CVE-2026-26886: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...

CVE-2025-66680: Improper Link Resolution Before File Access

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

CVE-2025-63911: Improper Neutralization of Special Elements used in an OS Command

Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability...

CVE-2026-24103: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18multi...

CVE-2026-26892: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /managecarrier.php...

CVE-2025-14456: Use of a Broken or Risky Cryptographic Algorithm

IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...

CVE-2024-55027: Cleartext Storage of Sensitive Information

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uactemp.db...

CVE-2026-25590: Improper Neutralization of Input During Web Page Generation

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in task jobs. This vulnerability is fixed in 1.6.6...

CVE-2026-1713: Authentication Bypass by Primary Weakness

IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD...

CVE-2025-70821: Improper Neutralization of Special Elements used in an SQL Command

renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component...

CVE-2025-36364: Use of Web Browser Cache Containing Sensitive Information

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system...

CVE-2026-26884: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/viewappointment.php...

CVE-2026-26890: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageproduct.php...

Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System

CVE-2024-2997 Scanner !Versionhttps://img.shields.io/badge...

CVE-2025-48636: Improper Limitation of a Pathname to a Restricted Directory

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20424: Out-of-bounds Read

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540...

CVE-2025-47377: Use After Free

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls...

CVE-2025-47373: Out-of-bounds Write

Memory Corruption when accessing buffers with invalid length during TA invocation...

CVE-2026-3413: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /adminsinglestudent.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may...

CVE-2024-43766: Cleartext Transmission of Sensitive Information

In multiple functions of btmblesec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...