288 matches found
JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS
A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jpyearbuilt leads to cross...
CVE-2026-19969
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...
PT-2026-76759
Name of the Vulnerable Software and Affected Versions TOTOLINK EX1200L version 9.3.5u.6146 B20201023 Description A remote attack can be initiated against the Password Configuration Handler component. The issue exists in the setPasswordCfg function within the '/cgi-bin/cstecgi.cgi' endpoint, where...
Exploit for CVE-2026-57858
CVE-2026...
CLEANSTART-2026-OL83036 Security fixes in prometheus-fips 2.40.4-r1
Package prometheus-fips version 2.40.4-r1 fixes 1 vulnerabilities: CVE-2022-46146...
CVE-2026-61006
...
CVE-2026-60931
The CVE-2026-60931 vulnerability affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) on versions 12.2.3–12.2.15. The issue allows a low-privilege, network-authenticated attacker to compromise Oracle Public Sector Financials via HTTP, with potential takeover and...
CVE-2026-60842
...
CVE-2026-60652
...
CVE-2026-60634
CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...
CVE-2026-60613
...
CVE-2026-60577
...
CVE-2026-60578
...
CVE-2026-60306
...
CVE-2026-60305
...
CVE-2026-60230
CVE-2026-60230 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the service....
PT-2026-57617
Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A remote buffer overflow occurs when manipulating the Name argument within the formCertListInfo function of the '/goform/CertListInfo' endpoint. A buffer overflow is a condition where a program writes mor...
CVE-2026-13542 itsourcecode Hospital Management System doctorprofile.php sql injection
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
EUVD-2026-40015
A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the publ...