2026

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate dat

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel th

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate da

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administratio

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malici

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malici

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers

Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel th

XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q

Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers t

Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauth

Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attac

iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa

Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu

Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by

A weakness has been identified in Tenda i12 1.0.0.6(2204). The affected element is the function formWifiMacFilterGet of

A security flaw has been discovered in Tenda i12 1.0.0.6(2204). Impacted is the function vos_strcpy of the file /goform/

An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged u

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE)

A vulnerability allowing a low-privileged user to extract saved SSH credentials.

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does

The Simple Ajax Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c' parameter in versions

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks

Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-F

A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the c

A vulnerability was determined in OpenClaw 2026.2.19-2. This vulnerability affects the function applySkillConfigenvOverr

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An at

SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disagg

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, whi

A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (CRLF) injection in the decodeen

A flaw was found in Keycloak. An authorization bypass vulnerability in the Keycloak Admin API allows any authenticated u

A security vulnerability has been detected in GPAC 26.03-DEV. Affected by this vulnerability is the function svgin_proce

A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtin_process_texml of the file src/filters/l

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unkno

A vulnerability was determined in rxi fe up to ed4cda96bd582cbb08520964ba627efb40f3dd91. The impacted element is the fun

A vulnerability was found in ThakeeNathees pocketlang up to cc73ca61b113d48ee130d837a7a8b145e41de5ce. The affected eleme

A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwav_read_pcm_frames_s16__

A flaw has been found in Tenda W3 1.0.0.3(2204). This issue affects some unknown processing of the file /goform/wifiSSID

A vulnerability was detected in Tenda W3 1.0.0.3(2204). This vulnerability affects unknown code of the file /goform/wifi