EUVD-2026-68203

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543

vastsa FileCodeBox (up to version 2.3) contains a race condition in the update_file_usage function located in apps/base/views.py, within the Pickup Limit Handler component. The vulnerability is exploitable remotely with no privileges required and no user interaction , yielding low impact on confi...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress Pre-Auth Reflected XSS → Remote Code Execution Chain DOM Clobbering + Application Password Theft + REST API Plugin Activation = Full RCE ⚡ Overview CVE-2026-64638 is a critical pre-authentication Reflected XSS in WordPress wp-login.php. The vulnerability exist...

EUVD-2026-68200

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542 Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542

A buffer overflow in the Boa Web Server component of Tenda HG10 (version 300001138) affects the function formIPv6Routing in the file /boaform/admin/formIPv6Routing. The overflow is triggered by manipulating the destNet argument and is exploitable remotely with no authentication required , yieldin...

CVE-2026-82540

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82541

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-68197

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-82541 itsourcecode Sales and Inventory System sup_edit.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-82541

A SQL injection vulnerability was identified in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/sup_edit.php through manipulation of the ID argument. The flaw allows a remote attacker with low privileges to inject SQL commands, potentially leading to partial compromi...

CVE-2024-53900

es-define-property Object.defineProperty, but not IE 8's broken one...

cve-2026-82222-poc

CVE-2026-82222 Unauthenticated PHP object injection to RCE in GiveWP = 4.16.7.1. Patched in 4.16.7.2...

CVE-2026-82539

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

CVE-2026-82488

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

EUVD-2026-68184

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82540 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82540

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_searchfrm.php, triggered by manipulation of the ID parameter. The vulnerable function is not further specified in the provided documents. Remote exploitation is possible with low privi...