2026

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Jooml

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /ap

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of th

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affe

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element i

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/depa

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by thi

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.model_dump of the

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driv

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Wind

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privilege

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in white

mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin

openEQUELLA before 2026.1.0 contains an authenticated stored server-side template injection vulnerability in FreemarkerP

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that gene

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_j

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /c

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown cod

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of t

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plain

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the f

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/

A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of th

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SS

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code sup