490156 matches found
CVE-2026-7188
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...
CVE-2026-7188 SQLi in Armiya Information Technologies' Access Control System
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...
CVE-2026-7188
Armiya Information Technologies Ltd. Co. Access Control System versions before Version 2 are affected by an SQL injection vulnerability caused by improper neutralization of special elements used in an SQL command. The vulnerability is rated CRITICAL (CVSS 9.8) with a network attack vector, low co...
CVE-2026-7188 SQLi in Armiya Information Technologies' Access Control System
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...
EUVD-2026-75293
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...
CVE-2026-84939
Apache FreeMarker versions 2.2.0 through 2.3.34 are vulnerable to a path traversal vulnerability in the template loading mechanism. This flaw occurs when an attacker provides a specially crafted, malformed locale identifier while the localized lookup configuration setting is enabled (which is the...
CVE-2026-87933
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...
PT-2026-89465
Name of the Vulnerable Software and Affected Versions Dell ThinOS 10 versions prior to 2605 10.2616 Description An issue exists where the Security Version Number is mutable to older versions. A low privileged attacker with physical access to the device could exploit this to bypass protection...
PT-2026-89371
Name of the Vulnerable Software and Affected Versions Capgo affected versions not specified Description Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, which leaves stale overrides active. This allows attackers to retain channel-specif...
PT-2026-89434
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
PT-2026-89435
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
PT-2026-89447
Unauthenticated Privilege Escalation in SiteSkite = 2.1.5 versions...
PT-2026-89445
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
PT-2026-89430
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
PT-2026-89428
Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...
CVE-2026-81051: Security Version Number Mutable to Older Versions
Dell ThinOS 10, versions prior to 260510.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass...
CVE-2026-88860: Incorrect Authorization
Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OT...
PT-2026-89432
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...