CVE-2026-86208

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /deleteteacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...

EUVD-2026-72088

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /deleteuser.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

EUVD-2026-72067

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86167

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgponloid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

CVE-2026-86167 Tenda HG10 Boa formgponConf os command injection

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgponloid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

EUVD-2026-72055

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgponloid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

CVE-2026-86167

Tenda HG10 (firmware 300001138) is affected by an OS command injection vulnerability in the Boa component. The vulnerable function formgponConf , located at /boaform/admin/formgponConf, allows an attacker to manipulate the fmgpon_loid argument to inject and execute arbitrary OS commands. The vuln...

CVE-2026-86161

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-86163

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/pro_del.php , triggered by manipulation of the ID argument. The attack is exploitable remotely and requires low privileges with no user interaction. The base CVSS 3.1 score is 6.3 (MEDIUM) with l...

CVE-2026-86161

SourceCodester Online Voting System 1.0 is vulnerable to SQL injection in the file /ajax.php?action=delete_category via manipulation of the ID argument. The vulnerability is remotely exploitable without authentication or user interaction. The exploit has been made public at a proof-of-concept mat...

EUVD-2026-72045

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-86161 SourceCodester Online Voting System ajax.php delete_category sql injection

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-86153

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

EUVD-2026-72038

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

CVE-2026-86153 Tenda CP3 Redirect.cpp SetRedirectEnable privileges management

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

CVE-2026-86153

Tenda CP3 (firmware 27.5.57.101 ) is affected by an improper privilege management vulnerability in the function CRedirServer::SetRedirectEnable within the file Functions/Redirect.cpp . The flaw allows remote exploitation over the network with low complexity , though it requires high privileges (p...

PT-2026-86478

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

PT-2026-86465

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...

ffmpeg-8-8.1.2-3.1 on GA media (moderate)

ffmpeg-8-8.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11682-1 Rating: moderate Cross-References: CVE-2026-58049 CVE-2026-64833 CVE-2026-64834 CVE-2026-65703 CVE-2026-65704 CVE-2026-65705 CVE-2026-65706 CVE-2026-66036 CVE-2026-66037 CVE-2026-70628 CVE-2026-70629 CVE-2026-70630...

CVE-2026-85704 ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...