PrecIR

PrecIR Collection of software and hardware tools, their source code and design files for communicating with infrared based Electronic Shelf Labels. See http://furrtek.free.fr/index.php?a=esl for reverse-engineering of the system, the protocol and electronics. Thanks to @david4599 for infos about...

ESAFENET CDG - Arbitrary File Download

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...

EUVD-2026-89472

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-68068

The Toptech TMS7 and TopHAT systems are vulnerable to a time-based blind SQL injection vulnerability. The flaw exists within the "screenID" parameter of the electronic transaction queue viewer feature, located in the manual transactions section. Exploitation could allow an attacker to execute arb...

CVE-2026-12718 SQLi in Karel Electronics' KarelIPS

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injection. This issue affects KarelIPS: through 22092026. NOTE: The vendor was contacted and it was learned that the product is no...

Security Bulletin: IBM i is Affected By Holding Resources after Effective Lifetime Vulnerability in Electronic Service Agent [CVE-2026-64607]

Summary Electronic Service Agent for IBM i uses HttpClient for HTTP message handling. HttpClient is vulnerable to not releasing underlying resources when encountering an invalid or unsupported 'Content-Encoding' header value CVE-2026-64607 as described in the vulnerability details section...

CVE-2026-52723: Improper Certificate Validation

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...

CVE-2026-59109: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice UBL/PEPPOL or an e-commerce export, Zalktis concatenates partner-controlled values directly into SQL statement text using string...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerability in Electronic Service Agent [CVE-2026-54399]

Summary Electronic Service Agent for IBM i uses HttpCore for HTTP message handling. HttpCore is vulnerable to a denial of service by uncontrolled resource consumption when processing messages with an excessive header length CVE-2026-54399 as described in the vulnerability details section...

CVE-2026-56428

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

CVE-2026-56428

CVE-2026-56428 affects the SSH service on BSH ELP (Electronic Platform) modules . The root cause is a default, insecure, non-revocable SSH public key stored in the firmware’s authorized_keys, allowing an attacker with the corresponding private key to bypass authentication and achieve root-level a...

PT-2026-65738

The Facturación Electrónica Costa Rica plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the global scope, included by fvcr admin page html function. This makes it possible for...

CVE-2026-60756

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: All Miscellaneous EDI Issues. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle EDI...

PT-2026-62736

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway...

CVE-2026-15672

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2026-15672

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2026-15672

The CVE-2026-15672 affects itsourcecode Electronic Judging System 1.0. A vulnerability exists in /intrams/admin/add_judges.php where manipulating the fname argument leads to SQL injection. Attacker could exploit remotely; the exploit has been publicly disclosed. CVSS metrics vary by vector, but i...

CVE-2026-15672 itsourcecode Electronic Judging System add_judges.php sql injection

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

EUVD-2026-43622

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2026-15672 itsourcecode Electronic Judging System add_judges.php sql injection

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...