CVE-2026-81675 Multiple Vulnerabilities in TOOOLS' iSquad

The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the idseccion parameter. The parameter is directly embedded in a complex SQL query that includes grouping and sorting operations. By injecting SQL syntax, an attacker can disrupt the query structure and...

EUVD-2026-67011

The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the idseccion parameter. The parameter is directly embedded in a complex SQL query that includes grouping and sorting operations. By injecting SQL syntax, an attacker can disrupt the query structure and...

CVE-2026-81675 Multiple Vulnerabilities in TOOOLS' iSquad

The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the idseccion parameter. The parameter is directly embedded in a complex SQL query that includes grouping and sorting operations. By injecting SQL syntax, an attacker can disrupt the query structure and...

CVE-2026-81675

CVE-2026-81675 is an SQL injection vulnerability in TOOOLS' iSquad , specifically in the endpoint /ws/apiprensa/getVideoUltimasSeccion via the id_seccion parameter. The parameter is directly embedded in a complex SQL query involving grouping and sorting operations, allowing an attacker to disrupt...

EUVD-2026-67010

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

CVE-2026-81674 Multiple Vulnerabilities in TOOOLS' iSquad

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

CVE-2026-81674

CVE-2026-81674 affects TOOOLS' iSquad , a web application with a SQL injection vulnerability in the endpoint /ws/apiprensa/getVideoNextPrev via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing an attacker to inject arbitrary SQL syntax. The flaw p...

CVE-2026-81674 Multiple Vulnerabilities in TOOOLS' iSquad

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

CVE-2026-81672 Multiple Vulnerabilities in TOOOLS' iSquad

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

CVE-2026-81672

CVE-2026-81672 is a SQL injection vulnerability in TOOOLS' iSquad , affecting the /ws/apiprensa/getVideoSubcanal endpoint. The root cause is improper handling of the id_video parameter: the application does not sanitize input before constructing SQL queries, leading to execution errors with malic...

CVE-2026-81672 Multiple Vulnerabilities in TOOOLS' iSquad

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

EUVD-2026-67005

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

WordPress All-in-One Video Gallery plugin < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability

Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin All-in-One Video Gallery versions 4.9.2...

cve-2026-6379

CVE-2026-6379 — WP Photo Album Plus :8080/?pageid=" --mode probe python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode probe-calendar python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode version python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode hash Ein verwundbares Ziel antworte...

CVE-2026-59355

In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a request containing an invalid requesturi paired with an unvalidated redirecturi, which can result in an open redirect to...

CVE-2026-31431

📌 CVE-2026-31431 – Privilege Escalation durch Missbrauch von AEAD-Crypto-Sockets 🧠 Überblick CVE-2026-31431 ist eine Linux-Privilege-Escalation-Schwachstelle, die die AFALG Kernel-Crypto-API -Schnittstelle missbraucht. Durch die Erstellung einer bösartigen Interaktion mit AEAD-Sockets Authenticat...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE-Scanner — CVE-2026-39808 Nicht authentifizierte OS-Befehlsinjektion als root in Fortinet FortiSandbox Schwachstelle • Installation • Verwendung • Funktionsweise • Pipeline • Shodan-Dorks • Haftungsausschluss Schwachstelle CVE-2026-39808 ist eine kritische, nicht authentifizierte...

CVE-2026-5027

CVE-2026-5027 - Langflow Path Traversal zu Remote Code Execution Beschreibung Langflow-Versionen bis einschließlich 1.8.4 bereinigen den Parameter filename im Endpunkt POST /api/v2/files nicht. Ein Angreifer kann Pfad-Traversal-Sequenzen ../ verwenden, um Dateien an beliebige Stellen im Dateisyst...

CVE-2026-80571

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS im Krankenhausverwaltungssystem Details zur Schwachstelle CVE-ID: CVE-2023-7173 Schwachstellentyp: Stored XSS Betroffene Komponente: Benutzer-Login-Seite Verwundbarer Parameter: Fullname Herstellerdetails: phpgurukul.com Verwundbare Version: Hospital...