CVE-2026-111662

Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService,...

CVE-2026-111648

The software BuildAdmin (versions through 2.3.9 ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw within the routine/adminInfo/edit functionality. Authenticated backend administrators possessing the routine/adminInfo/edit permission can exploit the id parameter to modify the prof...

CVE-2026-111648 BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

CVE-2026-111648 BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

EUVD-2026-103070

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

CVE-2026-111648 BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

CVE-2026-111648

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

EUVD-2026-103056

Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to...

CVE-2026-111634

Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to...

CVE-2026-111619 FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and...

CVE-2026-111619

The FilePress software, versions through 3.0.1 , is vulnerable to an SQL Injection flaw. Authenticated low-privilege users can inject SQL into ORDER BY clauses by exploiting the unvalidated asc parameter in dzz/pichome/library/filelist.php and dzz/collection/filelist.php. This allows attackers to...

CVE-2026-111619 FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and...

EUVD-2026-103041

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and...

CVE-2026-111619 FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and...

CVE-2026-111619

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and...

CVE-2026-111618

CoAI (Chat Nio) versions up to and including 4.0.0 are vulnerable to an unauthenticated path traversal vulnerability. The flaw exists in the generation and article archive download endpoints due to improper handling of the hash query parameter . Attackers can exploit this by supplying ../ sequenc...

CVE-2026-111618 CoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...

CVE-2026-111618 CoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...

CVE-2026-111618 CoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...

EUVD-2026-103040

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...