EUVD-2026-85778

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-96777

A SQL injection vulnerability exists in Forma LMS versions up to 4.1.43 . The flaw is located in the Multi-User-Selector AJAX Endpoint , specifically within the UserselectorAdmController::getDataTask function of the file /appCore/ajax.adm_server.php?r=adm/userselector/getData. An attacker can ini...

CVE-2026-96777 Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-96777 Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-96774

A vulnerability exists in the SPON Communications IP Network Audio Device XC-9603 (version 1.2.3_20181106 Build 107). The flaw impacts the loadCfg function within the /ini/sys_cfg.txt file of the Configuration File Download component. This issue allows for information disclosure via a remote atta...

EUVD-2026-85761

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774 SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774 SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

EUVD-2026-85760

A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...

CVE-2026-96773 Intelliants Subrion CMS Login Page login.php authorize redirect

A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...

CVE-2026-96773 Intelliants Subrion CMS Login Page login.php authorize redirect

A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...

CVE-2026-96773

A vulnerability exists in Intelliants Subrion CMS versions up to 4.2.1 . The flaw resides in the iaUsers::authorize function within the front/login.php file of the Login Page component. By manipulating the $_SERVER['HTTP_REFERER'] argument, a remote attacker can trigger an open redirect . Public ...

EUVD-2026-85729

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

EUVD-2026-85750

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch...

EUVD-2026-85726

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

EUVD-2026-85749

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/addproject.php. Such manipulation of the argument connsettings leads to sql injection. The attack may be launched remotely. Th...

EUVD-2026-85737

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

EUVD-2026-85675

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...

EUVD-2026-85728

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

EUVD-2026-85710

A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirmloggedin/confirmuser of the file functions.php of the component Admin Handler. Such manipulation of the argument adminid leads to missing authorization. The attack may be performed from remote. The...