CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594

LogNet grpc-spring-boot-starter (up to version 5.2.0 ) contains an improper authorization flaw in its Annotation Processing component, exploitable over the network. The specific function affected is described as unknown. The attack requires low privileges and has high complexity , limiting practi...

CVE-2026-82555 TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866B20220506. This vulnerability affects the function loginAuth of the file /webcste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently random values. It is possible to launch the attack...

CVE-2026-82486

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

EUVD-2026-68176

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

PT-2026-83622

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7866 B20220506 Description An issue exists in the Authentication Handler component where the loginAuth function within the '/web cste/cgi-bin/cstecgi.cgi' endpoint uses insufficiently random values. This weakness...

CVE-2026-82364

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364 macrozheng mall Order Submission submit race condition

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

EUVD-2026-68092

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364 macrozheng mall Order Submission submit race condition

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364 macrozheng mall Order Submission submit race condition

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364

macrozheng mall versions up to 1.0.3 are affected by a race condition in the Order Submission component, specifically within the /order/submit file (function unspecified). The vulnerability is reachable over the network but requires low privileges and is characterized by high attack complexity , ...

CVE-2026-82364: Concurrent Execution using Shared Resource with Improper Synchronization

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

PT-2026-83423

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A race condition exists in the Order Submission component within the '/order/submit' endpoint. This issue allows a remote attacker to manipulate the system, although the attack is characteriz...

CVE-2026-79792 zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlpdownload of the file src/transcribeanything/ytldpdownload.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely. T...

CVE-2026-79792 zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlpdownload of the file src/transcribeanything/ytldpdownload.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely. T...

CVE-2026-78886

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...