CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

CVE-2026-20523

The neuropilot component is vulnerable to an out-of-bounds write caused by a missing bounds check . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249062 (Issue ID: MSV-917...

CVE-2026-20522

A vulnerability exists in neuropilot caused by a missing bounds check , leading to a possible out-of-bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249050 an...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20589

A type confusion vulnerability in venc can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this flaw could be exploited to achieve a local escalation of privilege . No user interaction is required for exploitation. Remediation is available via Patch I...

CVE-2026-20586

A missing bounds check in vdec leads to a possible out-of-bounds write vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges, although user interaction is required for exploitation. Remediation is available via Patch ID: ALPS1138...

CVE-2026-20520

A missing bounds check in the Modem component leads to a possible out-of-bounds write vulnerability. An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege when a User Equipment (UE) connects to it. This vulnerability requires no additional execu...

CVE-2026-20519

A vulnerability in the Modem component exists due to a missing bounds check , which can lead to an out-of-bounds write . If a User Equipment (UE) connects to an attacker-controlled rogue base station , this could result in a remote escalation of privilege . No additional execution privileges or u...

CVE-2026-105178

A security flaw exists in SourceCodester Drug Recommendation System 1.0 within the Symptom Creation component. The vulnerability is located in the mysqli_real_escape_string function of the /Admin/add_symptom.php file. By manipulating the txtname argument, an attacker can perform a SQL injection a...

CVE-2026-105177

The SourceCodester Drug Recommendation System 1.0 contains a SQL injection vulnerability within the Drug Creation component. The flaw exists in an unknown function of the /Admin/add_drug.php file, where improper neutralization of input allows for remote exploitation. Specifically, manipulating th...

CVE-2026-105176

The SourceCodester Drug Recommendation System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function in the /Admin/edit_class.php file. This issue is triggered by the manipulation of the ID argument and can be executed remotely . The documents indicate that the exploit has ...

CVE-2026-105175

A SQL injection vulnerability exists in the SourceCodester Drug Recommendation System 1.0 within the Student Registration component. The flaw is located in the processing of the /Auth/add_student.php file, where the manipulation of the cmdschool argument allows for remote execution of SQL command...

CVE-2026-105294

Legcord versions 1.1.0 through 1.3.0 are vulnerable to a configuration injection vulnerability via the window.legcord settings.setConfig bridge. This flaw allows scripts running on the Discord page to write arbitrary configuration keys. If an attacker leverages a Discord XSS , they can modify add...

CVE-2026-105295

GitAhead versions 2.5.0 through 2.7.1 are vulnerable to an insecure update mechanism that fails to perform integrity or signature verification on downloaded updates. Additionally, the application permanently ignores TLS errors after a single SSL error dialog is presented. A network attacker can e...

CVE-2026-105293

Legcord versions 1.1.0 through 1.3.0 are vulnerable to a path traversal vulnerability within the theme IPC handlers. The root cause is the use of unvalidated theme ids , which allows scripts running in the Discord origin (e.g., via XSS ) to escape the designated themes directory. Attackers can ab...

CVE-2026-105292

The software Chaterm before version 0.12.1 is vulnerable to a login cross-site request forgery (CSRF) . The root cause is a lack of OAuth state validation when processing chaterm:// callbacks. A remote attacker can trigger a crafted callback from a web page to inject attacker-controlled userInfo....

CVE-2026-105223

The maclof kubernetes-client (versions 0.17.0 before 0.32.0 ) contains a vulnerability where the parseKubeconfig() and parseKubeconfigFile() functions disable TLS certificate verification if a kubeconfig lacks certificate-authority-data. This occurs even when insecure-skip-tls-verify is not set. ...

CVE-2026-105174

A path traversal vulnerability exists in Gerapy up to version 0.9.13 within the Project Management component. The issue is located in the project_create function of the gerapy/server/core/views.py file, where improper handling of the project_name argument allows for unauthorized directory access....

CVE-2026-105173

A cross-site scripting (XSS) vulnerability exists in code-projects Human Resource Management 1.0 . The flaw is located within the Event Creation component, specifically affecting an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php. By manipulating the eventSubject ...

CVE-2026-105172

The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...

CVE-2026-88396

ApiAdmin versions v5.0 and before are vulnerable to Directory Traversal via the POST /admin/Index/upload endpoint. The application fails to perform whitelist, blacklist, or content checks on uploaded file extensions, allowing the move_uploaded_file() function to drop files into the web-accessible...

CVE-2026-78861

A security vulnerability in the Mercusys AC12 V2 allows a local attacker to achieve arbitrary code execution . The root cause is the presence of a hardcoded 512-bit RSA Private Key within the device. No specific remediation steps, exploit links, or impact details beyond arbitrary code execution a...

CVE-2026-88392

The software Unimall v4 is vulnerable to a Directory Traversal flaw within the FileUploadController.local() component. This vulnerability allows an attacker to achieve arbitrary code execution . No specific remediation details or exploit links are provided in the documents.

CVE-2026-78860

The Mercusys AC12 V2 is affected by a vulnerability that allows a local attacker to achieve arbitrary code execution . The underlying cause is attributed to the storage of information in plaintext . No specific exploitation details or remediation steps are provided in the documents.

CVE-2026-37719

An issue in the dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code with SYSTEM privileges. The vulnerability originates from a .NET component within the service. No specific remediation details or exploit links are provided in the documents.

CVE-2026-88395

The software GouGuOA version v6.0.5 and before is vulnerable to an SQL Injection flaw located in the /home/message/rubbish endpoint. The vulnerability is triggered via the keywords parameter , which fails to properly neutralize special elements used in SQL commands (CWE-89). This flaw could allow...

CVE-2026-88397

ApiAdmin versions v.5.0 and before are vulnerable to SQL Injection within the user-list endpoint at GET /admin/User/getUsers . The vulnerability is triggered specifically via the gid parameter . No remediation details, specific exploit links, or MITRE ATT&CK IDs are provided in the documents.

CVE-2026-88391

The Northstar quantitative trading platform (dromara/northstar) versions

CVE-2026-59358

A High severity improper authentication vulnerability (CWE-287) exists in the Cloud Foundry UAA OAuth token endpoint. It allows a remote, authenticated attacker to reuse a valid user access token to obtain a fully-privileged client_credentials token. The root cause is that UAA fails to verify tha...

CVE-2026-95264

Feehi CMS version 2.1.1 is vulnerable to Directory Traversal . An authenticated backend user with article edit permissions can delete arbitrary files writable by the PHP process. The vulnerability occurs because article image metadata is used to construct a filesystem path which is then passed to...

CVE-2026-78862

An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control , allowing a low-privilege backend administrator with administrator-update permissions to change the password of the built-in super administrator account. The vulnerability exists because the server fails to enforce protection for this spe...

CVE-2026-88394

WookTeam version 1.6.6 and before is vulnerable to a Directory Traversal flaw in the project task export endpoint (/api/project/task/export). An attacker can supply a crafted JSON payload to the data parameter where the file value is concatenated directly into storage_path($file) without proper p...

CVE-2026-95166

In Bacularis versions v1.0.0 - 6.5.1 , a Cross-Site Scripting (XSS) vulnerability exists within the LabelFormat field. This flaw occurs specifically when a user is adding a new pool , where the application fails to properly neutralize the input, allowing for the execution of an XSS payload . No s...

CVE-2026-59357

Cloud Foundry UAA versions v4.5.0 to v79.6.0 are vulnerable to a high-severity security issue (CVSS 7.2) caused by insufficient verification of data authenticity (CWE-345) in the external OIDC login callback. When a UAA zone is configured with a "self-UAA" OIDC identity provider, an authenticated...

CVE-2026-88424

FineAdmin v1.0 is susceptible to a SQL injection vulnerability within the ButtonService.GetListByFilter() function. The flaw exists in the field/order parameter , which allows an attacker to execute crafted SQL statements to access sensitive database information. No specific exploit information o...

CVE-2026-88393

WookTeam versions v1.6.6 and before are vulnerable to Remote Code Execution (RCE) within the project task export interface at /api/project/task/export . The root cause is located in the string2array() function in app/Module/Base.php , where the data parameter is base64-decoded and passed into an ...

CVE-2026-95165

Bacularis versions 5.4.0 through 6.5.1 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw exists specifically within the Organization name field . No information regarding the root cause, practical impact, remediation, or available exploits is provided in the documents.

CVE-2026-95265

Feehi CMS version 2.1.1 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the UEditor catchimage endpoint. The root cause is inadequate private-IP validation, which fails to block loopback or link-local addresses. This allows an attacker to force the server to probe inter...

CVE-2026-105171

A security vulnerability exists in the Role Attribute Handler component of the kishor-23 food-waste-management-system (specifically within the file admin/admin.php). The flaw is caused by improper authorization, where manipulation of the Name argument leads to an authorization bypass . This vulne...

CVE-2026-105170

A vulnerability exists in the kishor-23 food-waste-management-system within the Admin Signup component. An unknown function in the file admin/signup.php allows for missing authentication due to the manipulation of the sign argument. This flaw can be exploited remotely , and a public exploit is av...

CVE-2026-105169

A security flaw exists in the Take Order Handler component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the delivery/delivery.php file is vulnerable to SQL injection due to the improper handling of the order_id and delivery_person_id arguments. This vul...

CVE-2026-105168

A SQL injection vulnerability exists in the Order Assignment Block component of the kishor-23 food-waste-management-system . The flaw is located in an unknown function within the admin/admin.php file, where the manipulation of the order_id or delivery_person_id arguments allows for remote attack ...

CVE-2026-105167

A SQL injection vulnerability exists in the kishor-23 food-waste-management-system (specifically within an unknown function in the admin/donate.php file). This flaw allows a remote attacker to manipulate arguments to execute unauthorized SQL commands. While the exploit has been publicly disclosed...

CVE-2026-105222

The alexpechkarev/google-maps Laravel package, through version 12.16 , is vulnerable to a Disabled TLS Certificate Verification flaw. The bundled configuration sets ssl_verify_peer to FALSE , which is then passed to CURLOPT_SSL_VERIFYPEER. This allows on-path attackers to present arbitrary certif...

CVE-2026-105221

The gist RubyGem before version 6.1.0 is vulnerable to an improper certificate validation flaw. The root cause is located in lib/gist.rb, where the http_connection function sets VERIFY_NONE, effectively disabling TLS certificate verification. This allows on-path attackers to intercept HTTPS traff...

CVE-2026-105220

Twine 2 Desktop (versions through 2.12.0 ) is vulnerable to Arbitrary Code Execution due to a cross-site scripting (XSS) flaw in the importStories() function. The root cause is a failure to properly sanitize markup during the import of story files, which allows malicious scripts to execute within...

CVE-2026-105166

The kishor-23 food-waste-management-system is vulnerable to a remote SQL injection via the Food Donation Form component. Specifically, manipulating the image-choice argument within the insert function of the fooddonateform.php file allows for unauthorized database interaction. While the exploit h...

CVE-2026-105165

The devopspolis secrets-replicator (versions up to 0.4.0 ) is vulnerable to an issue in the AssumeRole Handler component. Specifically, the process_single_secret function in src/handler.py allows for incorrect permission assignment due to the manipulation of the external_id argument. This vulnera...

CVE-2026-105164

A flaw in NASA cFS versions up to 7.0.1 allows for an out-of-bounds read via the CFE_FS_ParseInputFileNameEx function located in cfe/modules/fs/fsw/src/cfe_fs_api.c. This vulnerability can be triggered through remote exploitation . While a pull request to address the issue exists, the documents i...