CVE-2026-19988

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public...

CVE-2026-19986

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It...

CVE-2026-19986

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It...

CVE-2026-19986 Adblock for Youtube Extension Event Listener contentscript.js updateDynamicRules improper authorization

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It...

EUVD-2026-60048

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It...

CVE-2026-19976

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

CVE-2026-19973

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-19977

CVE-2026-19977 affects EFM ipTIME A3004T firmware 14.19.0. The vulnerable element is the function httpcon_check_session_url in the Session Validation component. Manipulation of this function leads to improper authentication, with remote exploitation possible. The CVSS reports indicate a criticall...

EUVD-2026-60037

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpconchecksessionurl of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and ma...

CVE-2026-19977 EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpconchecksessionurl of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and ma...

CVE-2026-19977

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpconchecksessionurl of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and ma...

EUVD-2026-60036

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

DEBIAN-CVE-2026-19970

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...

CVE-2026-19972

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and ma...

UBUNTU-CVE-2026-19970

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...

EUVD-2026-60026

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...

CVE-2026-19973

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-19973 itsourcecode Hospital Management System viewpaymentreport.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-19973

CVE-2026-19973 affects itsourcecode Hospital Management System 1.0. An SQL injection vulnerability exists in the unknown functionality of /viewpaymentreport.php when manipulating the delid parameter, exploitable remotely. Public exploit is indicated. CVSS metrics from VulDB suggest a medium sever...

EUVD-2026-60023

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and ma...