EUVD-2026-77538

A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-90791 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free

A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-90791

A use after free vulnerability was identified in the GPAC media processing toolkit, specifically in the function gf_node_unregister within scenegraph/base_scenegraph.c of the MP4Box component (affected up to commit f1219cde). The flaw can be triggered remotely with no privileges but requires user...

CVE-2026-90786

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90787

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

CVE-2026-90785

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyzestruct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-90788

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-90789 itsourcecode Leave Management System login.php sql injection

A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...

EUVD-2026-77526

A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...

CVE-2026-90789

itsourcecode Leave Management System 1.0 is affected by a SQL injection vulnerability in /login.php . By manipulating the user_email parameter, an unauthenticated remote attacker can inject SQL commands. The CVSS 3.1 score is 7.3 (HIGH) with low impact on confidentiality, integrity, and availabil...

CVE-2026-90789 itsourcecode Leave Management System login.php sql injection

A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...

CVE-2026-12985 Mattermost DCR redirect URI allowlist bypass via improper URL component validation

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7 Mattermost failed to validate Dynamic Client Registration redirect URIs by URL component matching glob patterns against the raw URI string instead which allows a remote unauthenticated attacker to register an OAuth client with ...

CVE-2026-90788

A remote OS command injection vulnerability affects the Template Handler component of magicblack MacCMS10 (version 2026.1000.4055), specifically via manipulation of the file admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html. The attack requires high privileges (authe...

CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

EUVD-2026-77489

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-90787

A vulnerability in Soarkey StudentManagement (up to commit e08f7f1d5015af407aa4cca0ada3dea189b4937e) affects the Registration Workflow component. The root cause is improper privilege management in the RegisterServlet.doPost function of code/WebContent/register.html, triggered by manipulation of t...

CVE-2026-90787 Soarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

EUVD-2026-77479

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

CVE-2026-90787 Soarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

EUVD-2026-77478

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...