CVE-2026-82612 itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

EUVD-2026-68339

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument UUSERNAME causes sql injection. The...

CVE-2026-82610

itsourcecode Online Medicine Delivery System 1.0 is affected by a SQL injection in the Employee::employeeAuthentication function within /rider/login.php (Login Interface component). Manipulation of the emp_email argument allows an unauthenticated remote attacker to inject SQL, resulting in low im...

CVE-2026-82609 itsourcecode Sales and Inventory System inv_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

CVE-2026-82603

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=delpl of the component Comment Cache. The manipulation of the argument itype/vid results in path traversal. The attack may be launched remotely. The exploit is now public a...

EUVD-2026-68312

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=delpl of the component Comment Cache. The manipulation of the argument itype/vid results in path traversal. The attack may be launched remotely. The exploit is now public a...

EUVD-2026-68311

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-82602 SeaCMS ass.php authorization

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-82599

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /member.php?action=chgpwdsubmit of the component Avatar Upload. Such manipulation of the argument oldpic leads to path traversal. It is possible to launch the attack remotely. Th...

CVE-2026-82601 SeaCMS err.php cross site scripting

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for...

CVE-2026-82600

SeaCMS up to version 13.6 is affected by a SQL injection vulnerability in the file /zyapi.php?ac=videolist, specifically through manipulation of the ids argument. The flaw allows remote, unauthenticated attackers to execute arbitrary SQL queries with low complexity . The impact is rated HIGH (7.3...

CVE-2026-82600 SeaCMS zyapi.php sql injection

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of the argument ids results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

CVE-2026-82598 SeaCMS Template search.php parseIf code injection

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument searchtype causes code injection. It is possible to initiate the attack remotely. The exploit has been publicly disclose...

EUVD-2026-68300

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82597 TOTOLINK NR1800X cstecgi.cgi setUssd command injection

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82597 TOTOLINK NR1800X cstecgi.cgi setUssd command injection

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82597

A command injection vulnerability exists in TOTOLINK NR1800X (version 9.1.0u.6681_B20230703), specifically in the setUssd function of /cgi-bin/cstecgi.cgi . Manipulating the ussd argument allows a remote attacker with low privileges to inject arbitrary commands. The attack requires no user intera...

PT-2026-83974

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument file id can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to th...

PT-2026-83984

Name of the Vulnerable Software and Affected Versions MSI Dragon Center versions prior to 2.0.155.0 Description An integer overflow occurs in the MMIO Write Path Handler component within the NTIOLib X64.sys library. This issue is triggered by manipulating the argument count or elementSize within...

PT-2026-83969

Name of the Vulnerable Software and Affected Versions Doccano Open Source Annotation Tools for Machine Learning Practitioners versions prior to 1.8.6 Description Improper access controls exist within the Project Example Detail Endpoint. A remote attacker can exploit this issue via the ExampleDeta...