EUVD-2026-72242

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/ustransac.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-86265

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/us_transac.php , triggered by manipulation of the Username argument. The attack can be launched remotely and requires low privileges (authentication), with no user interaction needed. Per the CVS...

EUVD-2026-72240

A vulnerability was detected in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancellation. The manipulation of the argument ...

CVE-2026-86244

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86241

A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie Validation. This manipulation of the argument cookieValidationKey causes use of hard-coded cryptographic key . The...

CVE-2026-86261 sfturing hosp_order Order Controller OrderController.java authorization

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

EUVD-2026-72237

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

CVE-2026-86261 sfturing hosp_order Order Controller OrderController.java authorization

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

CVE-2026-86260

CVE-2026-86260 affects the Password Recovery component of sfturing hosp_order (a Java/SSM-based hospital order management system). The flaw resides in the modifyPassWord function within ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java, where a password can be changed without proper...

EUVD-2026-72192

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/suptransac.php. Performing a manipulation of the argument companyname results in sql injection. It is possible to initiate the attack remotely...

CVE-2026-86241

liufee FeehiCMS (up to 2.1.1 ) is affected by a hard-coded cryptographic key vulnerability in the Cookie Validation component, specifically in the file environments/prod/backend/config/main-local.php. Manipulation of the cookieValidationKey argument leads to use of a fixed key, allowing remote at...

CVE-2026-86241 liufee FeehiCMS Cookie Validation main-local.php hard-coded key

A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie Validation. This manipulation of the argument cookieValidationKey causes use of hard-coded cryptographic key . The...

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

EUVD-2026-72180

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

EUVD-2026-72182

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

CVE-2026-86234

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

PT-2026-86635

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This vulnerability affects the...

PT-2026-86646

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

PT-2026-86619

A vulnerability was detected in sfturing hosp order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancellation. The manipulation of the argumen...