CVE-2026-109687: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-108956: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...

CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...

CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

PT-2026-111796

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 7.6.2 through 7.6.4 FortiAnalyzer Cloud versions 7.4.1 through 7.4.7 FortiAnalyzer Cloud versions 7.2....

CVE-2026-109523: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

PT-2026-111393

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with specific privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize input...

PT-2026-113439

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

PT-2026-113448

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs when a...

PT-2026-113445

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

PT-2026-113452

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, allowing an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic...

PT-2026-113442

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an application continues to use a...

PT-2026-113447

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

PT-2026-113450

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

PT-2026-113453

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-108965: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

PT-2026-113432

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

PT-2026-113436

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code locally or remotely, potentially affecting the entire system. A heap-based buffer overflow occurs when ...

CVE-2026-106035: Insertion of Sensitive Information into Log File

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...