CVE-2026-90574 itsourcecode Sales and Inventory System emp_transac.php add sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90572 davenardella snap7 s7_micro_client.cpp opUpload memory corruption

A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7microclient.cpp. Executing a manipulation of the argument DataLen can lead to memory corruption. The attack can be executed remotely. The explo...

CVE-2026-90524

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

CVE-2026-90525

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-90523

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

CVE-2026-65615

creationtimestamp| type| source ---|---|--- 2026-09-13 14:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102203 2026-09-14 00:00:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102203 2026-09-14 03:00:06+00:00| seen|...

EUVD-2026-77023

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-90525 itsourcecode Sales and Inventory System cust_pos_trans.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

EUVD-2026-77022

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

CVE-2026-90523

CVE-2026-90523 affects the jaychouchannel Tourism-Management-System GitHub project, specifically the User Register Endpoint in UsersController.java. The root cause is improper privilege management arising from manipulation of the UsersEntity argument, allowing a remote, unauthenticated attacker t...

CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

CVE-2026-90518

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-90515

A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...

CVE-2026-90519

PHPGurukul Bank Locker Management System 1.0 is affected by an unrestricted file upload vulnerability in the file /blms/banker/add-locker-form.php, specifically through manipulation of the addressproof argument. A remote attacker with low privileges (e.g., a banker-level account) can exploit this...

CVE-2026-90516

SourceCodester School Registration and Fee System 1.0 is affected by a remote SQL injection vulnerability in the period parameter of /bilal/normal/pay_report.php. No authentication is required, and the attack complexity is low. The CVSS 3.1 score is 7.3 (HIGH) , with low impacts to confidentialit...

EUVD-2026-76999

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/payreport.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit has...

CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90509

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

CVE-2026-90508

A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectFilter64.sys of the component Message Dispatch Handler. Performing a manipulation results in missing authorization...