22585 matches found
EUVD-2026-64733
A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...
CVE-2026-78199 SourceCodester Simple Online Food Ordering System view_prod.php sql injection
A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...
CVE-2026-78199
A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/view_prod.php . Manipulation of the ID argument allows a remote attacker to execute arbitrary SQL queries without authentication. The impact is rated CVSS 3.1 7.3 (HIGH) w...
EUVD-2026-64732
A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=addtocart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The...
CVE-2026-78182
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
CVE-2026-78182 Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
EUVD-2026-64709
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
CVE-2026-78182
A SQL injection vulnerability in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System (versions up to 300R004C00B300 ) is triggered via the order/sort argument of the PlanController.getImmediatePlans function at /xbreport/api/v1/plamange/plansImmediate. The attack is remote, ...
CVE-2026-78167
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...
EUVD-2026-64691
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...
CVE-2026-78167
EFM ipTIME T16000M (firmware 14.20.2 ) contains an improper authentication vulnerability in the httpcon_check_session_url function of the Session Validation Handler . The flaw allows remote exploitation over the network with no privileges required and low complexity , rated CVSS 4.0: 10.0 (CRITIC...
EUVD-2026-64687
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...
CVE-2026-78167 EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...
EUVD-2026-64673
A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeeminvitationcode of the file backend/app/api/routes/v1/userinvitationcode.py of the component Public Invitation-Code Redemption Endpoint. The manipulation of the argument code leads to missing...
EUVD-2026-64668
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...
CVE-2026-78154
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SD...
Vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, involve memory usage after it is freed, allowing an attacker to trigger a service failure.
The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...
The vulnerability in the Firefox web browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.
The vulnerability in the Firefox web browser relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
PT-2026-79805
Name of the Vulnerable Software and Affected Versions EFM ipTIME T24000M versions prior to 14.20.0 Description Improper authentication exists in the Session Validation Handler component. A remote attacker can manipulate the httpcon check session url function to bypass authentication mechanisms...