CVE-2026-23959

CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was identified in versions prior to 4.1.9 in the CustomerTransformerController within the CoreShop admin panel. The affected endpoint improperly interpolates user-supplied input into a SQL query, leading...

PT-2022-21073 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the url parameter in the function FUN 00418540. This issue can be exploited, potentially leading to unintended consequences. Recommendations: Fo...

CodeIgniter 跨站请求伪造漏洞

CodeIgniter is an open source web framework written in PHP. A cross-site request forgery vulnerability exists in CodeIgniter because the product does not validate user identity. The vulnerability can be exploited to send unintended requests to the server. The following products and versions are...