CVE-2026-36945: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manageclient.php...

Marimo Vulnerable Version Scanner

Marimo versions prior to 0.23.0 suffer from a remote code execution vulnerability. This tool scans the version to see if your installation is susceptible but does not provide any exploitation functionality...

CVE-2026-36920: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php...

CVE-2026-30804: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-30809: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-34188: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-4786: Improper Neutralization of Special Elements used in a Command

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

CVE-2026-36946: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/viewdetails.php...

CVE-2026-34864: Improper Restriction of Operations within the Bounds of a Memory Buffer

Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-25208: Integer Overflow or Wraparound

Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335...

CVE-2026-36944: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/viewdetails.php...

CVE-2026-34851: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34850: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-30806: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-34852: Loop with Unreachable Exit Condition

Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34866: Buffer Copy without Checking Size of Input

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34858: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34849: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34186: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-5936: Server-Side Request Forgery (SSRF)

An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints e.g., cloud metadata services, or bypass...