CVE-2026-87642

A flaw was found in WebGL within Chromium. An uninitialized resource vulnerability allows a remote attacker to leak sensitive cross-origin data. This can be exploited by enticing a user to visit a specially crafted HTML page...

Exploit for CVE-2026-19089

CVE-2026-19089 — WooCommerce Tyche Product Input Fields S...

PT-2026-89183

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument category name/brand...

PT-2026-89169

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f Description A remote SQL injection is possible through the manipulation of the update category, cid, update brand, or update product arguments within...

PT-2026-88929

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

EUVD-2026-74042

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86672

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

CVE-2026-86674

A session fixation vulnerability was identified in the ningzichun Student Management System , affecting the session_start function in login.php. The flaw allows a remote attacker to manipulate session identifiers, enabling unauthorized session takeover. The attack requires user interaction and no...

CVE-2026-86674 ningzichun Student Management System login.php session_start session fixiation

A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function sessionstart of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...

CVE-2026-49927

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28593

A vulnerability exists in the getItemList method of SettingsFragment.java , where misleading or insufficient UI allows for a possible user interaction bypass . This flaw can lead to a local escalation of privilege without requiring additional execution privileges or user interaction for exploitat...

CVE-2026-86673

ningzichun Student Management System (up to commit 98760f57) is affected by hard-coded database credentials in the mysqli_connect function within config/database.php. The vulnerability allows a remote, unauthenticated attacker to gain access to the system's database connection with low impact on ...

CVE-2026-86672 ningzichun Student Management System Backup example.7z information disclosure

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

CVE-2026-86669 aircheng-org iWebShop-5 systemseller.php login improper authentication

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-86669

A remote improper authentication vulnerability in aircheng-org iWebShop-5 (versions up to 5.15 ) affects the Login function in controllers/systemseller.php. Manipulating the Name argument allows an unauthenticated remote attacker to bypass authentication. The project scores CVSS 3.1: 7.3 (HIGH) w...

CVE-2026-86669 aircheng-org iWebShop-5 systemseller.php login improper authentication

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-86667

A SQL injection vulnerability exists in aircheng-org iWebShop-5 (up to version 5.15), specifically in the member_list function within controllers/member.php. The flaw is triggered by manipulation of the Search argument , allowing a remote, authenticated attacker to execute arbitrary SQL queries. ...

CVE-2026-86667 aircheng-org iWebShop-5 member.php member_list sql injection

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...