CVE-2026-90519 PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90519

PHPGurukul Bank Locker Management System 1.0 is affected by an unrestricted file upload vulnerability in the file /blms/banker/add-locker-form.php, specifically through manipulation of the addressproof argument. A remote attacker with low privileges (e.g., a banker-level account) can exploit this...

EUVD-2026-77007

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90518

A vulnerability in PHPGurukul Bank Locker Management System 1.0 allows remote attackers with low privileges to manipulate the UserType argument in sidebar.php , leading to improper access controls . The flaw permits unauthorized access to sensitive functions of the system, resulting in low impact...

CVE-2026-90514

SourceCodester School Registration and Fee System 1.0 is vulnerable to SQL injection via the Status argument in the file /bilal/normal/save_stud.php (function unspecified). The attack is remote and requires no authentication , rated CVSS 3.1: 7.3 (HIGH) with low impact on confidentiality, integri...

log4j-log4shell-playground

Acerca de Un campo de pruebas para experimentar con las mitigaciones de la vulnerabilidad crítica log4j también conocida como Log4Shell CVE-2021-44228. Este problema en particular reside en la función JndiLookup y en la capacidad de log4j de interpretar TODOS los argumentos de una llamada de...

EUVD-2026-76983

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...

CVE-2026-90498

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor...

EUVD-2026-76972

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor...

CVE-2026-90498

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT , where the vhr.sql file allows exploitation through the use of default credentials . The issue permits remote exploitation with no authentication required and low attack complexity. The CVSS 3.1 base score is 7.3 (HIGH) and CVSS 4.0 is 6.9...

CVE-2026-90498 lenve vhr vhr.sql default credentials

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor...

CVE-2026-90495

A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...

CVE-2026-90488

A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection. Remote exploitation of the attack is possible. The exploit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2023-003033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003033 advisory. Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap...

PT-2026-90853

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

PT-2026-90779

A security vulnerability has been detected in webgjc web robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller listen/controller recover of the file py/web.py. The manipulation of the argument case name leads to os command injection. It is possible to initiate the attack...

PT-2026-90864

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save class.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90488 Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection

A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection. Remote exploitation of the attack is possible. The exploit...

CVE-2026-90488

Xuxueli xxl-job (up to 3.4.2 ) is vulnerable to code injection via the GroovyClassLoader.parseClass function in GlueFactory.java (xxl-job-core). The vulnerability allows remote exploitation with low complexity and low privileges required, resulting in a CVSS 3.1 score of 6.3 (MEDIUM) . A proof-of...

PT-2026-90726

A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobGroupController.java. The manipulation results in improper privilege management. The attack may be launch...