CVE-2026-82618 Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function setrangematrixonstringarray of the file src/Common/opcuatypes/sopcbuiltintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to b...

samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055 PoC — Samsung Bixby の不適切なコンポーネントエクスポート CVE-2026-21055 の Proof of Concept：バージョン 4.0.70.8 より前の Samsung Bixby における Android アプリケーションコンポーネントの不適切なエクスポートにより、ローカルの攻撃者が Bixby の権限で任意のコマンドを実行できます。 概要 このリポジトリには、2つの Python スクリプトが含まれています： 1. analyzecomponents.py — 逆コンパイルされた AndroidManifest.xml...

CVE-2026-82615

itsourcecode Online Medicine Delivery System 1.0 is affected by a SQL injection vulnerability in the Password Recovery Interface . The flaw resides in the Customer::find_phone function within /passwordrecover.php, where unsanitized input in the phonenumber argument is passed to a database query. ...

CVE-2026-82615 itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injection

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::findphone of the file /passwordrecover.php of the component Password Recovery Interface. The manipulation of the argument phonenumber leads to sql injection. Remote...

CVE-2026-82615 itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injection

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::findphone of the file /passwordrecover.php of the component Password Recovery Interface. The manipulation of the argument phonenumber leads to sql injection. Remote...

EUVD-2026-68352

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::findphone of the file /passwordrecover.php of the component Password Recovery Interface. The manipulation of the argument phonenumber leads to sql injection. Remote...

CVE-2026-66908

A flaw was found in the Apache Camel Platform HTTP Main component. When JSON Web Token JWT authentication is configured with a keystore but without specifying an issuer or audience, the system fails to validate the 'iss' and 'aud' claims. This improper authentication allows an attacker to use any...

packetfence-CVE-2024-39024

概要 セキュリティ研究者: ly1g3, ly1g3attuta.io GPGフィンガープリント: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概要: リモートコード実行 - 低権限の認証ユーザーから管理者へのRCE CVE: CVE-2024-3924 タイムライン: 発見 - ly1g3 報告 - ly1g3 修正 - packetfence 参照:...

CVE-2026-82611

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument UUSERNAME causes sql injection. The...

CVE-2026-82613

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...

CVE-2026-82612

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

CVE-2026-82610

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument empemail results in sql injection. It is possible to...

PasteHunter

PasteHunter PasteHunterは、公開されたデータをホストする一連のサイトをクエリするために設計されたPython3アプリケーションです。見つけたすべてのペーストについて、生のコンテンツを一連のYaraルールに対してスキャンし、組織や研究者が利用できる情報を探します。 セットアップ セットアップ手順については、公式ドキュメント https://pastehunter.readthedocs.io/en/latest/installation.html を参照してください。 サポートされている入力 PasteHunterは現在、以下のサイトをサポートしています:...

CVE-2026-82614 itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...

EUVD-2026-68351

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...

CVE-2026-82614 itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...

CVE-2026-82614

itsourcecode Online Medicine Delivery System 1.0 is affected by a SQL injection in the Product Category Filter Interface . The vulnerable function is loadResultList in /index.php?q=product, where manipulation of the Category argument allows an unauthenticated remote attacker to inject SQL. The CV...

net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

A flaw was found in the net/http/httputil package, specifically within the ReverseProxy component. This vulnerability allows the ReverseProxy to forward query parameters that are not visible to Rewrite functions. This occurs because the ReverseProxy does not correctly consider the url.ParseQuery...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

CVE-2026-63621

A flaw was found in Apache Camel Knative component. The Knative consumer in camel-knative improperly handles CloudEvent extension fields in structured content mode, copying them directly into message headers without proper filtering. This allows an unauthenticated attacker to inject internal Came...