EUVD-2026-92096

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...

CVE-2026-105156

A weakness in YzmCMS up to version 7.6 affects the Password function within the /common/function/system.func.php file of the MD5 Handler component. A remote attacker can manipulate the pass argument to generate password hashes with insufficient computational effort (CWE-916, CWE-326). While the a...

CVE-2026-105148

A server-side request forgery (SSRF) vulnerability exists in SciPhi-AI R2R versions up to 3.6.6 . The flaw is located in the Retrieval Completion API Endpoint within the file py/shared/abstractions/llm.py. Specifically, manipulation of the generation_config.api_base argument allows for remote exe...

CVE-2026-105146

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2023-31704

CVE-2023-31704 descripción Sourcecodester Online Computer and Laptop Store 1.0 es vulnerable a Control de Acceso Incorrecto, lo que permite a atacantes remotos elevar privilegios al rol de administrador. Tipo de Vulnerabilidad Control de Acceso Incorrecto Vendedor del Producto Sourcecodster Códig...

cve-2018-15473

CVE-2018-15473: Enumeración de Usuarios de OpenSSH OpenSSH hasta 7.7 permite a atacantes remotos enumerar nombres de usuario válidos enviando solicitudes de autenticación malformadas y observando respuestas diferenciales del servidor. Detalles Campo| Valor ---|--- Software afectado| OpenSSH 2.3...

CVE-2025-25617

CVE-2025-25617 Unifiedtransform v2.0 es vulnerable a un control de acceso incorrecto, permitiendo a los profesores crear entradas de programa de estudios — un rol destinado únicamente a los administradores. Vendedor: Unifiedtransform PoC Paso 1: Inicia sesión en la aplicación como Profesor. Paso ...

CVE-2023-30092

CVE-2023-30092 Todos los detalles sobre CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Enlace del software: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Tipo de vulnerabilidad: Inyección SQL Componente afectado: Parámetro QTY Impacto...

EUVD-2026-92092

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105137

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105137

A vulnerability exists in Laradock (versions up to 20.4 ) within the Build Process component. Specifically, an unknown function in the workspace/Dockerfile allows for the download of code without integrity checks . This flaw can be exploited remotely with high complexity, and public exploit code ...

EUVD-2026-92085

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105133

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack...

CVE-2026-105135

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...

CVE-2026-105135 InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...

CVE-2026-105135

The InternLM MindSearch software (version 0.1.0 ) contains a code injection vulnerability within the Planner Agent component. Specifically, the ExecutionAction.run function in the file mindsearch/agent/graph.py is affected. The root cause is the improper handling of argument inputs , which allows...

EUVD-2026-92077

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...

CVE-2021-31761

..| CVE-2021-31761 |.. Descripción : Aprovechando un ataque de Cross-Site Scripting Reflejado XSS para obtener una Ejecución Remota de Comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 Última versión de GitHub 07/03/2021 Tipo de ataque: Remoto...

CVE-2026-105133 Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack...

CVE-2019-19550

CVE-2019-19550 Descripción Omisión remota de autenticación en Senior Rubiweb 6.2.34.28 y 6.2.34.37 permite el acceso de administrador a información sensible de los usuarios afectados que utilizan versiones vulnerables. El atacante solo necesita proporcionar la URL correcta. Fechas Importantes...