EUVD-2026-62227

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-75986

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

CVE-2026-75774

A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The complexity of...

CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size

A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...

CVE-2026-75093

A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...

CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size

A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...

CVE-2026-75086

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75012 TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference

A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be...

CVE-2026-19995

A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This manipulation of the argument Message causes cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2026-19995

Webkul Bagisto (up to 2.4.4) is affected in the RMA Message Handler, specifically the /customer/account/rma/send-message path. The vulnerability stems from manipulating the Message argument, leading to cross-site scripting. Remote exploitation is possible, and exploits have been publicly disclose...

CVE-2026-19993

Webkul Bagisto (up to 2.4.4) contains a vulnerability in the RMA State Validation flow, specifically the /customer/account/rma/update-status endpoint. An attacker may remotely trigger manipulation of the behavioral workflow via this unknown functionality, with exploitation disclosed publicly. CVS...

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

EUVD-2026-59892

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi...

CVE-2026-19926

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...

CVE-2026-19926 Evergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...

CVE-2026-19926

CVE-2026-19926 affects Evergreen up to versions 3.14.11/3.15.11/3.16.5/3.17-beta1. The issue lies in an unknown function of the /osrf-gateway-v1 file of the OpenSRF Service (open-ils.fielder), allowing SQL injection through manipulation of that element. The vulnerability can be exploited remotely...

CVE-2026-19918

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...

CVE-2026-19903

Technical details about CVE-2026-19903 (affected product, components, versions, exploit vectors, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-19838

CVE-2026-19838 affects Webkul Bagisto up to 2.4.4, targeting the Backend Reporting Endpoint under /admin/reporting/sales/. The issue is an authorization bypass in an unknown code path of the Backend Reporting Endpoint, with remote exploitation possible. Public exploitation has been disclosed. The...

EUVD-2026-58671

A vulnerability was determined in Webkul Bagisto up to 2.4.4. Affected is an unknown function of the file /admin/customers/login-as-customer/ of the component Admin Customer Impersonation Feature. This manipulation of the argument ID causes authorization bypass. The attack can be initiated...