CVE-2026-8181

CVE-2026-8181 Diese Schwachstelle ermöglicht es nicht authentifizierten Angreifern, die einen gültigen Administrator-Benutzernamen kennen, sich während REST-API-Anfragen als dieser Admin auszugeben, indem sie ein beliebiges falsches Passwort in einem Basic-Authentication-Header verwenden. Angreif...

CVE-2026-105705

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

EUVD-2026-92948

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105705

The SourceCodester Drug Recommendation System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw via an unknown function in the Admin/add_drug.php file. This vulnerability allows for remote manipulation resulting in XSS. The documents indicate that an exploit has been released to the public a...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2015-9357-POC

CVE-2015-9357 Stored XSS im WordPress-Smiley-/Emoticon-Parser, Admin-Benutzererstellung über gefälschte Nonce-Anfrage. Bricht aus dem -Attributkontext über den Emoticon-Regex aus, platziert JavaScript in einem onerror-Handler. Kein Script-Tag nötig, übersteht die wpkses-Filterung im betroffenen...

CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105703 PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

EUVD-2026-92938

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2024-22275

CVE-2024-22275: Teilweises Lesen von Dateien im VMware vCenter Server Der vCenter Server enthält eine Schwachstelle, die ein teilweises Lesen von Dateien ermöglicht. Ein Angreifer mit administrativen Berechtigungen auf der Shell des vCenter-Appliances kann dieses Problem ausnutzen, um beliebige...

CVE-2019-16097

CVE-2019-16097 Prinzip der Harbor-Schwachstelle zur unbefugten Erstellung von Administratoren, Docker und PoC basierend auf dem Pocsuite-Framework...

EUVD-2026-92816

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-Der-TCP-IP-Fehler-der-die-Tore-öffnet Eine kritische RCE-Schwachstelle im Windows‑TCP/IP‑Stack CVE‑2025‑26686 lässt sensiblen Speicher ungeschützt, sodass Angreifer Systeme aus der Ferne übernehmen können. Sie ist über das Netzwerk ausnutzbar und riskiert eine vollständige...

PT-2026-106563

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hh flows limit at change time hhf change stores TCA HHF HH FLOWS LIMIT with no upper bound. A huge hh flows limit lets each new heavy-hitter flow pass the hh flows current cnt check in alloc new hh and forces ...

CVE-2026-95153

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

CVE-2026-95153

A vulnerability exists in Bludit CMS 3.22.0 that allows a remote attacker to obtain sensitive information . The issue is accessible via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints. No specific root cause, exploit details, or remediation steps are provided in the available docum...

PT-2026-106513

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiex cfg80211 authenticate derives the authentication frame length from req-ie len and req-auth data len, both of type size t, but stores it in a u16. NL80211 ATTR...

PT-2026-106786

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view product.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

PT-2026-106317

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...