CVE-2026-15469

creationtimestamp| type| source ---|---|--- 2026-08-25 09:00:04+00:00| published-proof-of-concept| Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQsKZ-4Nh0Q9BWMtB8 2026-08-25 16:45:09+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-prodotti-tp-link 2026-08-25 19:00:04+00:00| seen|...

EUVD-2026-65158

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

CVE-2026-78434

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

CVE-2026-78434

Faveo Helpdesk versions up to 2.0.3 contain a missing authentication flaw in the FormController::post_ticket_reply function within app/Http/Controllers/Client/helpdesk/FormController.php, specifically in the post-ticket-reply Endpoint . An unauthenticated remote attacker can exploit this to achie...

CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

CVE-2026-71506

creationtimestamp| type| source ---|---|--- 2026-08-24 20:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6nhmj4wxrwmuq 2026-08-25 11:06:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvogjqysh2x 2026-08-25 11:06:47+00:00| seen|...

GHSA-79H3-6HXJ-G98H

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405 2026-08-25 00:00:22+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405...

GHSA-GH4H-FX78-Q8XC

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3406 2026-08-25 00:00:22+00:00| published-proof-of-concept| https://t.me/bdufstecru/3406...

CVE-2026-09881

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99431 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

CVE-2025-44810

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99427 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

CVE-2025-19000

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99438 2026-08-25 00:00:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99438...

CVE-2026-78200

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78200 itsourcecode Library Management System editbooks.php sql injection

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78170

UTT HiPER 1200GW (up to version 2.5.3-170306) is affected by a remote buffer overflow in the strcpy function within /goform/formConfigFastDirectionW. An authenticated attacker (low privileges) can exploit this by manipulating the ssid argument, potentially achieving full compromise of confidentia...

PT-2026-79807

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

PT-2026-81064

Name of the Vulnerable Software and Affected Versions Faveo Helpdesk versions prior to 2.0.4 Description An authentication bypass exists in the post-ticket-reply endpoint. This issue occurs within the FormController::post ticket reply function located in the...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

EUVD-2026-64664

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

CVE-2026-78140

Dromara UJCMS up to 10.1.3 is affected by a Server-Side Template Injection (SSTI) vulnerability in the update function of WebFileTemplateController.java (web-file-template endpoint). The root cause is improper neutralization of special elements used in the FreeMarker template engine. The attack i...