22353 matches found
EUVD-2026-63375
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publi...
CVE-2026-76991
itsourcecode Hospital Management System 1.0 is vulnerable to SQL injection via the delid argument in /viewappointmentapproved.php, exploitable remotely with low privileges; a proof-of-concept exploit is publicly available (CVSS 6.3, medium). No patch version is specified in the provided documents.
CVE-2026-76991 itsourcecode Hospital Management System viewappointmentapproved.php sql injection
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publi...
EUVD-2026-63194
A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/selectmediapost.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published...
CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...
EUVD-2026-63136
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
EUVD-2026-63165
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection
A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...
EUVD-2026-63186
A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...
PT-2026-78873
Name of the Vulnerable Software and Affected Versions code-projects Employee Management System version 1.0 Description A SQL injection flaw exists in the Admin Login Endpoint within the /process/aprocess.php file. The issue occurs when the mailuid argument is manipulated, allowing for remote...
The vulnerability of the PostgreSQL database management system, related to errors in data type mixing, allows a hacker to execute arbitrary code.
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the PostgreSQL database management system, related to errors in data type mixing, allows a hacker to execute arbitrary code.
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the social_login.cgi script of the Zyxel networking device allows attackers to bypass existing security mechanisms.
The vulnerability of the sociallogin.cgi script of the Zyxel networking devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of DDL commands in the PostgreSQL database management system allows a hacker to trigger a service failure.
The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...
The vulnerability of the refint module in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the refint module in the PostgreSQL database management system is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-71113
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71095
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-28 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu54ipjnz722...
CVE-2026-62552
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71057
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:27+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 23:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3zc63ycf2y...