269025 matches found
CVE-2026-85225: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...
CVE-2026-85043: Incomplete Cleanup
Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...
VulnCheck KEV: CVE-2024-4956
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1...
The vulnerability of the `__btrfs_run_delayed_items()` function in the fs/btrfs/delayed-inode.c file of the Btrfs file system in the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the btrfsrundelayeditems function in the fs/btrfs/delayed-inode.c file of the Btrfs file system in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software, allowing a hacker to gain full control over the system
The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system...
CVE-2026-3416: Use of Insufficiently Random Values
The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...
PT-2026-85036
CRMEB through 6.0.0 fails to validate message ownership in the edit message handler of MessageSystemController.php, allowing authenticated users to modify arbitrary system inbox messages. Attackers can update any message's columns including is del, look, and uid to delete, mark read, or reassign...
The vulnerability of the papr_hvpipe_handle_read() function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module allows a hacker to cause a service failure under Linux’s PowerPC platform.
The vulnerability of the paprhvpipehandleread function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module is related to the use of an uninitialized resource on the PowerPC platform. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the R7WebsSecurityHandler() function in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device, which allows a hacker to gain full control over the system
The vulnerability of function R7WebsSecurityHandler in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device for routers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
PT-2026-85203
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...
PT-2026-85271
A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...
CVE-2026-85187: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...
CVE-2026-85186: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.php?action=photos of the component Customer Controller. Executing a manipulation of the argument photo can lead to...
The vulnerability of the do_abort_log_replay() function in the fs/btrfs/tree-log.c module of the btrfs file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the doabortlogreplay function in the fs/btrfs/tree-log.c file of the btrfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...
BAS-Guardian — Updated!
BAS Guardian - Free Building Automation System BAS Security Scanner BAS Guardian is a free, open-source cybersecurity scanning tool that helps facility managers, IT teams, and OT security professionals detect internet-exposed Building Automation Systems BAS, BACnet devices, and HVAC/BMS controlle...
USN-8661-4: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
USN-8715-1: Linux kernel (Oracle) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
USN-8714-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309...
USN-8714-1 linux, linux-aws, linux-azure, linux-azure-fips, linux-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309...
