264173 matches found
EUVD-2026-107410
A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...
CVE-2026-114263 ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection
A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...
CVE-2026-76477
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...
CVE-2026-114258
A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...
Trigger.dev: Cross-tenant SQL Injection In The TSQL Query Compiler (POST /api/v1/query) Via Unsanitized Window-function
Summary A cross-tenant SQL injection in the TSQL query compiler lets any authenticated trigger.dev customer read every other tenant's analytics data. The customer-facing query endpoint "POST /api/v1/query" accepts a TSQL/TRQL query that is compiled to ClickHouse SQL by "internal-packages/tsql". T...
CVE-2026-114257
A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...
CVE-2026-114254
A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...
CVE-2026-114255
A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...
CVE-2026-114256
A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...
CVE-2026-114258 oretnom23 file-management-system-php File Management files.php sql injection
A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...
CVE-2026-114258
The oretnom23 file-management-system-php software contains an SQL injection vulnerability within the File Management component, specifically affecting the files.php file. The root cause is the improper handling of the fid/id argument, which allows for remote attack initiation. While the exploit i...
EUVD-2026-107390
A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...
CVE-2026-114258 oretnom23 file-management-system-php File Management files.php sql injection
A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...
CVE-2026-114258 oretnom23 file-management-system-php File Management files.php sql injection
A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...
CVE-2026-76477 Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...
EUVD-2026-107389
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...
CVE-2026-76477 Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...
CVE-2026-76477
Several products including Cisco Emergency Responder , Cisco Prime Collaboration Deployment , Cisco Unified Communications Manager (Unified CM) , Unified CM IM&P , Unified CM SME , and Cisco Unity Connection are affected by vulnerabilities tracked under CVE-2026-76477 . The root cause involves th...
InletGuard
InletGuard InletGuard is a native PHP extension like curl...
CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection
A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql...