PT-2026-23924

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub 401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

PT-2026-23933

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3/1.If Description A stack-based buffer overflow exists in the fromSetCfm function within the /goform/setcfm file of the Tenda F453. The issue is triggered by manipulating the funcname/funcpara1 argument. Remote...

PT-2026-23940

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0 Description A SQL injection issue exists in Simple Flight Ticket Booking System version 1.0. The issue is located in the SearchResultOneway.php file and involves manipulation of the from argument...

PT-2026-23943

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description A flaw exists in the Financial Report Page component of the software that allows for improper authorization. This can be exploited remotely by an attacker. The exploit is...

PT-2026-23957

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Task Management System version 1.0 Description A SQL injection issue exists in the GET Parameter Handler component of the software, specifically within the file '/daily-attendance-report.php'. The Date parameter is...

PT-2026-23953

Name of the Vulnerable Software and Affected Versions itsourcecode University Management System version 1.0 Description A SQL injection issue exists in itsourcecode University Management System 1.0. The issue is located in the /add result.php file. Manipulation of the subject argument can lead to...

PT-2026-23959

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System. The issue is due to manipulation of the sid argument within the /add sales print.php file. This allows...

PT-2026-23958

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Task Management System version 1.0 Description A flaw exists in SourceCodester Employee Task Management System that allows for SQL injection. The issue is located in the GET Parameter Handler component, specifically...

PT-2026-23951

A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

PT-2026-23974

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could b...

PT-2026-23983

A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used...

PT-2026-23954

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

CVE-2026-3748: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

PT-2026-23969

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Art Gallery Shop version 1.0 Description A SQL injection issue exists in the software due to manipulation of the Info argument within the file '/admin/adminHome.php'. Remote exploitation is possible. The exploit has been...

CVE-2026-3768: Stack-based Buffer Overflow

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit ha...

CVE-2026-3758: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2026-3738: Improper Authorization

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available...

CVE-2026-3710: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

CVE-2026-3700: Buffer Copy without Checking Size of Input

A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigDnsFilterGlobal. This manipulation causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could ...

CVE-2026-3728: Stack-based Buffer Overflow

A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly...