CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

EUVD-2026-92703

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

CVE-2026-95165: Undefined Security Weakness

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

CVE-2026-105229: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

PT-2026-106166

Name of the Vulnerable Software and Affected Versions Bacularis versions 5.4.0 through 6.5.1 Description Cross Site Scripting XSS occurs in the Organization name field. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations Update...

CVE-2026-95165

Bacularis versions 5.4.0 through 6.5.1 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw exists specifically within the Organization name field . No information regarding the root cause, practical impact, remediation, or available exploits is provided in the documents.

PT-2026-104774

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

PT-2026-104762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104397: Missing Authorization

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104396: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...

PT-2026-106022

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts group by and sub group by query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .order byfield...

PT-2026-104763

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints to the end-entity certificate. checkNameConstraints walked the path with a loo...

PT-2026-104663

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project name leads to path traversal. Remote exploitation of the attack is...

PT-2026-106232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.3 langflow-base versions prior to 0.10.3 lfx versions prior to 1.10.3 Description An issue exists in the MCP stdio transport where the software executes commands and arguments provided in an MCP server...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2023-5024

Titre de l'exploit : PLANNO 23.04.04 COMMENT CROSS SITE SCRIPTING Auteur de l'exploit : Angel Metz AKA PH03N1XSP Page d'accueil du fournisseur : Planno Lien du logiciel : GitHub - PlanningBiblio Version : alert1;. 4. Une fois le script saisi, obtenez la XSS réfléchie. 2e chemin 1. Connectez-vous...

CVE-2026-4480

🚨 CVE-2026-4480 - Exécution de code à distance critique dans le sous-système d'impression Samba Exécution de code à distance RCE Vulnérabilité d'injection de commande d'impression Samba "Un seul nom de tâche d'impression ne devrait jamais devenir une commande shell." 📖 Aperçu CVE-2026-4480 est un...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker и poc Настройка полигона После запуска контейнера docker также потребуется некоторая настройка. После завершения настройки откройте 127.0.0.1:8080. В разделе Консоль Внешний вид Темы выберите тему, нажмите «Настроить» и выполните настройку. Перейдите в раздел...