19004 matches found
PT-2026-39415
Name of the Vulnerable Software and Affected Versions JeecgBoot version 3.9.1 Description A flaw in the 'mLogin' endpoint within the LoginController.java file of the jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/ component allows for remote authorization...
CVE-2026-44324
creationtimestamp| type| source ---|---|--- 2026-05-08 22:52:20+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jqfc-gwj5-3w63...
CVE-2026-44319
creationtimestamp| type| source ---|---|--- 2026-05-08 22:44:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rxrq-fv76-26pr...
CVE-2026-44209
creationtimestamp| type| source ---|---|--- 2026-05-08 20:36:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gphh-9q3h-jgpp...
Always-Incorrect Control Flow Implementation
Overview Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation in the EqualsUri function. An attacker can cause incorrect URI comparisons by supplying specially crafted input values. Remediation Upgrade uriparser to version 1.0.2 or higher. References -...
CVE-2026-8136
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /index.php?page=users. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and...
EUVD-2026-28488
A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknown processing of the file postcomment.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used...
EUVD-2026-28478
A flaw has been found in Open5GS up to 2.7.7. The affected element is the function nssfnnrfnsselectionhandlegetfromamforvnssf of the file /src/nssf/nnssf-handler.c of the component NSSF. Executing a manipulation can lead to denial of service. The attack can be executed remotely. The exploit has...
CVE-2026-45148
creationtimestamp| type| source ---|---|--- 2026-05-08 03:05:45+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fmh9-gpqh-g53g...
EUVD-2026-28454
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
PT-2026-38642
Name of the Vulnerable Software and Affected Versions SourceCodester Comment System version 1.0 Description An issue exists in the processing of the 'post comment.php' file. Manipulation of the Name argument allows for SQL injection, which can be exploited remotely. Recommendations At the moment,...
PT-2026-38604
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.8 Description A flaw in the NSSF component allows a remote attacker to cause a denial of service through manipulation of the nssf nnrf nsselection handle get from amf or vnssf function located in the...
PT-2026-38657
Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0 Description A flaw in the '/index.php?page=users' endpoint allows for remote cross-site scripting XSS, which occurs when an attacker manipulates the Name argument. Cross-site...
CVE-2026-45137
creationtimestamp| type| source ---|---|--- 2026-05-07 23:35:33+00:00| published-proof-of-concept| https://github.com/otter-sec/anchor/security/advisories/GHSA-c6rc-8jpp-2fgc 2026-05-27 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj3olipx2e 2026-05-27...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
Azure AI Foundry Elevation of Privilege Vulnerability
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-42082
creationtimestamp| type| source ---|---|--- 2026-05-07 01:56:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vrrx-58h3-prmh...
CVE-2026-42081
creationtimestamp| type| source ---|---|--- 2026-05-07 01:53:47+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-77x9-rf64-92gv...
Microsoft Azure AI Foundry M365 published agents 访问控制错误漏洞
Microsoft Azure AI Foundry M365 Published Agents are a series of enterprise-level intelligent agents provided by the American company Microsoft. There is an access control vulnerability in Microsoft Azure AI Foundry M365 Published Agents. This vulnerability stems from improper access control, whi...