Description An issue exists in the Resident Search Functionality within the residents.php file. Manipulation of the Search argument allows for remote SQL injection, a...
PT-2026-79750
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...
PT-2026-79790
A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem invitation code of the file backend/app/api/routes/v1/user invitation code.py of the component Public Invitation-Code Redemption Endpoint. The manipulation of the argument code leads to...
CVE-2026-78143: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...
CVE-2026-78055: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...
CVE-2026-78051 alexta69 MeTube Cookie File cookies.txt file access
A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...
emp3r0r v4.11.0
emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...
CVE-2026-44252
creationtimestamp| type| source ---|---|--- 2026-08-21 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/wazuh-poc-pubblici-per-lo-sfruttamento-di-varie-vulnerabilita 2026-08-22 12:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtobot72lj2t...
CVE-2026-46343
creationtimestamp| type| source ---|---|--- 2026-08-21 16:45:10+00:00| seen| https://www.acn.gov.it/portale/w/wazuh-poc-pubblici-per-lo-sfruttamento-di-varie-vulnerabilita...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the libristread function in the RIST protocol reader libavformat/librist.c. A remote attacker can cause a heap-based buffer overflow by sending a RIST packet whose payload is larger than the destination...
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 CVSS score: 9.4, a case of code injection that allows an unauthenticated attacker to modify or delete publicly...
CVE-2026-74989
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these cou...
The vulnerability of the Git repository management system Gitea, related to deficiencies in the authentication mechanism, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the POST /api/v1/repos/{owner}/{repo}/merge-upstream component of the Git repository management system Gitea allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the POST /api/v1/repos/owner/repo/merge-upstream component of the Git repository management system Gitea is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the ASP.NET Core software platform, related to bypassing authentication using supposedly immutable data, allows attackers to enhance their privileges.
The vulnerability of the ASP.NET Core software platform relates to bypassing authentication using data that is assumed to be unchangeable. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-77647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect...
ROS-20260821-73-0074
The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...
