472952 matches found
CVE-2026-78063
A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw is in the function formeditFileName within the file /goform/editFileName , where manipulation of the editNameMit argument allows an authenticated remote attacker to inject and execute arbitrary commands. Th...
EUVD-2026-64632
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
EUVD-2026-64623
A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...
CVE-2026-78057
sambitraj Student-Management-System (up to commit 56ba287) is vulnerable to SQL injection in the Management Mutation Handler component. Manipulating the arguments roll_no, name, father_name, class, mobile, email, password, or remark allows a remote, authenticated attacker to inject SQL queries. T...
EUVD-2026-64621
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...
CVE-2026-78056
sambitraj Student-Management-System (up to commit 56ba287) contains a SQL injection vulnerability in the Dashboard component. Manipulation of the roll_no or teacher_name argument allows a remote, authenticated attacker to inject SQL queries. The exploit is public and classified as proof-of-concep...
CVE-2026-41846
CVE-2026-41846...
CVE-2026-78136
chirpmyradio CHIRP (a radio programming tool) is vulnerable to eval injection via crafted CSV data in the _clean_tmode function within drivers/kenwood_itm.py. This flaw allows arbitrary code execution when a user opens a maliciously crafted CSV file, as indicated by the associated research reposi...
EUVD-2026-64616
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...
EUVD-2026-64607
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization of untrusted input from the 'postprotectionroles' vulnerable parameter. This makes it possible for authenticated attackers, with...
CVE-2026-0551
PPWP – Password Protect Pages (WordPress plugin) is vulnerable to PHP Object Injection in all versions up to and including 1.9.18 . The flaw stems from deserialization of untrusted input via the post_protection_roles parameter, exploitable by any authenticated user with Contributor-level access o...
CVE-2026-4703
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for unauthenticated attackers to inject a PH...
CVE-2026-4703
WS Form LITE (WordPress plugin) versions up to and including 1.10.80 are vulnerable to unauthenticated PHP Object Injection caused by deserialization of untrusted input from form submission meta values. The plugin itself contains no known POP chain, so the vulnerability has no direct impact unles...
EUVD-2026-64521
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for unauthenticated attackers to inject a PH...
CVE-2026-4703 WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for unauthenticated attackers to inject a PH...
CVE-2026-76602
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...
CVE-2026-76571
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...
CVE-2026-76602 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.3
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...
CVE-2026-76602
Fabrik is a Joomla extension (fabrikar.com) that provides form and database management. In versions below 4.7.3 , the order parameter in list models is passed directly into database queries without validation, enabling unauthenticated SQL injection via the ORDER BY clause. This allows an attacker...