CVE-2026-19921

CVE-2026-19921 affects code-projects Online Shopping System 1.0. The vulnerability is in the unknown functionality of /homeaction.php, where manipulation of the cat_id parameter leads to SQL injection. The issue can be exploited remotely, and public exploits are reported. The connected documents ...

CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

PT-2026-73070

A security vulnerability has been detected in Tenda AC10 16.03.10.09 multi TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly...

PT-2026-73068

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount 1 results in cross site scripting. The attack can be initiated remotely. The exploit ha...

PT-2026-73175

Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description Remote command injection is possible through the manipulation of the rootAPmac argument within the formWlbasic function of the '/goform/formWlbasic' endpoint. Command injection is a flaw that allows a...

PT-2026-73072

Name of the Vulnerable Software and Affected Versions Evergreen versions prior to 3.14.12 Evergreen versions prior to 3.15.12 Evergreen versions prior to 3.16.6 Evergreen versions prior to 3.17-beta2 Description A remote SQL injection exists within the open-ils.fielder OpenSRF Service, specifical...

PT-2026-73067

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description An issue exists in the /homeaction.php file where improper handling of the cat id parameter allows for remote SQL injection. SQL injection is a technique where an attacker inserts...

PT-2026-73178

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

PT-2026-73173

Name of the Vulnerable Software and Affected Versions iatsiuk pptr-mcp versions prior to 0.2.8 Description A flaw in the execute Tool component allows for remote code injection. The issue resides within the executeCode function located in the src/vm-executor.ts file. Recommendations At the moment...

PT-2026-73078

A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...

PT-2026-73172

Name of the Vulnerable Software and Affected Versions graphlit graphlit-mcp-server version 1.0.1 Description A server-side request forgery SSRF issue exists in the ssrf-test Endpoint within the fetch function of the src/tools.ts file. This occurs when the url argument is manipulated, allowing a...

PT-2026-73069

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout process.php. Executing a manipulation of the argument total count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to t...

PT-2026-73075

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Template Processing. The manipulation leads to improper neutralization of special elements use...

Linux Distros Unpatched Vulnerability : CVE-2026-72888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a...

CVE-2026-19920

CVE-2026-19920 affects the code-projects Online Shopping System 1.0. The vulnerability targets the function in the file /action.php , where manipulating the argument proId leads to a SQL injection . The issue is exploitable remotely, and public disclosure has occurred (exploit maturity: PROOF-OF-...

CVE-2026-19920

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2026-19920 code-projects Online Shopping System action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2026-19919 code-projects Online Shopping System Login login.php sql injection

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...

CVE-2026-19919

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...

CVE-2026-19917

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file deletefooditems1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...