CVE-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

ShieldCrash

ShieldCrash Vulnerabilidad 0day de Windows Defender Microsoft no ha logrado parchear correctamente ShieldBreak CVE-2026-69414; bajo condiciones específicas, todavía es posible desencadenar exactamente el mismo problema que causó ShieldBreak. Aunque Microsoft corrigió varias cosas para evitar...

CVE-2026-92406

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92405

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-80893

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92406 SourceCodester Inventory and Monitoring System btn_functions.php add sql injection

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92406 SourceCodester Inventory and Monitoring System btn_functions.php add sql injection

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92406

CVE-2026-92406 affects SourceCodester Inventory and Monitoring System 1.0 . The vulnerability is a SQL injection in the file /admins/assessments/databank/btn_functions.php?action=add, triggered by manipulating the difficulty_id argument. Remote exploitation is possible without authentication. The...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405

SourceCodester Inventory and Monitoring System 1.0 is vulnerable to SQL injection via the Username argument in the file /index.php . The vulnerability is remotely exploitable without authentication or user interaction, with a CVSS 3.1 base score of 7.3 (High) reflecting low impact on confidential...

EUVD-2026-80891

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92385

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

EUVD-2026-80859

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-92601

Guns through version 8.3.5 , a Java-based enterprise admin framework, contains an improper access control flaw in SysNoticeController . The underlying cause is that the requiredPermission flag defaults to false and is never overridden by any action method, effectively bypassing permission checks....

CVE-2026-92366

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

CVE-2026-92385

A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System version 1.0 , specifically in the file /admin/update_category.php (component: Category Update). The affected function is not publicly identified. An attacker with high privileges (i.e., an authenticate...

EUVD-2026-80835

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2026-92385 SourceCodester Online Food Ordering System Category Update update_category.php cross site scripting

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2026-92385 SourceCodester Online Food Ordering System Category Update update_category.php cross site scripting

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...