CVE-2026-78061 vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

CVE-2026-78056

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78057

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

EUVD-2026-64624

A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /phpaction/printOrder.php. Such manipulation of the argument clientName/clientContact leads to cross site scripting. The attack may be performed from remote. The explo...

CVE-2026-78059

SourceCodester Stock Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the file /php_action/printOrder.php. The root cause is improper handling of the clientName and clientContact arguments, which can be manipulated to inject malicious scripts. The attack is remote and ...

CVE-2026-78059 SourceCodester Stock Management System printOrder.php cross site scripting

A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /phpaction/printOrder.php. Such manipulation of the argument clientName/clientContact leads to cross site scripting. The attack may be performed from remote. The explo...

CVE-2026-78057 sambitraj Student-Management-System Management Mutation sql injection

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

EUVD-2026-64623

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-78057

sambitraj Student-Management-System (up to commit 56ba287) is vulnerable to SQL injection in the Management Mutation Handler component. Manipulating the arguments roll_no, name, father_name, class, mobile, email, password, or remark allows a remote, authenticated attacker to inject SQL queries. T...

EUVD-2026-64621

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78056

sambitraj Student-Management-System (up to commit 56ba287) contains a SQL injection vulnerability in the Dashboard component. Manipulation of the roll_no or teacher_name argument allows a remote, authenticated attacker to inject SQL queries. The exploit is public and classified as proof-of-concep...

CVE-2026-78054

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argument course can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availabl...

EUVD-2026-64608

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...

EUVD-2026-64604

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

EUVD-2026-64599

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPCNodeMgtHelperInternalAddVariableNodeAttributes of the file src/ClientServer/addressspace/internal/sopcnodemgthelperinternal.c of the component AddNodes Service. The manipulation of the argument...

EUVD-2026-64615

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argument course can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availabl...

CVE-2026-78054

SourceCodester Class and Exam Timetabling System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the file /BSIS1.php . The flaw is triggered by manipulating the course parameter, allowing a remote, unauthenticated attacker to inject malicious scripts into the application. User interact...

CVE-2026-78051

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...

CVE-2026-78050

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

PT-2026-79781

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...