CVE-2026-27654

CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow via sizet Underflow Remote DoS / Potential RCE Description ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c computes the destination URI length by subtracting the location prefix length from the Destination header's URI pa...

poc-yaws-dav-xxe

XXE in Yaws web server CVE-2020-24379 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Then run: curl -i -s -k -X LOCK http://localhost:8000/ -H 'Timeout:...

K000164031: Apache HTTP vulnerability CVE-2026-58415

Security Advisory Description Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state...

CVE-2026-112091

A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes...

CVE-2026-112090

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112089

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-112088

A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqliquery of the file farmers/add.php. Executing a manipulation of the argument fno/fid/fname/flocallity/fac/fphone can...

CVE-2026-112091

The Dav-ee dairy-management-system contains a flaw in the AJAX Endpoint component, specifically within the delivery/checkfarmer.json.php file. An attacker can manipulate the fname argument to trigger an information disclosure vulnerability. Remote exploitation is possible, and an exploit has been...

CVE-2026-112091 Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure

A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes...

CVE-2026-112091 Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure

A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes...

EUVD-2026-104109

A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes...

CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112090

A SQL injection vulnerability exists in the Dav-ee dairy-management-system (commit 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d). The flaw originates from the mysqli_real_escape_string function within the payment/pay.php file, where improper handling of the f_...

EUVD-2026-104108

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112089 Dav-ee dairy-management-system delete.php mysqli_query sql injection

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-112089 Dav-ee dairy-management-system delete.php mysqli_query sql injection

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-112089

The Dav-ee dairy-management-system is vulnerable to a SQL injection flaw within the employees/delete.php file. The root cause is the improper handling of the e_payroll_no argument in the mysqli_query function. This vulnerability can be exploited remotely to potentially compromise the database. Al...

EUVD-2026-104094

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...