CVE-2026-12116 CVE-2026-12116

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed...

EUVD-2026-42582

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed...

EUVD-2026-42492

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /editfooditems.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

EUVD-2026-42490

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from...

CVE-2026-15135

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /editfooditems.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

CVE-2026-15135

The CVE-2026-15135 describes a SQL injection in code-projects Online Food Order System 1.0, affecting edit_food_items.php. The flaw arises from unsafely handling the update parameter, enabling remote exploitation. Public exploit availability is indicated, with CVSS metrics showing high impact on ...

CVE-2026-15134

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from...

CVE-2021-4120

creationtimestamp| type| source ---|---|--- 2026-07-08 11:11:38+00:00| seen| https://gist.github.com/julian-klode/eb0381c1cb2cec713ba78d7462ad6167...

CVE-2026-12097

creationtimestamp| type| source ---|---|--- 2026-07-08 08:34:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4pjidmtz2l...

CVE-2026-12943

creationtimestamp| type| source ---|---|--- 2026-07-07 08:30:22+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mq26ttl6ou2f 2026-07-30 19:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv4ungbww2y 2026-07-30 19:02:13+00:00| seen|...

CVE-2026-11405

creationtimestamp| type| source ---|---|--- 2026-07-07 04:31:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpzrjkh5ga2f 2026-07-07 04:31:59+00:00| seen| https://bsky.app/profile/potato.software/post/3mpzrjlnff724 2026-07-07 08:15:44+00:00| seen|...

CVE-2026-55615

creationtimestamp| type| source ---|---|--- 2026-07-06 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fhfwf72r 2026-07-06 22:35:09+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc 2026-07-09...

CVE-2026-43866

creationtimestamp| type| source ---|---|--- 2026-07-06 19:53:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyul5kuor2t 2026-07-09 03:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6owncfak2s 2026-07-16 19:00:10+00:00| seen|...

CVE-2026-1433

uniFLOW Universal Login Manager ULM Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration information through the ULM Remote User Interface RUI. Exploitation requires administrative privileges and may disclose...

CVE-2026-12184

creationtimestamp| type| source ---|---|--- 2026-07-06 02:41:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpx2vw7sur2a 2026-07-07 13:55:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq2qypnlfq2i 2026-08-01 22:19:43+00:00| seen|...

CVE-2026-49420

creationtimestamp| type| source ---|---|--- 2026-07-06 01:35:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwx6udafh27...

CVE-2026-49429

creationtimestamp| type| source ---|---|--- 2026-07-06 01:35:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwx6udafh27...

CVE-2026-52747

creationtimestamp| type| source ---|---|--- 2026-07-06 00:40:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwu4jxh6o2t 2026-07-11 03:07:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdonhllv32z 2026-07-11 12:00:29+00:00| seen|...

EUVD-2026-41793

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajaxenroll.php of the component Enrollment Management. The manipulation of the argument studentid/scheduleid/action leads to improper...

EUVD-2026-41790

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...