CVE-2026-19919

CVE-2026-19919 affects code-projects Online Shopping System 1.0, specifically the Login component’s login.php where manipulation of the email parameter causes SQL injection. At risk is remote exploitation with public exploits reported; CVSS scores (3.0/3.1/4.0/2.0) indicate high/medium severity v...

CVE-2026-19919

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...

CVE-2026-19918 SpaceX Starlink Router Gen 3 gRPC Management get_status access control

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...

CVE-2026-19917

Affected software: code-projects Online Food Order System 1.0. Vulnerable component: file delete_food_items1.php (unknown function) where manipulating the checkbox argument leads to a SQL injection. Root cause / vector: remote exploitation via crafted checkbox argument, enabling SQL injection due...

CVE-2026-19917

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file deletefooditems1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...

MINI-V52R-8V59-XRHM

Bulletin has no description...

MINI-CQJJ-MR3V-RJ7X

Bulletin has no description...

MINI-CG6X-MQ99-J3C5

Bulletin has no description...

MINI-7J6P-RH6W-57HX

Bulletin has no description...

MINI-GQR7-598P-Q62X

Bulletin has no description...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19905

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19906

CVE-2026-19906 affects pkp-lib versions 3.3.0/3.4.0/3.5.0, specifically the API Key Generation flow in the file APIProfileForm.php by function setData. The issue arises from manipulating the apiKey argument, which can lead to insufficient entropy. Exploitation is described as remote with high com...

CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

EUVD-2026-59789

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

EUVD-2026-59788

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

CVE-2026-19905

CVE-2026-19905 affects Jinher OA 1.0. The vulnerable component is the function handling /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx, where manipulation of the httpOID parameter enables SQL injection. Exploitation is network-based and can be conducted remotely with no user interaction...

CVE-2026-19905 Jinher OA attendance_out_approve.aspx sql injection

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...