EUVD-2026-50738

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17693

Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17693

Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-66157

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-69936

CodeAstro Membership Management System 1.0 has an SQL Injection vulnerability in /edit_member.php?id=1. The CVE entries consistently state the issue but provide no exploitation details, affected versions beyond 1.0, or remediation guidance in the supplied documents. No mitigation steps or fixed v...

CVE-2025-65342

The CVE describes a Cross-Site Scripting (XSS) vulnerability in code-projects Blood System 1.0, exploitable via the city parameter in /don.php. The connected records confirm the affected product and location, but do not provide concrete exploit details, payloads, versions, or mitigation steps. Ro...

CVE-2025-69935

CVE-2025-69935 affects CodeAstro Membership Management System 1.0. The vulnerability is an SQL Injection in the report.php and revenue_report.php endpoints exploitable via the fromDate parameter. The available documents do not specify the root cause code details, affected versions beyond 1.0, or ...

CVE-2025-69930

CodeAstro Membership Management System 1.0 is affected by an SQL Injection in the page /print_membership_card.php?id=1. The connected sources confirm a SQLi vulnerability in the parameter id. Details on root cause, impacted database, specific payloads, exploitation status, affected versions, or r...

CVE-2025-69931

CVE-2025-69931 affects CodeAstro Membership Management System 1.0, with a vulnerability in the delete_membership.php endpoint where the parameter id=1 is susceptible to SQL Injection. The provided documents state a SQL injection flaw but do not describe affected versions beyond 1.0 or provide rem...

CVE-2025-69937

CodeAstro Membership Management System 1.0 is reported as vulnerable to SQL Injection in the edit_type.php endpoint via the parameter id . Connected sources corroborate this description across multiple feeds (NVD, CVE List, EUVD). The underlying root cause is an unsanitized/unsafely constructed S...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1. The vulnerability is triggered through the id parameter in addmeasurement.php, indicating unsanitized user input enables arbitrary SQL execution. The connected sources (NVD/NVD CVE listings and ...

PT-2026-66243

Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-210565

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

EUVD-2025-210552

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...

EUVD-2025-210554

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

EUVD-2025-210556

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

EUVD-2025-210558

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...

EUVD-2025-210559

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

EUVD-2025-210562

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...