CVE-2026-90515 SourceCodester School Registration and Fee System delete_stud.php sql injection

A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...

CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90515: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...

CVE-2026-90514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90526: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90516: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/payreport.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit has...

CVE-2026-82750

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

CVE-2026-82750

ZenHive mpp (versions 0.2.0 through before 0.16.1 ) contains a vulnerability in MPP.Methods.Tempo.FeePayerPolicy.measure/3 that fails to validate the aa_authorization_list field of client-signed 0x76 envelopes. An unauthenticated remote client can attach EIP-7702 delegation entries from throwaway...

EEF-CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server...

EUVD-2026-72148

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

EEF-CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning

Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server...

CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...

CVE-2026-82751

CVE-2026-82751 affects the ZenHive mpp library (Elixir), specifically MPP.Methods.Tempo.FeePayerPolicy.measure/3, in versions 0.2.0 through 0.16.0 . The function bounds gas fields, fee budgets, validity windows, and access lists of the client-signed 0x76 envelope but fails to check the optional k...

CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...

CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...

PT-2026-86539

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...

CVE-2026-48486

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...