CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

CVE-2026-78112

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112

A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...

EUVD-2026-64647

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78057

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-78057 sambitraj Student-Management-System Management Mutation sql injection

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

EUVD-2026-64623

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-78057

sambitraj Student-Management-System (up to commit 56ba287) is vulnerable to SQL injection in the Management Mutation Handler component. Manipulating the arguments roll_no, name, father_name, class, mobile, email, password, or remark allows a remote, authenticated attacker to inject SQL queries. T...

CVE-2026-78057 sambitraj Student-Management-System Management Mutation sql injection

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-13736

creationtimestamp| type| source ---|---|--- 2026-08-23 02:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99247 2026-08-24 00:00:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99247 2026-08-24 21:00:06+00:00| seen|...

PT-2026-79752

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument roll no/name/father name/class/mobile/email/password/remark causes sql injectio...

PT-2026-79781

Name of the Vulnerable Software and Affected Versions Dromara UJCMS versions prior to 10.1.4 Description A remote flaw exists in the web-file-template endpoint within the update function of the WebFileTemplateController.java file. This issue occurs due to the improper neutralization of special...

PT-2026-79765

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2019-13627

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| published-proof-of-concept| https://t.me/nuancesprognews/634 2026-08-23 00:00:13+00:00| published-proof-of-concept| https://t.me/nuancesprognews/634...

CVE-2019-12758

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| published-proof-of-concept| https://t.me/nuancesprognews/751 2026-08-23 00:00:14+00:00| published-proof-of-concept| https://t.me/nuancesprognews/751...

CVE-2026-72844

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99139 2026-08-23 00:00:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99139...

CVE-2026-47883

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99157 2026-08-23 00:00:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99157...

CVE-2026-67447

creationtimestamp| type| source ---|---|--- 2026-08-20 22:35:02+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-r553-m4fv-5v97...

CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...