Linux Distros Unpatched Vulnerability : CVE-2026-17735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process...

PT-2026-66401

Name of the Vulnerable Software and Affected Versions PCP pmproxy affected versions not specified Description An unauthenticated remote attacker can bypass access controls by sending crafted requests to the '/store' endpoint. This allows the attacker to overwrite any PMDA metric, which can lead t...

EUVD-2025-210552

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

PT-2026-66434

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description A privilege escalation issue exists in the init-script for user-applications. This flaw allows a low-privileged local user to execute arbitrary commands with root...

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

CVE-2025-69931

CVE-2025-69931 affects CodeAstro Membership Management System 1.0. A SQL Injection vulnerability is exposed in the endpoint /delete_membership.php?id=1, enabling an attacker to potentially manipulate the database. The CVSS v3.1 base score is 9.8 (CRITICAL), with impact on confidentiality, integri...

PT-2026-66586

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'edit type.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...

CVE-2025-69937

CodeAstro Membership Management System 1.0 contains an SQL Injection vulnerability in the edit_type.php endpoint via the id parameter. CVSS 3.1 base score 9.8 (CRITICAL) with Confidentiality, Integrity, and Availability impacts all High. Exploitation is network-based, requires no authentication, ...

PT-2026-66589

Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs at the 'customeredit.php' endpoint...

EUVD-2025-210558

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...

EUVD-2025-210562

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

Linux Distros Unpatched Vulnerability : CVE-2026-17875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

PT-2026-66424

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description A privilege escalation issue in udhcpc enables a local user charx-web to execute arbitrary commands with root privileges, which can lead to a complete system compromise...

PT-2026-66243

Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-210565

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

EUVD-2025-210559

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

PT-2026-66616

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

Linux Distros Unpatched Vulnerability : CVE-2026-17774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to...

CVE-2025-69935

The CVE-2025-69935 entry concerns CodeAstro Membership Management System 1.0, with a SQL Injection vulnerability in report.php and revenue_report.php exploitable via the fromDate parameter. The provided metrics show CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges or u...