67715 matches found
EUVD-2026-42585
A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...
CVE-2026-15185
A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...
EUVD-2026-42493
A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file \inc\classes\View.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...
CVE-2026-15137 code-projects Interview Management System View.php sql injection
A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file \inc\classes\View.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...
PT-2026-56799
A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...
PT-2026-56868
Name of the Vulnerable Software and Affected Versions mettle sendportal versions prior to 3.0.2 Description An issue in the APIv1 Webhooks component allows remote attackers to bypass authentication. This occurs within the sendgrid/postmark/postal/mailjet functions, where improper manipulation lea...
CVE-2026-1989: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-15190: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and m...
PT-2026-57307
Name of the Vulnerable Software and Affected Versions miniOrange OAuth Single Sign On - SSO OAuth Client versions prior to 38.5.9 Description An authentication bypass exists in the miniOrange OAuth SSO WordPress plugin. An unauthenticated remote attacker can exploit an alternate password-recovery...
PT-2026-56657
A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file incclassesView.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the publ...
PT-2026-56934
Name of the Vulnerable Software and Affected Versions Pimcore Studio Backend Bundle versions prior to 2025.4.6 Pimcore Studio Backend Bundle versions prior to 2026.1.6 Description An authenticated user can extract the admin password hash and other database content via time-based blind SQL...
ROS-20260709-73-0031
The vulnerability in Portainer-CE is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...
ROS-20260709-73-0017
The vulnerability in MediaWiki is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260709-73-0016
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2026-15117
Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-15126
Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-15123
Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-15123
A vulnerability exists in the DOM components of Google Chrome and Microsoft Edge web browsers. The issue stems from an inappropriate implementation allowing operations to execute beyond the buffer in memory , specifically leading to heap corruption . A remote attacker can exploit this by hosting ...
CVE-2026-15117
A use after free vulnerability exists in the Payments component of Google Chrome and Microsoft Edge browsers (affecting versions prior to 150.0.7871.115). A remote attacker can exploit this by convincing a user to perform specific UI gestures while visiting a crafted HTML page, potentially leadin...