CVE-2026-78057

sambitraj Student-Management-System (up to commit 56ba287) is vulnerable to SQL injection in the Management Mutation Handler component. Manipulating the arguments roll_no, name, father_name, class, mobile, email, password, or remark allows a remote, authenticated attacker to inject SQL queries. T...

EUVD-2026-64621

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78056 sambitraj Student-Management-System Dashboard sql injection

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78056

sambitraj Student-Management-System (up to commit 56ba287) contains a SQL injection vulnerability in the Dashboard component. Manipulation of the roll_no or teacher_name argument allows a remote, authenticated attacker to inject SQL queries. The exploit is public and classified as proof-of-concep...

EUVD-2026-64604

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

EUVD-2026-64615

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argument course can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availabl...

CVE-2026-78054

SourceCodester Class and Exam Timetabling System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the file /BSIS1.php . The flaw is triggered by manipulating the course parameter, allowing a remote, unauthenticated attacker to inject malicious scripts into the application. User interact...

CVE-2026-78050

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

PT-2026-79765

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

PT-2026-79784

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived records.php of the component Restore/Delete. The manipulation of the argument resident id results in authorization bypass. The attack may be launche...

PT-2026-79781

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

PT-2026-79786

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...

PT-2026-79785

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

PT-2026-79766

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit user account.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

CVE-2026-78050 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050

CVE-2026-78050 is a stack-based buffer overflow in the Web Management component of Comfast CF-N1-S firmware 2.6.0.1 . The vulnerable function sub_41AD7C is reachable via the CGI endpoint /cgi-bin/mbox-config?method=SET&section=ntp_timezone. Manipulating the timestr or ntp_client_enabled argument ...

CVE-2026-77988

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77988

A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...

CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

EUVD-2026-64252

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...