CVE-2017-9430

i,am Gihad from Libya !! DNSTracer-1.8.1---Buffer-Overflow CVE-2017-9430 What Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a command line with a long name argument that is...

CVE-2026-116554

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.fromdisk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting...

CVE-2026-116554

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.fromdisk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting...

PT-2026-125499

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from disk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting...

PT-2026-122955

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get reference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal. It is possible to...

CVE-2026-109157

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2026-109157: Stack-based Buffer Overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2026-108569 Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

CVE-2026-105171: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-96777 Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-96777: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

PT-2026-97149

Name of the Vulnerable Software and Affected Versions SourceCodester Smart Attendance System with QR Code Scanner version 1.0 Description An issue exists in the Self-Registration component within the student signup.php file. Manipulating the full name argument in the prepend function allows for...

CVE-2026-94426

A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-94426

xuxueli xxl-job up to version 3.5.0 is affected by a cross-site scripting (XSS) vulnerability in the /jobgroup/insert endpoint. The flaw is triggered by manipulating the Name argument, allowing a remote attacker to inject scripts that execute in a victim's browser. The CVSS 3.1 score is 3.5 (LOW)...

PT-2026-96319

Name of the Vulnerable Software and Affected Versions xuxueli xxl-job versions prior to 3.5.1 Description A remote attacker can initiate cross site scripting XSS—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the Name argument within an unknown...

CVE-2026-94426: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-92398 Ruijie RG-EW3000GX user_list_note admin os command injection

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

EUVD-2026-80857

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2026-92398 Ruijie RG-EW3000GX user_list_note admin os command injection

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2026-92398

Ruijie RG-EW3000GX (firmware EW_3.0(1)B11P380) is affected by an OS command injection in the user_list_note module within the file /etc/rg_config/admin. An attacker with admin-level privileges can manipulate the Name argument to inject and execute arbitrary OS commands remotely. The vulnerability...