2026

Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by prov

A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/

A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpCli

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects the function Upload of the file chat2db-serve

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mec

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing e

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which conta

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.0

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several i

SQL Injection in Cuantis. This vulnerability allows an attacker to retrieve, create, update and delete databases through

A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects u

A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Car

An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s a

Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exp

Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 a

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login

A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this issue is some unknown fun

XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local fi

A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerabili

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /

A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_

A security flaw has been discovered in code-projects Simple Laundry System 1.0. This impacts an unknown function of the

A vulnerability was identified in code-projects Simple Laundry System 1.0. This affects an unknown function of the file

A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, l

A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the

Any guest issuing a Xenstore command accessing a node using the (illegal) node path "/local/domain/", will crash xenstor

The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped,

The Sina Extension for Elementor (Header Builder, Footer Builter, Theme Builder, Slider, Gallery, Form, Modal, Data Tabl

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin f

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsi

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to hand

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.sig

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via t

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Fact

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsb

A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /a

A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part

The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the