CVE-2026-90879 zyx0814 FilePress Publish search.php sql injection

A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such manipulation of the argument orderby/order leads to sql injection. The attack can be launched remotely. The exploit is...

CVE-2026-90878 vllm-project vLLM Jinja Template Rendering completions resource consumption

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

CVE-2026-90877 SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /updaterequirementstatus.php. The manipulation of the argument haydi results in sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2026-90876 SourceCodester Online Faculty Clearance System delete_requirement.php sql injection

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-90858 subhajitkhan online-clinic-management-system adminappview.php session_start authorization

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function sessionstart of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...

CVE-2026-90857 SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

CVE-2026-90856

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

CVE-2026-90855

CVE-2026-90855 is a SQL injection vulnerability in SourceCodester/katojkalemba Online Food Ordering System 1.0 , located in the file /web/order.php. The flaw is triggered by manipulation of the ID argument , allowing a remote, unauthenticated attacker to execute arbitrary SQL queries. The CVSS 3....

CVE-2026-90854

CVE-2026-90854 is a SQL injection vulnerability in the SourceCodester/katojkalemba Online Food Ordering System v1.0 , specifically in the file /web/category-foods.php where the ID argument is unsafely processed. The attack can be launched remotely over the network without authentication or user i...

CVE-2026-88262

bizwell xClick (groupware solution) is affected by an insufficient session expiration vulnerability that allows Authentication Bypass . The issue impacts versions R2, R3, and R3.1 . The vulnerability is network-reachable with low complexity and no prior privileges required, though it demands pass...

CVE-2026-90852

luben zstd-jni (a Java binding for the Zstandard compression library) is affected by a use-after-free vulnerability in the Dictionary Sharing component, specifically in the function ZstdCompressCtx.loadDict within ZstdCompressCtx.java. Affected versions are up to 1.5.7-13 . The vulnerability can ...

CVE-2026-88261

bizwell xClick is affected by an improper input validation vulnerability that allows Stored XSS in versions R2, R3, and R3.1 . The CVSS 4.0 score is 5.1 (MEDIUM) , with a network attack vector, low complexity, low privileges required, and passive user interaction, resulting in low confidentiality...

CVE-2026-90851

PHPGurukul Hostel Management System 3.0 contains an improper access control flaw in the file /admin/includes/checklogin.php . Manipulation of the ID argument allows a remote, low-privileged attacker (no user interaction required) to bypass access controls. The CVSS 3.1 score is 6.3 (MEDIUM) with ...

CVE-2026-90850

CVE-2026-90850 affects PHPGurukul Hostel Management System 3.0 , specifically an unspecified function in the file /admin/manage-students.php . The vulnerability enables cross-site scripting (XSS) via remote manipulation. Exploitation requires high privileges (authenticated admin-level access) and...

CVE-2026-90849

CVE-2026-90849 affects SourceCodester College Notes Gallery Management System 1.0 . The vulnerability is a SQL injection in the file /College/login.php, triggered by manipulation of the User argument. The attack vector is remote with no authentication required and low complexity . Per the CVSS 3....

CVE-2026-91774

Yao through v1.0.0-rc22 suffers from a missing authorization check on the OpenAPI GET /user/teams/:id endpoint. The endpoint authenticates the caller but fails to verify team membership, allowing any logged-in user who knows a team identifier to retrieve full team records, including name, descrip...

CVE-2026-91773

Soft Serve (a self-hosted Git server) versions 0.7.1 through 0.11.6 are affected by an information disclosure flaw in Git LFS lock queries , which are not scoped by repository. An authenticated user with write access to any repository can enumerate lock IDs globally, recovering locked file paths,...

CVE-2026-91772

Halo through version 2.26.1 is affected by an open redirect vulnerability in the anonymous thumbnail endpoint , which fails to validate the uri query parameter. This allows attackers to craft malicious links on a trusted Halo domain that redirect visitors to arbitrary external sites, enabling phi...

CVE-2026-91771

Weights & Biases wandb (Python SDK) before 0.29.0 is affected by a path traversal vulnerability in the File.download function. The function fails to validate file names received from server responses, allowing an attacker who controls the W&B backend to supply file names containing directory trav...

CVE-2026-91770

IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints (skill, education, certification, language, leave, attendance, and status), allowing any authenticated employee to substitute arbitrary employee IDs and read colleagues' HR records. The vulnerability is...

CVE-2026-90848

Governikus AusweisApp versions up to 2.5.4 are affected by a cross-site scripting (XSS) vulnerability in the StartPAOSResponse Handler component. The root cause is the manipulation of the ResultMessage argument, allowing a remote attacker to execute script in the context of the application. The a...

CVE-2026-85575

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin (versions up to and including 4.9.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the shopengine_product_title_header_size parameter, caused by insufficient input sanitization and output escaping . Authenticated attack...

CVE-2026-85657

The PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.15.0 . The flaw resides in the Co-Authors, Multiple Authors, and Guest Authors Author Box functionality, where the profile_fields_user_email_value_prefix paramete...

CVE-2026-90847

EFM ipTIME C200E version 1.094 is affected by an OS command injection in the iux_set.cgi file of the System Setup component. The attack is remote and requires high privileges (authenticated access), but upon success yields a scope change with high impact on confidentiality, integrity, and availab...

CVE-2026-90846

CVE-2026-90846 is an SQL injection vulnerability in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/forgot-password.php . The email/contactno parameter is not properly sanitized, allowing a remote, unauthenticated attacker to inject SQL. The exploit has been publicly ...

CVE-2026-91752

GNU libextractor before 1.15 contains a stack-based buffer overflow in the process_star_office function, where a variable-length stack array is sized from attacker-controlled OLE2 stream data. A crafted StarOffice document can force up to 4 MB of stack allocation, triggering a stack overflow that...

CVE-2026-91750

WeKnora before 0.7.0 (developed by Tencent) is vulnerable to SSRF via unvalidated HTTP redirects. The flaw resides in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint, which fails to re-validate redirect targets after the initial SSRF check when downloading documents from user-supplied...

CVE-2026-91751

Flextype CMS versions through 1.0.0-alpha.3 are affected by a path traversal vulnerability in the Entries REST API , caused by improper validation of the id and new_id parameters. Any holder of a valid API token can use traversal sequences in API requests to escape the project's entries directory...

CVE-2026-90845

CVE-2026-90845 is a cross-site scripting (XSS) flaw in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/includes/sidebar.php . Manipulating the FullName argument allows a remote attacker with low privileges to execute script in a victim's browser, requiring user intera...

CVE-2026-90844

PHPGurukul Daily Expense Tracker System 1.1 is affected by a SQL injection vulnerability in the Login component, specifically in the file /dets/index.php. The flaw is triggered by manipulating the email argument, allowing remote unauthenticated exploitation over the network. The CVSS v3.1 base sc...

CVE-2026-90843

SabyasachiRana WebMap (up to commit 8b95fe4) contains an OS command injection in the nmap_newscan function within functions_nmap.py (New Nmap Scan Handler). By manipulating the target/params argument, an unauthenticated remote attacker can inject arbitrary commands. The exploit is disclosed publi...

CVE-2026-90842

PHPGurukul Blood Donor Management System 1.0 is affected by a cleartext storage vulnerability in application/models/admin/Login_Model.php . Manipulating the arguments password , email , currentpassword , dbcurrentpwd , or newpassword allows sensitive data to be stored in plaintext on disk. The at...

CVE-2026-90841

A SQL injection vulnerability in PHPGurukul Blood Donor Management System 1.0 affects the Report Endpoint (file /application/controllers/admin/Report.php). Manipulating the fromdate/todate arguments allows a remote, unauthenticated attacker to inject SQL, potentially compromising confidentiality,...

CVE-2026-90840

PHPGurukul Blood Donor Management System 1.0 is affected by an improper authentication vulnerability in the __construct function of /application/controllers/admin/Dashboard.php (Admin Controllers component). The flaw can be exploited remotely with no privileges required and no user interaction , ...

CVE-2026-90835

A cross-site scripting (XSS) vulnerability exists in michaelliao itranswarp (up to version 2.19), specifically in the function Markdown.toHtml within Markdown.java under the Page Content Rendering component. The flaw allows a remote attacker to inject scripts via crafted page content. The exploit...

CVE-2026-90831

A memory corruption vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_elf_strtab_delref within the file bfd/elf-strtab.c of the ELF String Table component. The flaw is triggered through local manipulation and can lead to partial compromise of confidentiality, i...

CVE-2026-90830

A null pointer dereference vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_write_merged_section within the file bfd/merge.c (component: Section Merge). The attack requires local access with low privileges. The exploit has been publicly disclosed as a proof-of...

CVE-2026-75945

Arista EOS 4.36.1F is affected by a race condition (CWE-459 Incomplete Cleanup) in the 802.1X authenticator mode with per-supplicant ACL enforcement. When the clear dot1x host all command is issued, the race condition may leave a supplicant in an authorized state, allowing it to continue transmit...

CVE-2026-75944

CVE-2026-75944 is a race condition in Arista EOS 802.1X supplicant re-authentication that may leave a stale ACL entry in the system. If the AclAgent subsequently restarts, the stale entry can be applied to new supplicants, causing incorrect access control enforcement. The vulnerability requires 8...

CVE-2026-90829

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_elf_set_group_contents within the file bfd/elf.c , part of the SHT_GROUP Section Handler component. The flaw is triggered by local manipulation and results in low impact on confidentiality, integrity, and availability...

CVE-2026-75943

Arista EOS contains a brief traffic leak (milliseconds to seconds) in 802.1X with ACL-based authorization . When an authenticated supplicant is removed via the clear dot1x host all command or due to a supplicant timeout, its traffic may pass without ACL enforcement due to incomplete cleanup (CWE-...

CVE-2026-91201

DocsGPT through 0.20.0 is affected by an OAuth token disclosure via a wildcard postMessage in the callback-status endpoint. Session tokens are posted without validating the sender origin, allowing an attacker acting as window.opener during the OAuth authorization flow to steal session tokens and ...

CVE-2026-91200

DevSpace versions through 6.3.21 contain a path traversal vulnerability in the in-pod sync stream's tar extraction logic. The tool fails to reject parent-directory segments in tar entry names, allowing an attacker operating a malicious container to stream tar entries with traversal sequences that...

CVE-2026-91199

Refly (versions through 1.1.0) is affected by a server-side request forgery (SSRF) vulnerability in the POST /v1/misc/scrape endpoint. The endpoint fetches caller-supplied URLs without validating the scheme, host, or resolved address, allowing authenticated attackers to make the backend issue req...

CVE-2026-91197

Flowable flowable-engine through 8.0.0 contains an XML External Entity (XXE) injection in ProcessDiagramLayoutFactory.parseXml() , which fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations wi...

CVE-2026-91198

GrowthBook through version 5.0.1 is affected by an information disclosure vulnerability in its unauthenticated public report and experiment endpoints. The root cause is that fact table definitions , including raw warehouse SQL , are returned unredacted in the response payloads. An attacker who kn...

CVE-2026-81900

Concrete CMS before 9.5.3 is affected by a stored cross-site scripting vulnerability in the YouTube block (vWidth/vHeight). The root cause is that only trim() was applied to the stored width and height values before printing them into iframe HTML attributes , without escaping or integer casting. ...

CVE-2026-14986

An out-of-bounds write in the ITE it51xxx I2C driver in Zephyr RTOS (drivers/i2c/i2c_ite_it51xxx.c) occurs when the driver operates as an I2C target in buffer mode. The FIFO interrupt handler target_i2c_isr_fifo() copies host-supplied data into a fixed 256-byte buffer but performs its bounds chec...

CVE-2026-77191

CVE-2026-77191 affects Arista EOS with 802.1X authentication and ACL-based per-supplicant authorization configured. When hardware ACL resources reach capacity during bulk authentication, an authenticated supplicant on an adjacent network segment may send unrestricted traffic during a brief window...

CVE-2026-18116

Concrete CMS versions 8.3.0 through 9.5.2 are affected by a Stored XSS in calendar event names. Event names were stored without sanitization and rendered without HTML escaping in the workflow approval/deletion notifications within the dashboard "Waiting For Me" block. A registered user with permi...