CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2024-42370

creationtimestamp| type| source ---|---|--- 2026-09-04 12:00:13+00:00| published-proof-of-concept| Telegram/CQMtoEEbSJ7yTkSwzPGTr5n5cXGRrCDjqhXlQyTvYmv40 2026-09-05 01:00:30+00:00| published-proof-of-concept| Telegram/CQMtoEEbSJ7yTkSwzPGTr5n5cXGRrCDjqhXlQyTvYmv40...

CVE-2026-77939

creationtimestamp| type| source ---|---|--- 2026-09-04 07:11:18+00:00| published-proof-of-concept| https://seclists.org/fulldisclosure/2026/Sep/27...

CVE-2026-55985

creationtimestamp| type| source ---|---|--- 2026-09-04 04:11:50+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3muo3vuuw3f2g...

EUVD-2026-70875

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

EUVD-2026-70856

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

CVE-2026-85383

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_del.php. The flaw is triggered by manipulating the ID argument in an unknown function within that file, allowing remote execution with low privileges required . The CVSS v3.1 score is 6...

CVE-2026-72812

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wgwx-479j-23vq 2026-09-04 12:31:49+00:00| seen| https://gist.github.com/alon710/0ef37619359f1c245a80d0fc123877cc...

CVE-2026-72808

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:27+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-v7ph-r5r6-4jcj 2026-09-04 08:32:32+00:00| seen| https://gist.github.com/alon710/4e3a59a46f5538004facf996eb24fc2d...

CVE-2026-72807

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x67c-8pwr-m8g3 2026-09-04 07:31:42+00:00| seen| https://gist.github.com/alon710/428fa3e523bd4efb06d0f15759388e47...

CVE-2026-72806

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6mcf-g667-w3qv 2026-09-04 06:33:11+00:00| seen| https://gist.github.com/alon710/fbf800eaf7af09313d5329c1498b751c...

CVE-2026-72804

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vpjw-wf5h-cgpq 2026-09-04 04:32:14+00:00| seen| https://gist.github.com/alon710/8322b53a1d7bba7f1109796c874a5f4c...

CVE-2026-72800

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5fhr-f75j-8wr9 2026-09-04 00:53:19+00:00| seen| https://gist.github.com/alon710/e7f11f4247b66892a17548a4438b01cd...

PT-2026-85380

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv del.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

PT-2026-85392

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

CVE-2026-63670

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:20+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-jxwj-j7wr-gfrw...

CVE-2026-68585

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pm3w-vxp9-ccwc 2026-09-04 13:04:27+00:00| seen| https://gist.github.com/alon710/0a73f204f4113f41e2621c39634bb023...

CVE-2026-78071

creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:09+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...