CVE-2026-82485

CVE-2026-82485 is a SQL injection in itsourcecode Sales and Inventory System 1.0 , located in the file /pages/pro_edit.php via manipulation of the ID argument. The vulnerability is remotely exploitable and requires low privileges (single authentication per CVSS v2), with no user interaction neede...

CVE-2026-82484 itsourcecode Sales and Inventory System emp_searchfrm.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

EUVD-2026-68171

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-82484

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the ID parameter of the file /pages/emp_searchfrm.php. The flaw allows a remote, low-privileged attacker to manipulate the argument to inject SQL, with low impact on confidentiality, integrity, a...

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483 coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483 coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483

CVE-2026-82483 affects Coppermine Photo Gallery versions up to 1.6.28 . The vulnerability is a cross-site scripting (XSS) flaw in the Hidden Album Update Endpoint , specifically in the file db_input.php. An attacker with low privileges can remotely manipulate input to inject malicious scripts. A ...

EUVD-2026-68170

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

cve

Recently updated Proof-of-Concepts 2026 Latest 20 of 501 Repositories Stars| Updated| Name| Description ---|---|---|--- 4053⭐| 4 hours ago| copy-fail-CVE-2026-31431| Copy Fail CVE-2026-31431: 9-year-old Linux kernel LPE found by Theori's Xint Code 571⭐| 2 days ago| cve202631431| Exploit POC for...

CVE-2026-82480

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82482

Coppermine Photo Gallery (coppermine-gallery/cpg1.6.x) versions up to 1.6.28 contain a stored cross-site scripting (XSS) vulnerability in the edit_profile endpoint of profile.php. The root cause is improper input handling of the Biography argument, allowing a remote authenticated user to inject s...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

ForgeRock OpenAM <7.0 - Remote Code Execution

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

PaperCut - Unauthenticated Remote Code Execution

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

CVE-2026-82480

A remote integer underflow vulnerability exists in the cFE Software Bus component of NASA cFS (up to version 7.0.1), specifically in the function CFE_SB_GetUserDataLength within the file cfe_sb_util.c. Manipulating the TotalMsgSize/HdrSize argument triggers the underflow. The attack requires low ...

EUVD-2026-68151

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82478

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...

EUVD-2026-68148

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...