137580 matches found
Automotive Shop Management System 1.0 SQL Injection
Automotive Shop Management System version 1.0 suffers from a remote SQL injection vulnerability. Titles: Automotive Shop Management System 1.0 Multiple SQLi Author: nu11secur1ty Date: 10/19/26 Vendor: https://github.com/oretnom23 Software:...
PT-2026-118041
Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
PT-2026-118029
Nginx UI: Node Secret Credential Exposure via URL Query Parameter in github.com/0xJacky/Nginx-UI...
PT-2026-118071
Casdoor SSO callback uses a constant state parameter login CSRF in github.com/0xJacky/Nginx-UI...
CVE-2026-112027
A flaw was found in the Uploadify component of light0011 cms. A remote attacker can exploit an improper input handling vulnerability by manipulating the filename parameter in the check-exists script. This issue leads to information disclosure, allowing the attacker to verify the existence of...
Diem project: Diem input validation error vulnerability
The Diem project has a vulnerability in input validation. This vulnerability stems from improper handling of the Referer parameter in the Sign-In component in the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php. It may lead to redirection, and attackers could...
BlackBelt Technology PI Dashboard: Input validation error vulnerability
The BlackBelt Technology PI Dashboard versions prior to 0.8.0 have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the cwd parameter by the unknown function in the WebSocket Gateway component, resulting in source validation errors that can be...
AI Genius Automations has a serious information leakage vulnerability
AI Genius Automations versions 1.0.87 and earlier have a security vulnerability. This vulnerability stems from improper handling of the parameter path in the fileserver/src/index.ts file, which may lead to information leakage...
DeepPavlov Team: Vulnerability in input validation
The DeepPavlov team has identified a security vulnerability in versions of DeepPavlov 1.7.0 and earlier. This vulnerability stems from incorrect handling of the processor parameter in the init function of the deeppavlov/models/preprocessors/multitaskpreprocessor.py file. It may lead to remote cod...
H3C Magic NX15 has a vulnerability in input validation.
The H3C Magic NX15 NX15V100R017 version has a security vulnerability. This vulnerability stems from the improper handling of the path parameter in the write function of the RPC Interface component. This could lead to code injection, allowing attackers to execute attacks remotely...
Unsloth AI has a code injection vulnerability.
Unsloth AI versions 0.1.501-beta and earlier have a code injection vulnerability. This vulnerability stems from the operation of the parameter Type in the function FastSentenceTransformer.istransformermoduleref in the file unsloth/models/sentencetransformer.py. Using an externally controlled inpu...
Chamilo LMS cross-site scripting vulnerabilities
Chamilo LMS versions 1.11.40 and earlier, 2.0.3 and earlier, as well as 3.0.1 and earlier, have a security vulnerability. This vulnerability stems from the incorrect handling of the parameter Name in the TicketManager::addProject function within the main/inc/lib/TicketManager.php file in the Tick...
Subhajitkhan Online-Clinic-Management-System Cross-Site Script Vulnerability
The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the msg parameter in the feedback.php file, which may lead to cross-site scripting attacks...
Itsourcecode Online Cake Ordering System: Input validation error vulnerability
The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...
CVE-2026-98722 mtd: block2mtd: Fix divide error when erase_size is zero
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...
CVE-2026-98722 mtd: block2mtd: Fix divide error when erase_size is zero
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...
CVE-2026-98569 ip_gre: Reject enabling collect metadata through changelink
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
VulnCheck KEV: CVE-2026-96652
Plex Media Server contains a server-side request forgery SSRF vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with...
CVE-2024-58398
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, when clicked by a logged-in user, redirects the victim to a...
CVE-2024-58398 Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, when clicked by a logged-in user, redirects the victim to a...