CVE-2026-102627 Security Vulnerability identified in IBM TRIRIGA - Zip Slip

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

CVE-2026-102627

The IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to a Zip Slip path traversal vulnerability (CWE-22 ). A remote authenticated attacker could exploit improper validation of file paths during archive extraction to achieve arbitrary code execution . The vulnerability ...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to take attendance of fellow teachers through the endpoint /courses/teacher/index?teacherid=2&semesterid=1. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Naviga...

CVE-2026-108937 code-projects Online Ticket Reservation System medallion.sql file information disclosure

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-108937

A vulnerability exists in the code-projects Online Ticket Reservation System 1.0 affecting the /database/medallion.sql file. This flaw allows for the exposure of file and directory information through remote manipulation. The vulnerability is associated with CWE-538 and CWE-200 . While the specif...

VulnerableSpringDataRest

Vulnerable Spring DataRest App This is an intentionally Spring Data REST Application to test and demostrate the CVE-2017-8046 vulnerability and the challenges of testing Command Injection and Remote Code Execution via REST apis It has support for Swagger UI to use with tools where Swagger...

CVE-2021-22911

CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1 The getPasswordPolicy method is vulnerable to NoSQL injection attacks and does not require authentication/authorization. It can be used to take over accounts by leaking password reset tokens. Taki...

CVE-2023-32560

CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...

CVE-2026-17475 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control...

CVE-2026-19620

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a security flaw that allows a remote attacker to gain unauthorized administrative access . This issue is caused by improper authentication (CWE-288). The vulnerability has a CVSS 3.1 base score of 8.8 (HIGH) , indicating high impact on...

CVE-2026-19622 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests...

CVE-2026-85457

IBM Planning Analytics versions 2.0 and 2.1 are affected by a stack-based buffer overflow (CWE-121). This vulnerability could allow a remote authenticated attacker to perform arbitrary code execution . No specific exploit details or remediation instructions are provided in the documents.

CVE-2024-4577-PHP-RCE

CVE-2024-4577-PHP-RCE Project Introduction and Principle The world's first CVE-2024-4577 PHP-CGI RCE vulnerability EXP utilizing the PHP default environment XAMPP. The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF,...

CVE-2026-108936 Edimax BR-6208AC QoS Page formQoS cross site scripting

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may ...

CVE-2026-108936

A security vulnerability exists in the Edimax BR-6208AC (version 1.32) within the QoS Page component. The issue is located in an unknown part of the /goform/formQoS file, where improper input handling allows for cross-site scripting (XSS) . This vulnerability can be initiated remotely . Public ex...

CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82101

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a path traversal vulnerability (CWE-22 ). This flaw could allow a remote authenticated attacker to cause a denial of service (DoS). To remediate this issue, IBM strongly recommends upgrading to DataStage on Cloud Pak for Data 5....

CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor...

CVE-2026-82103

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to an information disclosure vulnerability (CVE-2026-82103 ). A remote authenticated attacker could obtain sensitive information due to the exposure of data to an unauthorized actor. This issue is classified under CWE-200 and has a...