CVE-2026-105248 vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105247 SourceCodester Online Reviewer Management System btn_functions.php course sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

CVE-2019-25777

YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...

CVE-2017-20285

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...

CVE-2026-105246

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2026-105245

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105238

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

CVE-2026-78371

The File Uploads Addon for WooCommerce WordPress plugin, specifically versions 1.7.2 through 1.7.5 , contains a vulnerability where the system fails to verify the identity of the user requesting a customer-uploaded file. This lack of authorization allows unauthenticated attackers who can predict ...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin (version 1.4.3 and earlier ) is vulnerable to an unauthenticated cross-order payment-status forgery . The root cause is a failure to verify that a payment-confirmation request correctly matches the associated order and customer. This allows an unau...

CVE-2026-13607

The File Uploads Addon for WooCommerce WordPress plugin (versions through 1.7.6 ) contains a vulnerability where customer-uploaded files are stored in a publicly web-accessible directory . Because the plugin's access restrictions are ineffective, an unauthenticated attacker who can guess or know ...

CVE-2026-105237

The linlinjava litemall application (up to version 1.8.0 ) is vulnerable to an improper restriction of excessive authentication attempts within the Login Endpoint component. Specifically, the issue resides in the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthCon...

CVE-2026-105306

A flaw exists in the Dynamic Client Registration flow of the Keycloak identity and access management server. The registration process fails to filter security-sensitive client attributes during new client creation. An attacker possessing a valid Initial Access Token can register a client that byp...

CVE-2026-105302

A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...

CVE-2026-105233

A session fixation vulnerability exists in the Login Flow component of the kishor-23 food-waste-management-system (specifically within the login.php file). The root cause involves the manipulation of the PHPSESSID argument, which allows for remote exploitation. While the exploit has been disclose...

CVE-2026-105301

A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When configured to check certificate revocation via CRL Distribution Points or OCSP , the server may process a specially crafted certificate provided by an attacker. This causes K...

CVE-2026-105232

A SQL injection vulnerability exists in the Registration Page component of the kishor-23 food-waste-management-system (specifically within the delivery/deliverysignup.php file). The flaw is caused by the improper manipulation of the username , email , or location arguments, allowing for remote ex...

CVE-2026-105231

A SQL injection vulnerability exists in the Admin Registration component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the admin/signup.php file fails to properly sanitize inputs, allowing an attacker to manipulate the email , username , or location argu...

CVE-2026-105230

The kishor-23 food-waste-management-system is vulnerable to a SQL injection vulnerability within an unknown function of the delivery/deliverymyord.php file. Attackers can remotely initiate this attack by manipulating the delivery_person_id/order_id arguments. While the exploit has been disclosed ...

CVE-2026-105229

A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...

CVE-2026-105226

A code injection vulnerability exists in osCommerce osCommerce2 up to version 2.3.4.1 within the Newsletter Management component. The flaw originates from the include function in the admin/newsletters.php file, where manipulating the module argument allows for remote code execution. While the pro...

CVE-2026-105225

A code injection vulnerability exists in osCommerce osCommerce2 versions up to 2.3.4.1 . The flaw resides in the Payment Page component, specifically within the include function of the includes/classes/payment.php file. Attackers can achieve remote code execution by manipulating the MODULE_PAYMEN...

CVE-2026-105188

The code-projects Human Resource Management System 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability within the Live Event History component. Specifically, manipulating the eventSubject argument in the file /views/admin/liveEventHistory.php allows for the execution of malicious scri...

CVE-2026-105187

A SQL injection vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/key.php file. By manipulating the ID argument, an attacker can initiate a remote attack to execute arbitrary SQL commands. The documents state that the exploit has been disclo...

CVE-2026-105186

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /new.php file. An attacker can exploit this flaw by manipulating the schedid argument, which allows for remote execution. The documents confirm that an exploit has been published...

CVE-2026-105185

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unknown function of the /admin/examinee.php file, where manipulating the ID argument allows for remote execution of arbitrary SQL commands. The documents state that an exploit is n...

CVE-2026-105184

A security vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/creteria.php file. Improper handling of the ID argument allows for a SQL injection attack, which can be launched remotely. Public exploits for this vulnerability have been disclose...

CVE-2026-105183

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /admin/confirm.php file. The flaw is caused by improper handling of the schedid argument, which allows for remote exploitation. Public exploit code is available, though no specif...

CVE-2026-105182

A security flaw exists in SourceCodester Online Reviewer Management System 1.0 within the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. An SQL injection vulnerability is triggered by manipulating the Title argument. This flaw can be exploited remotely, and the ex...

CVE-2026-105181

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located in the processing of the register1.php file, where manipulating the fname argument allows for remote exploitation. While the specific processing logic is not detailed in the documents, the v...

CVE-2026-105180

A vulnerability exists in Jeebase version 0.0.1 within the UserService component, specifically affecting the updateUser function located at /user/update/info . An attacker can remotely execute a manipulation of the user/tempUser argument to cause dynamically-determined object attributes (CWE-915,...

CVE-2026-105179

The SourceCodester Drug Recommendation System 1.0 is affected by a vulnerability in the Password Handler component, specifically within the Admin/add_user.php file. A manipulation of the Password argument leads to the missing encryption of sensitive data . This vulnerability is exploitable via re...

CVE-2026-20543

A logic error in the Modem component can lead to local information disclosure without requiring additional execution privileges. This vulnerability does not require user interaction for exploitation. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). No specific exploit det...

CVE-2026-20542

The apusys component is vulnerable to a memory corruption issue caused by a use after free vulnerability (CWE-416). This flaw could enable a local escalation of privilege if a malicious actor has already acquired System privilege on the affected system. No user interaction is required for exploit...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could result in a remote denial of service . No additional execution privileges or user inte...

CVE-2026-20540

The Modem component is vulnerable to an out of bounds read caused by a missing bounds check. If a user equipment (UE) connects to a rogue base station controlled by an attacker, it could lead to a remote denial of service . No additional privileges or user interaction are required for exploitatio...

CVE-2026-20539

A missing bounds check in the Modem component leads to a possible out of bounds read . This vulnerability can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requir...

CVE-2026-20538

A vulnerability exists in the Modem component due to a missing permission check , which can lead to an out of bounds read . An attacker controlling a rogue base station can exploit this to cause a remote denial of service when a user equipment (UE) connects to it. No additional execution privileg...

CVE-2026-20537

A memory corruption vulnerability exists in aidl due to a use after free condition (CWE-416 ). This flaw could allow a malicious actor with System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS111852...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. If a malicious actor has already obtained System privilege , they could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Pa...

CVE-2026-20535

A vulnerability in aidl allows for a local escalation of privilege due to a missing permission check . An attacker who has already obtained System privilege can exploit this flaw to further escalate privileges without requiring user interaction. Remediation is available via Patch ID: ALPS11185216...

CVE-2026-20534

A vulnerability exists in the Modem component due to an out-of-bounds read caused by an incorrect bounds check. If a UE connects to a rogue base station controlled by an attacker, this could lead to a remote denial of service . No additional execution privileges or user interaction are required f...

CVE-2026-20533

A vulnerability exists in the display component that allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor has already obtained System privilege , they can exploit this flaw without user interaction. Remediation is available via Patch ID: ALPS112966...

CVE-2026-20532

A double free vulnerability exists in apu , which can lead to an application crash . This vulnerability allows for a local denial of service without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249024 (Issue ID: MSV-9168). No informat...

CVE-2026-20531

A memory corruption vulnerability exists in apu due to a use after free condition. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249016 (Issue ID: MSV-9169). No specific e...

CVE-2026-20530

A vulnerability in the display component allows for an out-of-bounds write due to a missing bounds check . This flaw could enable a local escalation of privilege for a malicious actor who has already obtained System privilege . No user interaction is required for exploitation. Remediation is avai...

CVE-2026-20529

A vulnerability exists in battery functionality due to a missing bounds check , leading to a possible out-of-bounds write . A malicious actor who has already obtained System privilege could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interactio...

CVE-2026-20528

The ccci component is vulnerable to an out-of-bounds write and read caused by a missing bounds check. This flaw could result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker already possesses System privilege . Exploitation requires user inter...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...