CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A stored XSS vulnerability exists in the Event management software version 2.3.0. An attacker can leverage this vulnerability in order...

HotelDruid-CVE-2021-42949

CVE-2021-42949 The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks. The session id is dynamically created at each login using the following generalized syntax...

Huang Yaoshi Pharmaceutical Management Software - Unrestricted File Upload

Huang Yaoshi Pharmaceutical Management Software up to 16.0 contains an unrestricted file upload caused by accepting .asp filenames in the UploadFile element of a SOAP request to /XSDService.asmx, letting attackers upload arbitrary files, exploit requires sending a crafted SOAP request. id:...

CVE-2026-116385

A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /editprofile of the component Profile. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiat...

CVE-2026-116384

A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component Backend. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The exploit has been made available to the public...

CVE-2026-116385 Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting

A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /editprofile of the component Profile. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiat...

CVE-2026-116385

A cross-site scripting (XSS) vulnerability exists in Bdtask Garage 24 Garage Management Software version 1.0 . The flaw is located within the Profile component, specifically affecting the processing of the /edit_profile file. By manipulating the first_name and last_name arguments, an attacker can...

EUVD-2026-110034

A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /editprofile of the component Profile. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiat...

CVE-2026-116384

A weakness exists in Bdtask Garage 24 Garage Management Software 1.0 affecting the Backend component. A remote attacker can execute a manipulation leading to improper authorization . Public exploits are available for this vulnerability, though the vendor has not responded to the disclosure. Speci...

EUVD-2026-110024

A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component Backend. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The exploit has been made available to the public...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

CVE-2026-4316

Reflected Cross-Site Scripting XSS in Gym Management Software IsMyGym by Zuinq Studio affecting the reservation endpoint where the 'ret' parameter is reflected in the HTTP response without any proper sanitization. Successfull explotation of this vulnerability could allow an attacker to inject...

EUVD-2026-109708

Reflected Cross-Site Scripting XSS in Gym Management Software IsMyGym by Zuinq Studio affecting the reservation endpoint where the 'ret' parameter is reflected in the HTTP response without any proper sanitization. Successfull explotation of this vulnerability could allow an attacker to inject...

Intel Neural Compressor <2.5.0 - SQL Injection

Improper input validation in some IntelR Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access. id: CVE-2024-22476 info: name: Intel Neural Compressor 2.5.0 - SQL Injection author: ritikchaddha,daffainfo...

Astra Linux – Vulnerability in net-snmp

The handleipv6IpForwarding function in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP version 5.4.3 to 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...

CVE-2026-92085

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

CVE-2026-92085

The Talassoft Industrial Management Software by TMT Machinery Industry and Trade Co. Ltd. contains a Stored XSS vulnerability (CWE-79) caused by improper neutralization of input during web page generation. This issue affects versions before V16.0.1 . Attackers could potentially execute malicious ...

CVE-2026-92085 Stored XSS in TMT Machine's Talassoft Industrial Management Software

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

EUVD-2026-95775

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

PT-2026-108898

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...