490244 matches found
EUVD-2026-75518
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...
EUVD-2026-75517
Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...
EUVD-2026-75514
Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...
EUVD-2026-75511
Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...
EUVD-2026-75512
Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...
CVE-2026-66632 WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Content Injection vulnerability
Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...
CVE-2026-66674 WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability
Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...
CVE-2026-88871
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/CustomizeUser/setSubscribers.json.php endpoint. The script reads usersid and ExtraSubscribers from $REQUEST and calls...
CVE-2026-88860
Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OT...
CVE-2026-38626
Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php...
CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
CVE-2026-9163
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...
CVE-2026-9166
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...
CVE-2026-9166
CVE-2026-9166 is a Path Traversal vulnerability (local file inclusion) in GIS Informatics GisLab Laboratory Management System , affecting versions 1.4.03 through 1.5 (exclusive) . The flaw is classified as Improper Limitation of a Pathname to a Restricted Directory . The CVSS 3.1 score is 7.5 (HI...
EUVD-2026-75405
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...
CVE-2026-9163 SQLi in GIS Informatics' GisLab Laboratory Management System
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...
CVE-2026-9163 SQLi in GIS Informatics' GisLab Laboratory Management System
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...
CVE-2026-9163
CVE-2026-9163 is a SQL injection vulnerability in GIS Informatics' GisLab Laboratory Management System , caused by improper neutralization of special elements in SQL commands. It affects versions 1.4.03 through before 1.5 , and the fix is available in version 1.5 . The CNA-assigned CVSS 3.1 score...
CVE-2026-87962
t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or...
