CVE-2026-36387

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...

Local File Inclusion

FUXA is vulnerable to Local File Inclusion. The vulnerability is due to improper file sanitization via the fuxa.log file. The attacker can exploit this issue to read arbitrary files on the server by manipulating the file parameter to reference the desired file...

Arbitrary File Overwrite

booster-catalog-service is vulnerable to arbitrary file overwrite attacks. The vulnerability exists due to the improper sanitization of filename when unzipping files in a zip, causing arbitrary file overwrite attacks...