414833 matches found
CVE-2026-20519
A vulnerability in the Modem component exists due to a missing bounds check , which can lead to an out-of-bounds write . If a User Equipment (UE) connects to an attacker-controlled rogue base station , this could result in a remote escalation of privilege . No additional execution privileges or u...
CVE-2026-105178
A security flaw exists in SourceCodester Drug Recommendation System 1.0 within the Symptom Creation component. The vulnerability is located in the mysqli_real_escape_string function of the /Admin/add_symptom.php file. By manipulating the txtname argument, an attacker can perform a SQL injection a...
CVE-2026-105177
The SourceCodester Drug Recommendation System 1.0 contains a SQL injection vulnerability within the Drug Creation component. The flaw exists in an unknown function of the /Admin/add_drug.php file, where improper neutralization of input allows for remote exploitation. Specifically, manipulating th...
CVE-2026-105176
The SourceCodester Drug Recommendation System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function in the /Admin/edit_class.php file. This issue is triggered by the manipulation of the ID argument and can be executed remotely . The documents indicate that the exploit has ...
CVE-2026-105175
A SQL injection vulnerability exists in the SourceCodester Drug Recommendation System 1.0 within the Student Registration component. The flaw is located in the processing of the /Auth/add_student.php file, where the manipulation of the cmdschool argument allows for remote execution of SQL command...
CVE-2026-105294
Legcord versions 1.1.0 through 1.3.0 are vulnerable to a configuration injection vulnerability via the window.legcord settings.setConfig bridge. This flaw allows scripts running on the Discord page to write arbitrary configuration keys. If an attacker leverages a Discord XSS , they can modify add...
CVE-2026-105295
GitAhead versions 2.5.0 through 2.7.1 are vulnerable to an insecure update mechanism that fails to perform integrity or signature verification on downloaded updates. Additionally, the application permanently ignores TLS errors after a single SSL error dialog is presented. A network attacker can e...
CVE-2026-105293
Legcord versions 1.1.0 through 1.3.0 are vulnerable to a path traversal vulnerability within the theme IPC handlers. The root cause is the use of unvalidated theme ids , which allows scripts running in the Discord origin (e.g., via XSS ) to escape the designated themes directory. Attackers can ab...
CVE-2026-105292
The software Chaterm before version 0.12.1 is vulnerable to a login cross-site request forgery (CSRF) . The root cause is a lack of OAuth state validation when processing chaterm:// callbacks. A remote attacker can trigger a crafted callback from a web page to inject attacker-controlled userInfo....
CVE-2026-105223
The maclof kubernetes-client (versions 0.17.0 before 0.32.0 ) contains a vulnerability where the parseKubeconfig() and parseKubeconfigFile() functions disable TLS certificate verification if a kubeconfig lacks certificate-authority-data. This occurs even when insecure-skip-tls-verify is not set. ...
CVE-2026-105174
A path traversal vulnerability exists in Gerapy up to version 0.9.13 within the Project Management component. The issue is located in the project_create function of the gerapy/server/core/views.py file, where improper handling of the project_name argument allows for unauthorized directory access....
CVE-2026-105173
A cross-site scripting (XSS) vulnerability exists in code-projects Human Resource Management 1.0 . The flaw is located within the Event Creation component, specifically affecting an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php. By manipulating the eventSubject ...
CVE-2026-105172
The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...
CVE-2026-88397
The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...
CVE-2026-95264
Feehi CMS 2.1.1 is vulnerable to a Directory Traversal vulnerability (CWE-22). An authenticated backend user with article edit permissions can delete arbitrary files writable by the PHP process. The root cause is that the application uses article image metadata to construct a filesystem path, whi...
CVE-2026-88392
Unimall v4 is vulnerable to a Directory Traversal flaw located in the FileUploadController.local() component. This vulnerability allows an attacker to traverse the file system and potentially execute arbitrary code . While the root cause is identified as a failure to properly limit pathnames to a...
CVE-2026-37719
The dormakaba evolo Service (all versions) is vulnerable to a remote code execution (RCE) flaw. A remote attacker can exploit a .NET component to execute arbitrary code with SYSTEM privileges. The vulnerability is associated with CWE-502 (Deserialization of Untrusted Data). No specific exploitati...
CVE-2026-95263
Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control (CWE-284). A low-privilege backend administrator possessing administrator-update permissions can modify the password of the built-in super administrator account. This is possible because the server fails to enforce protections for the supe...
CVE-2026-88396
ApiAdmin versions v5.0 and before are vulnerable to a Directory Traversal flaw in the admin file-upload endpoint (POST /admin/Index/upload ). The application fails to implement a whitelist, blacklist, or content check on uploaded files, accepting the provided file extension verbatim. Consequently...