PT-2026-61938

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to th...

PT-2026-63254

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting is possible due to improper handling of the day argument within the /class.php endpoint. Cross site scripting is a technique where malicious...

EulerOS Virtualization 2.10.1 : cups (EulerOS-SA-2026-2815)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in ...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2737)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

PT-2026-61961

A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page of the component MyBatis-Plus Tenant Plugin. Such manipulation of the argument X-Tenant-Id leads to authorization...

CVE-2026-16327

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-15904

A use after free vulnerability exists in the Ozone component of Google Chrome on Linux (versions prior to 150.0.7871.128 ). The flaw allows a remote attacker to exploit heap corruption by convincing a user to perform specific UI gestures while visiting a crafted HTML page. Exploitation of this vu...

CVE-2026-16324 Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

CVE-2026-16324

CVE-2026-16324 affects Metasoft MetaCRM up to version 6.4.0 Beta06. The vulnerable component is an unknown function in the file /business/qnaire/upload.jsp, where manipulation of the argument File enables unrestricted file upload. Attacks may be launched remotely, and the exploit is publicly avai...

CVE-2026-16324 Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

CVE-2026-16324

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

EUVD-2026-41925

vLLM denial of service via prompt embeds on M-RoPE models...

CVE-2026-16252

A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...

CVE-2026-16252 Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection

A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...

EUVD-2026-45949

A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...

CVE-2026-16248

A vulnerability was found in Tenda AC10 16.03.10.09multiTDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed fro...

CVE-2026-16244

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /prescriptionorderreport.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The...

CVE-2026-16248 Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow

A vulnerability was found in Tenda AC10 16.03.10.09multiTDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed fro...

CVE-2026-16248

The CVE concerns Tenda AC10 (16.03.10.09_multi_TDE01) where the fromAdvSetLanip function in httpd/netctrl (file /goform/AdvSetLanip) is vulnerable. Specifically, manipulating GetValue/SetValue can trigger a stack-based buffer overflow. The issue is exploitable remotely, and public exploits have b...

CVE-2026-16244

The CVE-2026-16244 entry concerns itsourcecode Hospital Management System 1.0. The vulnerability affects the file /prescriptionorderreport.php where manipulation of the delid argument enables SQL injection. The issue is exploitable remotely, and the exploit has been publicly disclosed. Connected ...