CVE-2026-105135

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...

CVE-2026-105133

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack...

CVE-2026-105135 InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...

EUVD-2026-92077

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...

CVE-2026-105135

The InternLM MindSearch software (version 0.1.0 ) contains a code injection vulnerability within the Planner Agent component. Specifically, the ExecutionAction.run function in the file mindsearch/agent/graph.py is affected. The root cause is the improper handling of argument inputs , which allows...

CVE-2026-105133 Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack...

CVE-2026-105133 Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack...

CVE-2026-105098 Omega Solution CoinEx Crypto Support Ticket API customer information disclosure

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-105098

A security flaw exists in Omega Solution CoinEx Crypto 2025 within the Support Ticket API component. Specifically, an unknown function in the /ticket/customer file is vulnerable to information disclosure when an attacker remotely manipulates the status/page/count arguments. While a public exploit...

CVE-2026-105098 Omega Solution CoinEx Crypto Support Ticket API customer information disclosure

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105156: Use of Password Hash With Insufficient Computational Effort

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...

CVE-2026-105137: Download of Code Without Integrity Check

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105167: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2026-105166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

PT-2026-104657

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order...

PT-2026-104616

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

PT-2026-104617

A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get user id by email of the file cognee/modules/users/authentication/get api auth backend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPI USERS JWT...

CVE-2026-105098: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...