CVE-2026-86239: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

PT-2026-86591

Name of the Vulnerable Software and Affected Versions liufee FeehiCMS versions prior to 2.1.2 Description An issue in the UEditor Widget component allows for unrestricted file upload. The flaw exists within the UeditorAction::init function located in the backend/widgets/ueditor/UeditorAction.php...

ROS-20260907-73-0065

The vulnerability of the NewKeyring function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260907-73-0055

The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-86308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown...

PT-2026-86660

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

PT-2026-86623

Name of the Vulnerable Software and Affected Versions itsourcecode Information System Society Membership System version 1.0 Description An issue exists in the processing of the '/society/check student.php' endpoint. Manipulation of the student id parameter allows for remote SQL injection, which...

PT-2026-86763

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

ROS-20260907-73-0051

The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...

PT-2026-86842

Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description An improper locking issue exists where a low privileged attacker with remote access could potentially exploit the flaw to gai...

CVE-2026-86275: Improper Privilege Management

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...

PT-2026-86615

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A security flaw in the Password Recovery component allows for an unverified password change via remote exploitation. The issue resides in the...

ROS-20260907-73-0094

The vulnerability in dotnet9.0 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

CVE-2026-86267: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/checkstudent.php. The manipulation of the argument studentid leads to sql injection. Remote exploitation of the attack is...

VulnCheck KEV: CVE-2025-14208

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

Linux Distros Unpatched Vulnerability : CVE-2026-78126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. CVE-2026-78126 Note that Nessus relies on the presence of the package a...

MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

CVE-2026-86226

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

CVE-2026-86223

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

CVE-2026-86223 SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...