EUVD-2026-53470

A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects the function storeProfileImage of the file studentprofilepic.php of the component Shared Upload Helper. Executing a manipulati...

CVE-2026-18903 yeqifu warehouse FileController.java path traversal

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to...

CVE-2026-18903

CVE-2026-18903 affects the yeqifu warehouse. The issue is a path traversal in the FileController.java (src/main/java/com/yeqifu/sys/controller/FileController.java), caused by manipulation of the input path. This could allow remote initiation. Public disclosures exist. No exact vulnerable versions...

CVE-2026-18903

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to...

CVE-2026-18901

A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

EUVD-2026-53030

A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-18900

CVE-2026-18900 affects H3C NX15 V100R017 in the Backend RPC component, specifically the file.exec function under /api/esps. The vulnerability arises from manipulation of the File argument, enabling OS command injection. The issue can be triggered remotely, and public exploits exist. The vendor ha...

CVE-2026-18900 H3C NX15 Backend RPC esps file.exec os command injection

A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation of the argument File causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public...

CVE-2026-18898 UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflow

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to...

CVE-2026-18897

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...

CVE-2026-18897 UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...

CVE-2026-18897

This CVE affects UTT HiPER 1250GW devices up to version v3.2.7-210907-180535 . The vulnerable element is the function strcpy in the file /goform/getOneApConfTempEntry , where manipulating the argument tempName leads to a stack-based buffer overflow . The vulnerability can be triggered remotely , ...

EUVD-2026-53022

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...

CVE-2026-18896 lavkush-maurya Student-Registration-System changepass.php sql injection

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-18859

CVE-2026-18859 affects ESAFENET CDG (up to 20260615). The vulnerability is tied to an unknown function in the file /CDGServer3/ukey/usbkey;logindojojs, where manipulation of the argument keyid leads to SQL injection. Attacks may be performed remotely, and a public exploit is reported as available...

EUVD-2026-53016

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2026-18819

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly...

CVE-2026-18819

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly...

CVE-2026-18818

CVE-2026-18818 concerns Ehco1996 django-sspanel. The vulnerability targets the TicketDetailView in apps/sspanel/views.py of the Support Ticket Handler and allows authorization bypass via manipulation, with remote execution possible. Affected software is stated as up to 2023.12.26 and no longer un...

CVE-2026-18814

A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reloadconfig of the file /api/esps. The manipulation results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this...