CVE-2026-78485

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-78492

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain an Improper Certificate Validation vulnerability. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. An unauthenticated remote attacker could exploit this flaw to gain unauthorized access , wi...

EUVD-2026-74830

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

Exploit for CVE-2026-67401

CVE-202...

EUVD-2026-74770

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-87634

A flaw was found in Chromium. A use-after-free vulnerability exists in the WebPackaging component. A remote attacker could exploit this by enticing a user to open a specially crafted HTML page. This could potentially lead to arbitrary code execution outside of the sandbox...

CVE-2026-87642

A flaw was found in WebGL within Chromium. An uninitialized resource vulnerability allows a remote attacker to leak sensitive cross-origin data. This can be exploited by enticing a user to visit a specially crafted HTML page...

Exploit for CVE-2026-19089

CVE-2026-19089 — WooCommerce Tyche Product Input Fields S...

PT-2026-89169

A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function update record of the file includes/manage.php. The manipulation of the argument update category/cid/update brand/update product leads to sql injection. T...

PT-2026-89183

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument category name/brand...

PT-2026-88929

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

EUVD-2026-74042

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86672

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

CVE-2026-86674 ningzichun Student Management System login.php session_start session fixiation

A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function sessionstart of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...

CVE-2026-86674

A session fixation vulnerability was identified in the ningzichun Student Management System , affecting the session_start function in login.php. The flaw allows a remote attacker to manipulate session identifiers, enabling unauthorized session takeover. The attack requires user interaction and no...

CVE-2026-49927

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28593

A vulnerability exists in the getItemList method of SettingsFragment.java , where misleading or insufficient UI allows for a possible user interaction bypass . This flaw can lead to a local escalation of privilege without requiring additional execution privileges or user interaction for exploitat...

CVE-2026-86673

ningzichun Student Management System (up to commit 98760f57) is affected by hard-coded database credentials in the mysqli_connect function within config/database.php. The vulnerability allows a remote, unauthenticated attacker to gain access to the system's database connection with low impact on ...