CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-80891

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92385

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

EUVD-2026-80859

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-92601

Guns through version 8.3.5 , a Java-based enterprise admin framework, contains an improper access control flaw in SysNoticeController . The underlying cause is that the requiredPermission flag defaults to false and is never overridden by any action method, effectively bypassing permission checks....

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the amdgpudmcrtcresetstate function, which releases the old state before allocating a new one. If the kzalloc function fails and returns, the state pointer is not updated, leaving a dangling pointer pointing to freed...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the destruction of the extent buffer in memory when clearing tree blocks that have been released but are still dirty on a zoned file system. This buffer may still be referenced, causing subsequent operations to read the...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that after the drmschedinit function fails to initialize the scheduler, it still calls drmschedfini, resulting in the release of scheduler resources that are not fully initialized. This can potentially lead to...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability. This vulnerability arises because the amdgpudmplanedrmplanereset function first releases an old state and then allocates a new one. When kzalloc fails, the state pointer is not updated, resulting in a null pointer that points to freed memory. Th...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the error handling path in the drm/msm display driver, which repeatedly destroys the KMS state when KMS initialization fails. This may lead to reuse after release, causing system crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.1.107, 6.6.47, 6.9.7, and 6.10 have security vulnerabilities. These vulnerabilities stem from the ext4 file system, where during concurrent xattr operations using the ea inode option, an ABBA deadlock occurs between the transaction running in the ext4xattr inodecachefi...

Malicious code in @traktis/environment (npm)

Source: amazon-inspector 6b9bdabc95f4e8bc70e348557c1cae7d2447d9bd1405ac7a23945ded47ec04a8 package.json declares preinstall and postinstall lifecycle scripts that invoke curl against the hardcoded cleartext endpoint http://tko.amgsec.com/depconf/traktis-environment/, sending the output of whoami,...

CVE-2026-92366

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

EUVD-2026-80835

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2026-92385 SourceCodester Online Food Ordering System Category Update update_category.php cross site scripting

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2026-92385

A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System version 1.0 , specifically in the file /admin/update_category.php (component: Category Update). The affected function is not publicly identified. An attacker with high privileges (i.e., an authenticate...

CVE-2026-92385 SourceCodester Online Food Ordering System Category Update update_category.php cross site scripting

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2026-92364

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2026-92366

code-projects Matrimonial System 1.0 is vulnerable to SQL injection in the Regular Search component via the /search.php file. Unauthenticated remote attackers can manipulate the arguments sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax to inject SQL. The impact is ...