PT-2026-86834

Name of the Vulnerable Software and Affected Versions java-json-tools jackson-coreutils version 2.0 Description An issue exists in the URL Validation component within the JsonLoader.fromURL function. This flaw allows a remote attacker to perform server-side request forgery SSRF, a technique where...

PT-2026-86614

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection flaw exists in the /pages/sup transac.php endpoint. This issue occurs when the companyname argument is manipulated, allowing a remote attacker to execute arbitrary...

PT-2026-86667

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

PT-2026-86832

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

PT-2026-86965

A flaw has been found in D-Link DIR-895L A1 102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published a...

PT-2026-86633

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...

PT-2026-86621

Name of the Vulnerable Software and Affected Versions sfturing ssm pro versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A cross site scripting issue exists in the Order Endpoint component within the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java. A remote...

CVE-2026-86235 itsourcecode Sales and Inventory System pos_transac.php add sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/postransac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and may...

CVE-2026-86235 itsourcecode Sales and Inventory System pos_transac.php add sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/postransac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and may...

CVE-2026-86234 itsourcecode Sales and Inventory System cust_transac.php add sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

CVE-2026-86234 itsourcecode Sales and Inventory System cust_transac.php add sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

CVE-2026-86232

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

CVE-2026-86233 itsourcecode Sales and Inventory System us_del.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/usdel.php?type=user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-86232 itsourcecode Sales and Inventory System sup_del.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

CVE-2026-86225

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqliquery of the file /admin/modaladdroom.php. The manipulation of the argument roomname leads to sql injection. The attack is possible to be carried out...

CVE-2026-86225 SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqliquery of the file /admin/modaladdroom.php. The manipulation of the argument roomname leads to sql injection. The attack is possible to be carried out...

CVE-2026-86223

A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0 , specifically in the mysqli_query function within the file /admin/modal_add_coursea.php . Manipulating the course argument allows remote exploitation without authentication. The exploit has been made pub...

CVE-2026-86221

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection in the mysqli_query function within /admin/modal_add_course1.php , triggered by manipulation of the course argument. The attack can be initiated remotely without authentication. The exploit has been published with...

EUVD-2026-72162

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqliquery of the file /admin/modaladdcourse.php. The manipulation of the argument course results in sql injection. The attack can be launched remotely. The exploit is now...

CVE-2026-86220

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection in the mysqli_query function within /admin/modal_add_course.php , triggered by manipulation of the course argument. The vulnerability is exploitable remotely without authentication or user interaction, yielding CV...