CVE-2026-82540 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82486

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82486

A vulnerability in SiteServer SSCMS 7.4.0 affects the Agent Installation Workflow component, where improper access controls are triggered by manipulating the SecurityKey argument. The attack is remotely exploitable but rated as high complexity and difficult to execute . CVSS 3.1 scores it 5.0 (Me...

CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

EUVD-2026-68176

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82482

Coppermine Photo Gallery (coppermine-gallery/cpg1.6.x) versions up to 1.6.28 contain a stored cross-site scripting (XSS) vulnerability in the edit_profile endpoint of profile.php. The root cause is improper input handling of the Biography argument, allowing a remote authenticated user to inject s...

PT-2026-83536

Name of the Vulnerable Software and Affected Versions SiteServer SSCMS version 7.4.0 Description An issue exists within the Agent Installation Workflow component where manipulating the SecurityKey argument leads to improper access controls. This allows for remote exploitation, although the attack...

CVE-2026-82486: Improper Access Control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82550: Improper Input Validation

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The...

PT-2026-83587

Name of the Vulnerable Software and Affected Versions Linux Foundation Magma version 1.9.0 Description Improper input validation occurs within the NGSetupRequest Handler component when the NG-IoT-DefaultPagingDRX argument is manipulated. This flaw allows for remote exploitation. Recommendations A...

PT-2026-83552

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update file usage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

PT-2026-83542

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust searchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

vajra

██╗ ██╗ █████╗ ██╗██████╗ █████╗ ██║ ██║██...

exploitgym-eval

ExploitGym for Inspect This repository runs the pinned Exploi...

Window-7--Vulnerability-and-Exploitation.

Windows 7 Vulnerability Assessment & Exploitation Lab 🎯 Ob...

PT-2026-83498

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists due to improper processing of the /pages/emp edit.php endpoint. A remote attacker can exploit this by manipulating the ID argument to execute...

Vulnerabilities found in PaperCut MF and PaperCut NG of PaperCut

PaperCut has vulnerabilities in PaperCut MF and PaperCut NG. An unauthorized malicious actor could potentially exploit these vulnerabilities to gain control over the PaperCut environment and execute arbitrary code. To do this, the malicious actor would need to send malicious network traffic to th...

CVE-2026-82111 iswalle getnote-mcp upload_image index.ts fs.readFileSync path traversal

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...