CVE-2026-16928

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...

CVE-2026-16926

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

EUVD-2026-63394

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-76996

SourceCodester Simple Online Food Ordering System 1.0 has a SQL injection flaw in /fos/admin/view_order.php, exploitable via the ID argument with no authentication required. VulDB rates it CVSS 7.5 (HIGH) with proof-of-concept exploit code available. No patch version or remediation details are pr...

CVE-2026-76996 SourceCodester Simple Online Food Ordering System view_order.php sql injection

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/vieworder.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released ...

CVE-2026-76928

A flaw in Wireshark's X.509IF protocol dissector allows a remote attacker to cause a Denial of Service DoS. By providing a specially crafted capture file or network stream, an attacker can crash the application, making it unavailable. Mitigation Avoid opening untrusted capture files or monitoring...

CVE-2026-76995 SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

CVE-2026-76995

The description states the exploit is publicly available but no exploit code or proof-of-concept is included in the provided documents, so actual exploitation status cannot be confirmed here.

EUVD-2026-63391

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

EUVD-2026-63388

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...

CVE-2026-16928

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable remotely without authentication, causing denial of service (CVSS 7.5 HIGH, impact limited to availability). IBM's support page is linked as the primary reference. No exploitation or patch details are provided ...

CVE-2026-16926

CVE-2026-16926 is classified as CWE-73 (External Control of File Name or Path) in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1, allowing a remote unauthenticated attacker to overwrite arbitrary files. Fixes are available via AIX Service Packs (7.2 TL05 SP13, 7.3 TL02 SP05, TL03 SP03, TL04 SP02) and V...

CVE-2026-16926 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

EUVD-2026-63386

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

CVE-2026-16924 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation...

EUVD-2026-63377

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

CVE-2026-76993

GreyDGL PentestGPT up to 1.0.0 has an injection flaw in the Web-Page Crawling component, triggered by manipulating a Traceback argument. The exploit is remotely exploitable with high complexity, has a public PoC, and the vendor closed the GitHub issue as "not planned" with no patch indicated. Exp...

CVE-2026-76993 GreyDGL PentestGPT Web-Page Crawling injection

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

CVE-2026-76990

A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public...

CVE-2026-76988

A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forwardopen of the file cipconnectionmanager.cc of the component ForwardOpen Handler. Executing a manipulation of the argument productcode can lead to...