CVE-2026-18765

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

EUVD-2026-69058

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

CVE-2026-18765

Teracity Software Technologies E-OSB is vulnerable to SQL injection due to improper neutralization of special elements used in an SQL command. The flaw is exploitable over the network with no authentication or user interaction required, yielding a CVSS 3.1 score of 9.8 (CRITICAL) with high impact...

CVE-2026-18765 SQL Injection in Teracity Sotware's Teracity E-OSB Platform

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

CVE-2026-18765 SQL Injection in Teracity Sotware's Teracity E-OSB Platform

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

PT-2026-84164

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

PT-2026-84286

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

PT-2026-84217

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2...

CVE-2026-76985

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the two option lists of a Palette, escapes the id and the display value of each option according to the escape-model-strings...

CVE-2026-19702

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702

CVE-2026-19702 is an OS command injection vulnerability in TÜBİTAK BİLGEM's Pardus Boot Repair , caused by improper neutralization of special elements used in an OS command. The issue affects versions 1.0.7 through 1.0.7 (fixed in 1.0.8 ). The CVSS 3.1 score is 7.8 (HIGH) with a local attack vect...

CVE-2026-76985 Apache Wicket: XSS in Palette via getAdditionalAttributes

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the two option lists of a Palette, escapes the id and the display value of each option according to the escape-model-strings...

CVE-2026-76985 Apache Wicket: XSS in Palette via getAdditionalAttributes

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the two option lists of a Palette, escapes the id and the display value of each option according to the escape-model-strings...

CVE-2026-5956

Ankara Hosting Site Management Panel is affected by a SQL injection vulnerability caused by improper neutralization of special elements used in an SQL command. The issue affects versions through 15062026 . The assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:...

CVE-2026-5956 SQLi in Ankara Hosting's Site Management Panel

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026...

CVE-2026-5956 SQLi in Ankara Hosting's Site Management Panel

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026...

EUVD-2026-68508

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026...

CVE-2026-65646

A flaw was found in Plesk. Improper neutralization of special elements allows remote authenticated users to disclose arbitrary local files. This vulnerability can also lead to privilege escalation within the system...