EUVD-2026-125352

Improper verification of cryptographic signature CWE-347 in the firmware update handler of the management service uavmonitorusbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an...

CVE-2026-34910-unifi-poc

UniFi OS CVE Proof of Concept Proof of concept for authorized testing of two vectors identified as: CVE-2026-34910: auth bypass that can lead to command injection and remote code execution via the package update handler. CVE-2026-34909: path traversal that can lead to arbitrary file read via the...

PT-2026-146891

Improper verification of cryptographic signature CWE-347 in the firmware update handler of the management service uavmonitor usbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows a...

CVE-2019-12401

CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

CVE-2026-122038

A flaw was found in EmployeeRecruitmentSystem. A remote, unauthenticated attacker can submit specially crafted input to the Requirement Board Update Handler source/reqformprocessing.php, leading to a Structured Query Language SQL injection vulnerability. This flaw allows an attacker to execute...

EUVD-2026-117187

A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/reqformprocessing.php of the component Requirement Board Update Handler. Such manipulation leads to sql...

CVE-2026-122038

A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/reqformprocessing.php of the component Requirement Board Update Handler. Such manipulation leads to sql...

CVE-2026-122038

The krupalshah EmployeeRecruitmentSystem is vulnerable to a remote SQL injection via the mysql_query function in the source/reqformprocessing.php file within the Requirement Board Update Handler component. The vulnerability affects products up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe. E...

CVE-2026-122038 krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection

A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/reqformprocessing.php of the component Requirement Board Update Handler. Such manipulation leads to sql...

PT-2026-137228

Name of the Vulnerable Software and Affected Versions krupalshah EmployeeRecruitmentSystem affected versions not specified Description A remote SQL injection issue exists within the Requirement Board Update Handler component. The flaw is located in the mysql query function within the...

EUVD-2026-111404

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

CVE-2026-118128

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

CVE-2026-118128

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

CVE-2026-118128 a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

CVE-2026-118128 a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

CVE-2026-118128 a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

CVE-2026-118128

The a2aproject a2a-js software (versions up to 1.1.0 ) is vulnerable to a race condition within the Task Status Update Handler component. Specifically, the flaw exists in the ResultManager.applyStatusUpdate function located in the file src/server/result_manager.ts. This vulnerability can be explo...

PT-2026-127246

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/result manager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading...

CVE-2026-118128: a2aproject a2a-js: A vulnerability has been found in a2aproject a2a-js up to 1.1.0

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/resultmanager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading ...

Agent2Agent A2A JavaScript SDK race condition vulnerability

Agent2Agent A2A JavaScript SDK versions 1.1.0 and earlier contain a race condition vulnerability. This vulnerability stems from a race condition in the function ResultManager.applyStatusUpdate within the file src/server/resultmanager.ts in the Task Status Update Handler component. Exploitation of...