CVE-2026-78197 SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

EUVD-2026-64731

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-78197

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/admin/ajax.php when the action=save_user parameter is set. Manipulating the Username argument allows an unauthenticated remote attacker to inject SQL, potentially leading ...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Exploit di Remote Code Execution v2 Exploit funzionante per Open Web Analytics 1.7.3 - RCE potenziato con la php reverse shell di pentestmonkey, risolto il problema di non riuscire a trovare l'utente nella cache. L'exploit originale può essere trovato qui...

CVE-2026-78181

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78186

A remote reachable assertion vulnerability exists in the HSS component of Open5GS up to version 2.8.0, specifically in the file src/hss/hss-cx-path.c. The flaw is triggered by manipulation of the User-Name argument, leading to an assertion failure that impacts availability . The attack requires l...

EUVD-2026-64721

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-78185 itsourcecode Sales and Inventory System cust_edit.php sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-78185

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/cust_edit.php . An authenticated remote attacker can exploit this by manipulating the ID parameter, achieving partial impact on confidentiality, integrity, ...

CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78181

CVE-2026-78181 is a prototype pollution vulnerability in ractivejs ractive versions up to 1.4.4 . The flaw resides in the Ractive#set function within the Keypath Handler component, where improper control of object prototype attribute modification allows a remote, unauthenticated attacker to injec...

EUVD-2026-64704

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78177

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

ExploitDotNetDCOM

ExploitDotNetDCOM c James Forshaw 2014 Uno strumento per sfruttare .NET DCOM per EoP e RCE. È stato corretto nelle ultime versioni di .NET. Solo a scopo informativo. Tutto il codice è concesso in licenza GPLv3...

EUVD-2026-64694

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...

CVE-2026-78177

TanStack devtools-vite 0.7.0 is affected by an OS command injection vulnerability in the installPackage function within packages/devtools-bundler-core/src/package-manager.ts (component: Development Devtools Event Bus). The root cause is unsanitized handling of the packageName argument, allowing a...

CVE-2026-43499-A36

CVE-2026-43499-A36 Eigenständiger, am Gerät getesteter CVE-2026-43499-Port für das kanadische Galaxy A36 5G SM-A366W auf exakter Firmware A366WVLS3AYG1, einschließlich KernelSU-Late-Load- und Root-My-Galaxy-Integration. Dieses Repository enthält die gerätespezifische native Seite von Root My...

CVE-2026-78169

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...