CVE-2026-1594

A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/addexpenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-1594

CVE-2026-1594 affects itsourcecode Society Management System 1.0. The vulnerability resides in /admin/add_expenses.php where manipulating the argument detail leads to a SQL injection. Remote exploitation is possible and the exploit has been publicly disclosed. The connected sources confirm the is...

EUVD-2026-4988

A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

CVE-2026-1588

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It...

EUVD-2026-4853

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...

CVE-2026-1552

CVE-2026-1552 affects SEMCMS 5.0, with vulnerability in unknown code of the file /SEMCMS_Info.php. The issue arises from manipulating the argument searchml, leading to a SQL injection that can be leveraged remotely. Public exploit information has been disclosed, and the vendor was contacted but d...

CVE-2026-1552 SEMCMS SEMCMS_Info.php sql injection

A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMSInfo.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be...

ROS-20260129-73-0072

Vulnerability in firefox related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

ROS-20260129-73-0069

Vulnerability in firefox related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

ROS-20260129-73-0023

Vulnerability in ImageMagick7 related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

PT-2026-5370

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A stack-based buffer overflow exists in the fromAdvSetMacMtuWan function within the /goform/AdvSetMacMtuWan file of Tenda AC21. Remote exploitation is possible. The exploit is publicly available...

ROS-20260129-73-0009

Vulnerability in cockpit related to errors in certificate authentication procedure. The vulnerability can be exploited remotely...

PT-2026-5265

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It...

PT-2026-5241

Name of the Vulnerable Software and Affected Versions SEMCMS version 5.0 Description A security issue exists in SEMCMS 5.0 related to SQL injection. The issue is located in the /SEMCMS Info.php file, where manipulation of the searchml argument can lead to a successful attack. This attack can be...

PT-2026-5306

A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit student query.php. The manipulation of the argument student id results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

ROS-20260129-73-0034

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2026-1550

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote...

CVE-2026-1550

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote...

CVE-2026-1550

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote...

EUVD-2026-4978

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote...