PT-2026-86685

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

PT-2026-86832

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

PT-2026-86965

A flaw has been found in D-Link DIR-895L A1 102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published a...

PT-2026-86621

A flaw has been found in sfturing ssm pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Endpoint. This manipulation of the argument hospitalName/officesName/doctorName...

PT-2026-86633

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...

CVE-2026-86235 itsourcecode Sales and Inventory System pos_transac.php add sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/postransac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and may...

CVE-2026-86235 itsourcecode Sales and Inventory System pos_transac.php add sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/postransac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and may...

CVE-2026-86221

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection in the mysqli_query function within /admin/modal_add_course1.php , triggered by manipulation of the course argument. The attack can be initiated remotely without authentication. The exploit has been published with...

CVE-2021-38817

creationtimestamp| type| source ---|---|--- 2026-09-06 15:00:03+00:00| published-proof-of-concept| Telegram/43D4qhGTDojIuKxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag 2026-09-07 01:00:11+00:00| published-proof-of-concept| Telegram/43D4qhGTDojIuKxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag...

CVE-2026-86211

CVE-2026-86211 affects rabindralamsal inventory-management-system version 1.0.0 , specifically the Login component in index.php . A SQL injection vulnerability exists through manipulation of the username/password arguments, allowing a remote attacker to execute crafted queries. The CVSS 3.1 base ...

CVE-2026-86179

A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/expak.sql of the component Database Backup Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The...

EUVD-2026-72076

A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/expak.sql of the component Database Backup Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The...

CVE-2026-86159

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

EUVD-2026-72039

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86159 SourceCodester Online Voting System ajax.php save_user sql injection

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

PT-2026-86510

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

PT-2026-86581

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/pos transac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and ma...

CVE-2013-4322

creationtimestamp| type| source ---|---|--- 2026-09-05 18:00:06+00:00| published-proof-of-concept| Telegram/4Lg274WTrxm5Nu-Xnyt8vH3jjP3UWrkCn5WAtqWyN2Ukjsc 2026-09-06 00:00:39+00:00| published-proof-of-concept| Telegram/4Lg274WTrxm5Nu-Xnyt8vH3jjP3UWrkCn5WAtqWyN2Ukjsc...

CVE-2020-0394

creationtimestamp| type| source ---|---|--- 2026-09-05 18:00:06+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY 2026-09-06 00:00:39+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY...

CVE-2019-7216

creationtimestamp| type| source ---|---|--- 2026-09-05 13:00:05+00:00| published-proof-of-concept| Telegram/EWyzaOudgwaNXoA105LhIEanQUj5hipt6FRZ98nQPfTHQ 2026-09-06 00:00:47+00:00| published-proof-of-concept| Telegram/EWyzaOudgwaNXoA105LhIEanQUj5hipt6FRZ98nQPfTHQ 2026-09-24 11:00:15+00:00| seen|...