CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...

CVE-2026-105611

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes...

CVE-2026-105610

A vulnerability exists in chillzhuang SpringBlade up to version 5.0.1 within the Parameter Submit Management component. The flaw is located in an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java. Specifically, manipulatin...

CVE-2026-105573

A business logic error exists in newbee-ltd newbee-mall versions up to 2.7.5 . The vulnerability impacts an unknown function within the Shopping Cart Quantity Handler component, specifically in the file /jshERP-boot/accountHead/updateAccountHeadAndDetail. By manipulating the goodsCount argument, ...

CVE-2026-105572

A vulnerability exists in PickMall Lilishop version 4.2.4 and below, specifically within the Buyer Invoice List component. An unknown function in the /buyer/trade/receipt file is susceptible to authorization bypass when the memberId argument is manipulated. This flaw is exploitable remotely . Pub...

CVE-2026-105571

PickMall Lilishop versions up to 4.2.4 are vulnerable to an improper authorization flaw within the Mobile Binding component. The issue originates from an unknown function in the /buyer/passport/member/bindMobile file, where manipulation of the Username argument allows for unauthorized access. Thi...

CVE-2026-105487

The yogeshojha reNgine software (versions up to 2.2.0 ) is vulnerable to an OS command injection vulnerability within the listTargets Endpoint . Specifically, the subdomain_discovery function located in the web/reNgine/tasks.py file fails to properly neutralize the Name argument. This flaw allows...

CVE-2026-105486

The OSSRS srs software (up to version 7.0-a1 ) contains a vulnerability in the System API component. Specifically, the systemAPI.Run function within the internal/proxy/api.go file lacks proper authentication, allowing for remote manipulation. Public exploits for this vulnerability are currently a...

CVE-2026-104380

The Punk framework (versions 0.48 before 0.55 ) is vulnerable to a missing Origin check in the ps_serve_one function when handling Perl routes . On HTTP/2 and HTTP/3 , a WebSocket handshake arrives as an Extended CONNECT request, which the system incorrectly matches as a GET request. This allows ...

CVE-2026-104044

A flaw exists in sssd where a local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request. When passkey authentication is enabled, a missing state validation check in passkey Kerberos handling causes the PAM responder to derefe...

CVE-2026-104043

A flaw exists in SSSD where a local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow . By sending a specially crafted request with an undersized packet header, the attacker can cause an out-of-bounds memory read during packet parsing. Th...

CVE-2026-104042

A vulnerability exists in sssd where a local attacker can trigger a Denial of Service (DoS) . The flaw is caused by an out-of-bounds read (CWE-125) occurring when the service processes a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token sent to th...

CVE-2026-104041

A flaw exists in SSSD where an unprivileged local user can trigger a Denial of Service (DoS) via unbounded negative cache growth. By repeatedly requesting lookups for nonexistent entries through the Name Service Switch (NSS) responder , an attacker can cause the negative cache to grow without lim...

CVE-2026-104040

A flaw in SSSD allows for OData injection when configured with the Entra ID identity provider. Because input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph OData queries , a low-privileged local user can submit a crafted search request to a...

CVE-2026-104039

A flaw in SSSD allows a local user to cause a denial of service (DoS) by disrupting system authentication services. The issue occurs within the Pluggable Authentication Module (PAM) responder when handling GSSAPI authentication . Specifically, the cached connection state is freed upon completion ...

CVE-2026-105484

The TOTOLINK X6000R running firmware version 9.4.0cu.652_B20230116 is vulnerable to an OS command injection vulnerability. The flaw exists within the UploadFirmwareFile Handler component, specifically in the firmware_check function of the /cgi-bin/cstecgi.cgi file. An attacker can exploit this by...

CVE-2026-14375

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-105472

A SQL injection vulnerability exists in the Booking Handler component of the girishsaraf Online-Appointment-Booking-System (versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ). The flaw is located within an unknown function in the book.php file, where the manipulation of the Doctor/appointm...

CVE-2026-104038

A vulnerability exists in sssd where a remote attacker can trigger a denial of service (DoS) . The flaw occurs in deployments using SID-based certificate mapping rules because the service fails to verify the presence of an expected Security Identifier (SID) extension before processing it. This la...

CVE-2026-104037

A vulnerability exists in SSSD where a local attacker can trigger a denial of service (DoS) . By sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket , the attacker can cause an integer underflow and an out-of-bounds memory read . This flaw leads t...

CVE-2026-92821

A vulnerability exists in SSSD where improper configuration allows an access control bypass in LDAP environments. If the system is configured to evaluate password expiration warnings before restrictive access rules, an expired-password warning causes the rule evaluation to terminate early, treati...

CVE-2026-104036

A flaw in the SSSD NFS idmap plugin allows for an out-of-bounds write when retrieving cached user or group names. The vulnerability occurs because the plugin identifies that an entry exceeds the destination buffer size but fails to abort the operation before copying the data. A local attacker can...

CVE-2026-104035

A flaw in the SSSD (System Security Services Daemon) within the Kerberos Credential Manager (KCM) responder allows for a Denial of Service (DoS) . A local user can trigger this by maintaining a persistent connection and repeatedly storing and destroying credentials. The root cause is that the ser...

CVE-2026-104034

A use-after-free vulnerability exists in SSSD within the Kerberos Credential Manager (KCM) responder . The flaw occurs during Kerberos ticket-granting ticket (TGT) renewal when a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerbero...

CVE-2026-104033

A vulnerability exists in SSSD where the software fails to correctly treat an LDAP shadow expiration value of zero as an expired account. When configured to enforce account expiration via LDAP, this access control bypass allows a user with valid credentials for a deactivated account to authentica...

CVE-2026-104032

A flaw in SSSD allows an unprivileged local user to trigger a Denial of Service (DoS) . Due to missing authorization checks, an attacker can repeatedly request master automount map updates through the autofs responder . This action causes global cache invalidation , forcing continuous lookups to ...

CVE-2026-104031

A flaw exists in SSSD where the autofs responder service fails to release memory allocated during successful request processing until the client connection terminates. A local attacker can exploit this by maintaining an open connection and submitting repeated valid requests, resulting in memory e...

CVE-2026-105786

The open source note-taking application Joplin is vulnerable to an unauthenticated account takeover in versions prior to 3.7.13 . The root cause lies in packages/server/src/models/ApplicationModel.ts, which accepts a caller-chosen application authorization identifier, and the public endpoint pack...

CVE-2026-105471

A SQL injection vulnerability exists in the Registration Handler component of the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in an unknown function within the signup.php file, where manipulating the fname argument all...

CVE-2026-82988

The ViewSonic ViewBoard smartboard, which runs on an Android-based system, is vulnerable to CVE-2026-82988 due to a flaw in the vCast APK delivery mechanism. An unauthenticated remote attacker can trigger the installation of an unprivileged malicious package by providing a crafted URL to an unaut...

CVE-2026-82989

The ViewSonic ViewBoard smartboard (Android-based) is vulnerable to a variety of issues within the vCast proprietary software suite. Specifically, CVE-2026-82989 involves an input injection vulnerability where a remote, unauthenticated attacker can inject arbitrary input into service endpoints vi...

CVE-2026-105785

Prior to Joplin Server 3.7.2 , a vulnerability exists in the TokenModel.ts and UserModel.ts components. The system stores CSRF, account-confirmation, email-change, and password-reset tokens without distinguishing their specific purposes. This allows an attacker to use a leaked CSRF or confirmatio...

CVE-2026-105784

The open-source note-taking application Joplin is vulnerable to CSS injection in versions prior to 3.7.13 . The root cause is the improper handling of jsoncanvas fences, where the TextNode.tsx and FileNode.tsx components render card content using the full Markdown renderer and insert the resultin...

CVE-2026-55467

The cups component in Slackware (versions 15.0 and -current) is affected by multiple security issues, including the scheduler failing to open temporary PPD files in exclusive mode, improper validation of request language values and attribute names, and a TOU attack vulnerability in startup permis...

CVE-2026-105783

The Joplin note-taking application (prior to version 3.7.13 ) is vulnerable to cross-origin theft of a permanent API token when the optional Web Clipper server is enabled. The root cause is located in packages/lib/ClipperServer.ts, where the server sends Access-Control-Allow-Origin: * and fails t...

CVE-2026-105782

The Scrapy web crawling framework (versions 1.4.0 through 2.14.1) is vulnerable to arbitrary module import via the Referrer-Policy response header. The RefererMiddleware in scrapy/spidermiddlewares/referer.py incorrectly treats values resembling Python import paths as referrer policy classes, imp...

CVE-2026-105764

In versions prior to 3.2.4 , Immich (a self-hosted photo and video management solution) is vulnerable to Remote Code Execution (RCE) . An authenticated non-admin user can upload crafted SVG files that bypass the libvips native loader and fall through to ImageMagick coders. By using attacker-contr...

CVE-2026-105763

The Twenty open-source CRM platform is vulnerable to plaintext password disclosure in versions 1.20.10 through 2.7.0 . The /metadata GraphQL connectedAccounts query returns connectionParameters for all connected accounts in a workspace without enforcing the calling user's identity or account visi...

CVE-2026-105762

The open-source LLM app development platform Dify is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) in the /console/api/remote-files/upload endpoint within api/controllers/web/remote_files.py. The vulnerability exists because the application accepts attacker-controlled URLs w...

CVE-2026-105761

The open-source LLM app development platform Dify contains an Insecure Direct Object Reference (IDOR) vulnerability in versions prior to 1.16.0 . The root cause is located in api/controllers/console/app/mcp_server.py, where the PUT /console/api/apps//server endpoint uses AppMCPServerController.pu...

CVE-2026-105760

The vLLM inference and serving engine for large language models is vulnerable to CPU and memory exhaustion in versions prior to 0.30.0 . An attacker can use the media_io_kwargs field to select the GLMGA video backend and provide large values for the fps and max_frames options. Because there is no...

CVE-2026-105759

The vLLM inference and serving engine is vulnerable to an unauthenticated denial of service in versions prior to 0.30.0 . The Rust frontend's track_http_metrics middleware fails to sanitize raw HTTP method tokens, recording them as Prometheus labels for registered routes. An attacker can send uni...

CVE-2026-104852

The GraphQL Tools utils package is vulnerable to prototype pollution in the mergeDeep function prior to version 12.0.1 . The root cause is that the function follows inherited properties and fails to exclude __proto__, constructor, or prototype keys during recursive merging. An unauthenticated Gra...

CVE-2026-105758

The vLLM inference engine (versions 0.24.0 through 0.30.0 ) is vulnerable to a resource exhaustion issue within the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes. The software fails to enforce server-side ceilings on media_io_kwargs.video.max_frames and media_io_kwargs.video.fps fields prov...

CVE-2026-105757

The vLLM inference and serving engine for large language models is vulnerable to a denial of service (DoS) condition in versions prior to 0.30.0 . The root cause is that structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. Specific tri...

CVE-2026-105756

Prior to version 0.30.0 , the vLLM inference and serving engine is vulnerable to a denial of service via an uncaught ValueError . The root cause is improper input validation of the cache_salt value in OpenAI-compatible request models. On deployments using the LMCache-MP connector, providing a sal...