CVE-2026-105169 kishor-23 food-waste-management-system Take Order delivery.php sql injection

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

CVE-2026-105169

A security flaw exists in the Take Order Handler component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the delivery/delivery.php file is vulnerable to SQL injection due to the improper handling of the order_id and delivery_person_id arguments. This vul...

CVE-2026-105168 kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

CVE-2026-105166

The kishor-23 food-waste-management-system is vulnerable to a remote SQL injection via the Food Donation Form component. Specifically, manipulating the image-choice argument within the insert function of the fooddonateform.php file allows for unauthorized database interaction. While the exploit h...

CVE-2026-105166 kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

CVE-2026-105163

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component ImageConfig. The manipulation results in time-of-check time-of-use. The attack may be launched remotely. Upgrading to versio...

CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Carga-Arbitraria-de-Archivos Este repositorio revela una vulnerabilidad de seguridad descubierta en Motivian Content Management System v.41.0.0. CVE-2025-29093: Carga Arbitraria de Archivos Esta vulnerabilidad fue reportada al proveedor, conforme a las prácticas de divulgación...

CVE-2026-105163

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in crossplane-runtime up to versions 2.2.2 and 2.3.2 . The flaw specifically affects the Get function within the pkg/xpkg/client.go file of the ImageConfig component. This issue may be exploited via a remote attack vector. T...

CVE-2023-46954

CVE-2023-46954 Vulnerabilidad de inyección SQL en Relativity Server 2022 v.12.1.537.3 Parche 2 y anteriores permite a un atacante remoto ejecutar código arbitrario a través del parámetro name. Tipo de Vulnerabilidad Inyección SQL Vendedor del Producto Relativity ODA LLC Base de Código del Product...

CVE-2018-11235

CVE-2018-11235 漏洞简介 漏洞名称： Git安全漏洞 CNNVD编号：CNNVD-201805-1020 危害等级：高危 CVE编号：CVE-2018-11235 漏洞类型：安全特征问题 发布时间：2018-05-31 威胁类型：远程 更新时间：2019-04-01 厂商：git-scm 漏洞来源：...

CVE-2024-34328

CVE-2024-34328 基于主机头的开放重定向 📝 概述 漏洞标题 ：基于主机头的开放重定向 产品 ：Sielox AnyWare 受影响版本 ：2.1.2 CVE ID ：CVE-2024-34328 严重程度 ：中 攻击向量 ：远程 影响 ：开放重定向/钓鱼 🧨 描述 攻击者可以构造一个带有修改过的Host头的URL，指向其控制的恶意域名。当用户点击该恶意链接时，会被重定向到攻击者的域名——可能导致钓鱼 、凭证窃取 或恶意软件传播 。 此漏洞源于应用程序在重定向过程中生成绝对URL时对Host头的验证不当。 🖼️ 概念验证（PoC） 🔗 修改主机头攻击...

EUVD-2026-92118

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

CVE-2026-105161

A flaw exists in invariant-systems-ai aiir versions up to 1.7.0 within the Policy Gate Handler component. This vulnerability allows for improper verification of cryptographic signatures through an unknown function, which can be triggered via a remote manipulation. The impact includes potential in...

CVE-2026-105158

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

CVE-2026-105156

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...

CVE-2024-32399

CVE-2024-32399 Resumen de la vulnerabilidad La vulnerabilidad de Directory Traversal en RaidenMAILD Mail Server v.4.9.4 y anteriores permite a un atacante remoto obtener información sensible a través del componente /webeditor/ Tipo de vulnerabilidad Directory Traversal Proveedor del producto...

CVE-2023-47459

CVE-2023-47459 Descripción Se descubrió una vulnerabilidad en Knovos Discovery v.22.67.0 que permite a un atacante remoto acceder a información confidencial utilizando los componentes: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

CVE-2021-3138

..| Discourse 2.7.0 - CVE-2021-3138 |.. Descripción : Omisión del límite de peticiones que conduce a la omisión de 2FA Versión probada : 2.7.0 Tipo de ataque: Remoto Impacto : Omisión de 2FA Proveedor del producto : https://www.discourse.org Información adicional : Discourse es una plataforma de...