CVE-2026-76762 code-projects Assessment Management welcome.php sql injection

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-76762 code-projects Assessment Management welcome.php sql injection

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-8619 Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

CVE-2026-76761

A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...

CVE-2026-76760

A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and coul...

CVE-2026-76591

The TRENDnet TEW-755AP's log_email_server function in /cgi-bin/email.cgi (ssi component) is vulnerable to remote command injection. CVSS 3.1 scores it HIGH (7.4); a public PoC exploit exists at https://github.com/meishigana/CVE/tree/main/team15_20260702/14_755ap-ssi-cmdi. No patch version or vend...

CVE-2026-76590

A stack-based buffer overflow exists in the ssi component of TRENDnet TEW-755AP (firmware up to 20260702). Manipulating the cameo.wan.wan_pppoe_password_00 argument in /cgi-bin/wan.cgi triggers overflow, exploitable remotely with low privileges; a public PoC is available at https://github.com/mei...

EUVD-2026-62973

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

EUVD-2026-62893

In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a dashboard. When another authenticated user exports the dashboard as a Portable Document Format PDF file, Splunk...

CVE-2026-76589

A stack-based buffer overflow in the FUN_401000 function of /sbin/mycli on TRENDnet TEW-755AP firmware up to 20260702 allows remote attackers to crash or take over the device by sending a crafted ssid argument. A proof-of-concept exploit exists at https://github.com/meishigana/CVE/blob/main/team1...

EUVD-2026-63101

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2026-76584

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

EUVD-2026-63094

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

EUVD-2026-63083

A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-76583

TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.

CVE-2026-76582

TRENDnet TEW-821DAP firmware 2.2.01b05 passes the unsanitized ipaddr argument from /cgi-bin/ping.cgi to popen/system in the ssi component, enabling remote command injection; a proof-of-concept exploit is publicly available on GitHub. No patch or workaround is mentioned in the provided documents.

EUVD-2026-62852

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...

EUVD-2026-62846

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...

CVE-2025-14600

creationtimestamp| type| source ---|---|--- 2026-08-19 20:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjxsgklv2b 2026-08-19 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthu2ikmaa2f...

EUVD-2026-62836

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...