2026

Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly

picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password fo

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configur

Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.cgi end

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary cod

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary cod

An issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffe

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tcx/netkit detach permissions when prog fd

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function i

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback

A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client man

Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. T

An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMe

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the

An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder

A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of

A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of

A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Logi

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler

A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee0

A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an u

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vuln

A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of

A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_wa

A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. This impacts the function FsBridge.WriteFile of the f

A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the function _serve_plugin_skil

A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function

A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382

A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.

A vulnerability has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff94443

A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown pr

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of

Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported

A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted is an unknown function

A security flaw has been discovered in itsourcecode Online Blood Bank Management System 1.0. The affected element is an

A weakness has been identified in itsourcecode Online House Rental System 1.0. The impacted element is an unknown functi

A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown funct

A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the fil

A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file

A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/applicatio

A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown function of the file /l