EUVD-2026-77177

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

UBUNTU-CVE-2026-90612

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90617 GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...

CVE-2026-90617 GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...

EUVD-2026-77176

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...

CVE-2026-90617

GH05TCREW PentestAgent contains an os command injection in the MCP HTTP Server component, specifically in the run_task function of interface/main.py . The vulnerability is reachable remotely with no privileges required, allowing an attacker to manipulate input to execute arbitrary OS commands. Im...

CVE-2026-90615 SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

EUVD-2026-77168

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...

CVE-2026-90613

GPAC (component MP4Box ) contains a reachable assertion vulnerability in the function stbl_GetSampleInfos within the file isomedia/stbl_read.c , affecting versions up to commit f1219cde. The attack requires a local position with low privileges and results in a low availability impact (denial of s...

CVE-2026-90607

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...

EUVD-2026-77140

A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Executing a manipulation of the argument ip6addr can lead to buffer overflow. The attack can be executed remotely. The...

EUVD-2026-77139

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...

EUVD-2026-77127

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90604

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...

CVE-2026-90607

Totolink A3002MU (firmware Hh-B20211125.1046 ) is affected by a remote buffer overflow in the boa component, specifically in the function formNewSchedule of the file /boafrm/formNewSchedule. The root cause is the manipulation of the submit-url argument, which overflows the buffer and may allow an...

CVE-2026-90607 Totolink A3002MU boa formNewSchedule buffer overflow

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...

PT-2026-91220

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

PT-2026-91173

A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service. Remote exploitation of the...

PT-2026-91762

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfd elf strtab delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be...

PT-2026-91763

Name of the Vulnerable Software and Affected Versions michaelliao itranswarp versions prior to 2.20 Description A flaw in the Page Content Rendering component allows remote attackers to perform cross site scripting XSS, which is a technique used to inject malicious scripts into web pages viewed b...