CVE-2026-19957

The CVE concerns graphlit-mcp-server 1.0.1, specifically the ssrf-test Endpoint’s src/tools.ts fetch function. The root cause is manipulation of the url argument, enabling server-side request forgery (SSRF). Reported attack vector is network, with low attack complexity and no user interaction req...

CVE-2026-19955

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...

CVE-2026-19955

CVE-2026-19955 affects TrailDB 0.6. The vulnerability is in the function tdb_open in /src/tdb.c (TOC Validation), causing an out-of-bounds read. Remote exploitation is possible and public exploits exist. The project was informed via an issue report but has not responded. No remediation details ar...

CVE-2026-19955 TrailDB TOC Validation tdb.c tdb_open out-of-bounds

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...

CVE-2026-19933

A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...

CVE-2026-19934 itsourcecode Hospital Management System vieworder.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi...

CVE-2026-19934

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi...

EUVD-2026-59892

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi...

CVE-2026-19934

CVE-2026-19934 affects itsourcecode Hospital Management System 1.0. The vulnerability resides in the /vieworder.php file via manipulation of the delid parameter, enabling SQL injection. This can be exploited remotely and the exploit has been disclosed publicly. Documents do not specify the exact ...

CVE-2026-19933

CVE-2026-19933 affects DefaultFuction Customer-Relationship-Management-In-C-Project 2.0, specifically the Customer Search Module. Affected component/function: Customer Search Module; root cause: manipulation of the function gets leads to a stack-based buffer overflow. Impact: enables remote attac...

CVE-2026-19933

A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...

CVE-2026-19930

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

EUVD-2026-59848

A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...

CVE-2026-19932

The CVE affects DefaultFuction Notice-System-Managent 2.0, specifically the GroovyShell.evaluate function in the /execute path of the NoticeController. The underlying root cause is code injection via that evaluation, enabling a remote attacker to trigger exploitation. Public exploits are indicate...

CVE-2026-19930 Dolibarr User Cloning card.php ldap injection

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

CVE-2026-19930 Dolibarr User Cloning card.php ldap injection

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

CVE-2026-19928

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead to improper privilege management. The attack may be...

CVE-2026-19926

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

EUVD-2026-59839

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...