CVE-2026-86163

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/pro_del.php , triggered by manipulation of the ID argument. The attack is exploitable remotely and requires low privileges with no user interaction. The base CVSS 3.1 score is 6.3 (MEDIUM) with l...

CVE-2026-86161

SourceCodester Online Voting System 1.0 is vulnerable to SQL injection in the file /ajax.php?action=delete_category via manipulation of the ID argument. The vulnerability is remotely exploitable without authentication or user interaction. The exploit has been made public at a proof-of-concept mat...

EUVD-2026-72045

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-86161 SourceCodester Online Voting System ajax.php delete_category sql injection

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-86153

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

EUVD-2026-72038

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

CVE-2026-86153 Tenda CP3 Redirect.cpp SetRedirectEnable privileges management

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

CVE-2026-86153

Tenda CP3 (firmware 27.5.57.101 ) is affected by an improper privilege management vulnerability in the function CRedirServer::SetRedirectEnable within the file Functions/Redirect.cpp . The flaw allows remote exploitation over the network with low complexity , though it requires high privileges (p...

PT-2026-86478

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

PT-2026-86465

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure网络权限提升漏洞利用 CVE‑2025‑54914 2025年9月4日 作者：Mark Mallia 1. 执行摘要 2025年9月4日，微软的Azure网络服务收到一份关键安全公告，记录了一个权限提升漏洞，编号为CVE‑2025‑54914 。该漏洞在通用漏洞评分系统（CVSS）中获得10.0分，表明这是一个可利用且潜在影响巨大的问题，可在无需用户交互的情况下授予攻击者对Azure网络资源的完全控制。...

ffmpeg-8-8.1.2-3.1 on GA media (moderate)

ffmpeg-8-8.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11682-1 Rating: moderate Cross-References: CVE-2026-58049 CVE-2026-64833 CVE-2026-64834 CVE-2026-65703 CVE-2026-65704 CVE-2026-65705 CVE-2026-65706 CVE-2026-66036 CVE-2026-66037 CVE-2026-70628 CVE-2026-70629 CVE-2026-70630...

CVE-2026-85704 ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...

CVE-2026-85638

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

CVE-2026-85643 code-projects Online Shopping System adduser.php mysqli_query sql injection

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-85638 jofpin trape user.py authorization

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

EUVD-2026-71691

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

CVE-2026-85638

jofpin trape 2.0 contains an authorization bypass in the file core/user.py , caused by manipulation of the argument vId/id . The vulnerability allows remote, unauthenticated exploitation over the network with low complexity. CVSS 3.1 scores it 7.3 (HIGH) , with low impacts to confidentiality, int...

CVE-2026-85516

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...