306511 matches found
CVE-2026-78861
The Mercusys AC12 V2 is vulnerable to a flaw where a local attacker can execute arbitrary code . This vulnerability is caused by the inclusion of a hardcoded 512-bit RSA Private Key within the device. While the CVSS 3.1 score is 7.7 (High) , indicating high impact on confidentiality and integrity...
PT-2026-104737
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer 0/admins/assessments/Subject/btn functions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...
CVE-2026-105168: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...
ROS-20261005-73-0048
The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...
CVE-2026-105233: Session Fixation
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...
ROS-20261005-73-0030
The vulnerability in rsync is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-105226: Improper Control of Generation of Code
A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...
Cargo Extension XSS
The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...
Cargo Extension XSS
The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...
Cargo Extension XSS
The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...
Cargo Extension XSS
The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...
XRDP Server Unauthorized Access
The vulnerability of the XRDP server is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Jenkins URL Redirection Phishing
The vulnerability of the Jenkins automation server relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...
Containerd Execution Environment Input Validation
The vulnerability of Containerd’s execution environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...
CVE-2026-105468: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...
Cisco ASA Insufficient Session Expiration (CVE-2021-1501)
A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...
ROS-20261005-73-0092
The vulnerability in dotnet10.0 is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...
CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...
CVE-2026-105170
A vulnerability exists in the kishor-23 food-waste-management-system within the Admin Signup component. An unknown function in the file admin/signup.php allows for missing authentication due to the manipulation of the sign argument. This flaw can be exploited remotely , and a public exploit is av...