EUVD-2026-92297

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

Security update for rpcbind

This update for rpcbind fixes the following issue: CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdat...

CVE-2026-105247

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

EUVD-2026-92283

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...

CVE-2026-105238

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

CVE-2026-105245

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105248

A security flaw exists in vgmstream up to version r2117 within the TXTP File Handler component. Specifically, the parse_params/txtp_parse function in the file src/meta/txtp_parser.c is vulnerable to an out-of-bounds write caused by malicious manipulation. This vulnerability may be exploited remot...

EUVD-2026-92274

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105248 vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105248 vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105247

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a remote SQL injection vulnerability. The flaw exists in an unknown function within the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course . An attacker can trigger the vulnerability by manipulating...

EUVD-2026-92273

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105247 SourceCodester Online Reviewer Management System btn_functions.php course sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

Improper Certificate Revocation Checking

mwiede jsch is vulnerable to improper certificate revocation checking. The vulnerability is due to improper validation of revoked keys in the getRevokedKeys function of KnownHosts.java, which allows a remote attacker to bypass certificate revocation checks by manipulating the knownhosts argument...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...