252640 matches found
CVE-2026-85517
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...
CVE-2026-19081
Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...
CVE-2026-19057
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...
CVE-2026-19727 HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issu...
CVE-2026-19081 Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System
Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...
EUVD-2026-71104
Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...
CVE-2026-19081
CVE-2026-19081 is a Missing Authorization vulnerability in Gastromenum Ticket and QR Menu System , a point-of-sale (POS) and QR menu product. The flaw allows an authenticated low-privilege network user to access functionality not properly constrained by ACLs, specifically enabling unauthorized ac...
CVE-2026-19057
Gastromenum Ticket and QR Menu System is affected by a Stored Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The flaw affects versions before 2026.08.31 . The CNA-assigned CVSS 3.1 score is 5.4 (Medium) , with an attack vector of ne...
EUVD-2026-71099
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...
CVE-2026-85517
A sensitive information disclosure vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the file /vehicle_management.sql handled by the SQL Database Backup File Handler . An unknown function in this component allows an unauthenticated remote attacker to disclose s...
EUVD-2026-71097
A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...
CVE-2026-85516
A SQL injection vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the busid parameter of the file /busprofile.php. The vulnerability can be exploited remotely without authentication via manipulation of that argument. CVSS 3.1 rates it 7.3 (HIGH) with low impact...
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...
CVE-2026-85512
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...
kin v0.6.4
AI changed who writes code. Kin changes what they build on. A graph-native code repository for people and AI agents. AI writes a change in seconds. Working out what it touches has not gotten any faster. Every agent reads a repository the way a person would. Search, open files, follow callers, bui...
CVE-2026-85512 SourceCodester Class and Exam Timetabling System session.php authorization
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...
EUVD-2026-70995
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...
Fsociety-CVE-2024-0670-CheckMK-LPE
🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Powerful System Access Made Simple 📦 Overview Hello friend. This tool unlocks advanced access for CheckMK CVE-2024-0670. It takes advantage of weak file handling to gain SYSTEM support. The software includes a specialized persistence feature. It is developed...
CVE-2026-85507
A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the ipmi-oem utility when processing the dell get-system-info cmc-info subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected syste...