EUVD-2026-4990

A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/addexpenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-1594

CVE-2026-1594 affects itsourcecode Society Management System 1.0. The vulnerability resides in /admin/add_expenses.php where manipulating the argument detail leads to a SQL injection. Remote exploitation is possible and the exploit has been publicly disclosed. The connected sources confirm the is...

EUVD-2026-4988

A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

CVE-2026-1588

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It...

EUVD-2026-4853

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...

CVE-2026-1552

CVE-2026-1552 affects SEMCMS 5.0, with vulnerability in unknown code of the file /SEMCMS_Info.php. The issue arises from manipulating the argument searchml, leading to a SQL injection that can be leveraged remotely. Public exploit information has been disclosed, and the vendor was contacted but d...

CVE-2026-1552 SEMCMS SEMCMS_Info.php sql injection

A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMSInfo.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be...

PT-2026-5306

A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit student query.php. The manipulation of the argument student id results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

ROS-20260129-73-0072

Vulnerability in firefox related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

ROS-20260129-73-0069

Vulnerability in firefox related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

PT-2026-5370

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A stack-based buffer overflow exists in the fromAdvSetMacMtuWan function within the /goform/AdvSetMacMtuWan file of Tenda AC21. Remote exploitation is possible. The exploit is publicly available...

ROS-20260129-73-0034

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260129-73-0023

Vulnerability in ImageMagick7 related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

PT-2026-5241

Name of the Vulnerable Software and Affected Versions SEMCMS version 5.0 Description A security issue exists in SEMCMS 5.0 related to SQL injection. The issue is located in the /SEMCMS Info.php file, where manipulation of the searchml argument can lead to a successful attack. This attack can be...

The vulnerability of the RuDesktop remote access and management software lies in its access control errors, which allow attackers to escalate their privileges.

The vulnerability of the remote access and management software for RuDesktop is related to access control errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2026-5265

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It...

ROS-20260129-73-0009

Vulnerability in cockpit related to errors in certificate authentication procedure. The vulnerability can be exploited remotely...

CVE-2026-1637: Stack-based Buffer Overflow

A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might...

CVE-2026-1550

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote...

CVE-2026-1550

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote...