25090 matches found
CVE-2026-11482
The CVE-2026-11482 entry describes a SQL injection in SourceCodester Class and Exam Timetabling System 1.0, caused by manipulating the argument sy in the unknown function of /archive5.php. The vulnerability is exploitable remotely, with a publicly available exploit. Affected software/component: S...
PT-2026-47244
Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An SQL injection issue exists that can be initiated remotely. The flaw is located in an unknown function within the '/archive5.php' endpoint, where manipulation of the sy...
Amazon Linux 2023 : nvlink5 (ALAS2023NVIDIA-2026-280)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-280 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successfu...
AlmaLinux 10 : kernel (ALSA-2026:19569)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:19569 advisory. kernel: net: afcan: do not leave a dangling sk pointer in cancreate CVE-2024-56603 kernel: net/sched: Make cakeenqueue return NETXMITCN when past...
Security-First Approach to API Pipeline Development with Zero-Trust Architecture
Modern enterprises face an accelerating onslaught of API-targeted threats amid a rapidly expanding attack surface. Record volumes of software vulnerabilities continue to accelerate dramatically, with 28,818 CVEs disclosed in 2023 a 38% jump from 2022 and 40,009 CVEs in 2024 another 38% increase,...
TP-Link Archer MR600 操作系统命令注入漏洞
The TP-Link Archer MR600 is a wireless router produced by TP-Link Corporation. The TP-Link Archer MR600 v5 version has a vulnerability related to operating system command injection. This vulnerability stems from improper handling of user-controlled inputs in the web management interface, leading ...
MINI-5Q5F-625V-G6M2
Bulletin has no description...
MINI-5V23-RC5F-44MW
Bulletin has no description...
MINI-GW72-97XX-8PV5
Bulletin has no description...
MINI-W6XX-GRXM-5RM2
Bulletin has no description...
MINI-Q874-55MG-PQXW
Bulletin has no description...
MINI-XJ95-PM4X-5XM6
Bulletin has no description...
MINI-M89C-45MX-9MFG
Bulletin has no description...
MINI-W72H-Q534-35V2
Bulletin has no description...
MINI-5HPW-XP55-H725
Bulletin has no description...
MINI-QRM5-FQWJ-PFMX
Bulletin has no description...
MINI-V5XR-M74F-VG4F
Bulletin has no description...
CVE-2026-11448
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11447
Summary: CVE-2026-11447 affects GL.iNet GL-MT3000 (firmware up to 4.4.5), specifically the MTK Backend component’s file iwinfo.so and the function iwinfo_backend. By manipulating the device argument, an attacker can trigger a remote command injection , with exploitation reportedly public. The iss...
CVE-2026-46400
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.0.0, the file upload functionality in HAXCMS PHP only validates file extensions using a regex pattern without checking the actual file content or MIME type. This allows attacker...