CVE-2026-3410

A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checkstudid.php. Executing a manipulation of the argument studentid can lead to sql injection. The attack may be launched remotely. The explo...

CVE-2025-71206

creationtimestamp| type| source ---|---|--- 2026-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-145/...

CVE-2025-71209

creationtimestamp| type| source ---|---|--- 2026-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-148/...

CVE-2025-71208

creationtimestamp| type| source ---|---|--- 2026-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-147/...

CVE-2025-71205

creationtimestamp| type| source ---|---|--- 2026-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-144/...

CVE-2025-71207

creationtimestamp| type| source ---|---|--- 2026-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-146/...

CVE-2025-47147

Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...

CVE-2026-24114

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Failure to validate pPortMapIndex may lead to buffer overflows when using strcpy...

CVE-2026-26696

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacheredit.php...

SUSE CVE-2026-27824

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, the calibre Content Server's brute-force protection mechanism uses a ban key derived from both remoteaddr and the X-Forwarded-For header. Since the X-Forwarded-For header i...

CVE-2025-63912

CVE-2025-63912 affects Cohesity TranZman Migration Appliance Release 4.0 Build 14614. The issue is a weak cryptography algorithm used for data encryption (static XOR in some disclosures), allowing an attacker to reverse encryption and expose credentials. Impact is credential exposure as described...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005467 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005649 advisory. In the Linux kernel, the following vulnerability has been resolved: skbuff: skbsegment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 skbuff...

CVE-2026-26889

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managecategory.php...

EUVD-2026-9304

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...

EUVD-2026-9305

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managestock.php...

PT-2026-22769

An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file...

📄 WeGIA 3.5.0 SQL Injection

Proof of concept remote SQL injection exploit for WeGIA versions 3.5.0 and below. Exploit Title: WeGIA 3.5.0 - SQL Injection Date: 2025-10-14 Exploit Author: Onur Demir OnurDemir-Dev Vendor Homepage: https://www.wegia.org Software Link: https://github.com/LabRedesCefetRJ/WeGIA/ Version: " echo...

PT-2026-22738

renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component...

PT-2026-22742

Name of the Vulnerable Software and Affected Versions Django versions 4.2 before 4.2.29 Django versions 5.2 before 5.2.12 Django versions 6.0 before 6.0.3 Django versions 3.2.x and earlier Django versions 4.1.x and earlier Django versions 5.0.x and earlier Description A race condition exists in...