Overview of incoming advisories.
2018 results found
A SQL injection vulnerability has been identified in SourceCodester/katojkalemba Online Food Ordering System version 1.0. The vulnerability exists in the file /web/order.php, where manipulation of the 'ID' argument leads to SQL injection. The flaw can be exploited remotely without requiring physical access to the system. A public exploit has already been released, increasing the risk of active exploitation. The vulnerability is tracked as CVE-2026-90855 and has been reported via NVD and VulDB. No authentication bypass details are specified, but remote exploitability makes this a significant risk. Organizations using this software should apply patches or mitigations immediately. The availability of a public exploit elevates the urgency of remediation.
View original advisory →A SQL injection vulnerability has been discovered in the SourceCodester/katojkalemba Online Food Ordering System version 1.0. The flaw exists in an unknown function within the file /web/category-foods.php, where manipulation of the 'ID' argument leads to SQL injection. The vulnerability can be exploited remotely without requiring local access. A public exploit has already been released, increasing the risk of active exploitation. The issue is tracked under CVE-2026-90854 and has been assigned a high criticality rating. Attackers could potentially access, modify, or delete database contents through this vulnerability. Users of the affected system are advised to apply patches or mitigations as soon as possible.
View original advisory →A use-after-free vulnerability was discovered in luben zstd-jni versions up to 1.5.7-13, affecting the ZstdCompressCtx.loadDict function in ZstdCompressCtx.java within the Dictionary Sharing component. The vulnerability can be exploited remotely, and a public exploit has been disclosed. The flaw allows attackers to manipulate memory through improper handling of dictionary objects after they have been freed. A fix was released in version 1.5.7-14 with patch commit a560131d7834598afd9cea6b7c107bc88e915936. The vendor responded promptly and professionally upon disclosure. Users are strongly advised to upgrade to version 1.5.7-14 or later to mitigate the risk.
View original advisory →A SQL injection vulnerability has been identified in SourceCodester College Notes Gallery Management System 1.0. The vulnerability exists in the /College/login.php file, where manipulation of the 'User' argument allows SQL injection attacks. The flaw can be exploited remotely without requiring physical access to the system. A public exploit has already been disclosed, increasing the risk of active exploitation. The affected product is a web-based academic management application. This type of vulnerability can lead to unauthorized access, data exfiltration, or full database compromise. Organizations using this software should apply patches or mitigations immediately. The vulnerability has been catalogued in VulDB and reported via GitHub.
View original advisory →GNU libextractor versions before 1.15 contain a stack-based buffer overflow vulnerability in the process_star_office function. The vulnerability arises because a variable-length stack array is sized using attacker-controlled data from OLE2 streams. Attackers can craft malicious StarOffice documents that cause up to 4 MB of stack allocation, leading to stack overflow. The result is a crash of any application that attempts to extract metadata from such a crafted document. This represents a denial-of-service risk and potentially more severe impact depending on the application context. A fix has been committed to the GNUnet repository. A proof-of-concept exploit repository is publicly available on GitHub, increasing the risk of exploitation. Users are advised to upgrade to libextractor 1.15 or later.
View original advisory →A SQL injection vulnerability has been discovered in PHPGurukul Daily Expense Tracker System version 1.1. The vulnerability exists in the forgot-password.php file, where manipulation of the email and contactno arguments allows for SQL injection attacks. The flaw can be exploited remotely without requiring physical access to the target system. A public exploit has already been disclosed, increasing the risk of active exploitation. The vulnerability affects an unknown function within the /dets/forgot-password.php endpoint. Attackers could potentially leverage this to extract, modify, or delete database contents. The issue has been reported and documented across multiple security databases including NVD and VulDB.
View original advisory →A SQL injection vulnerability has been identified in PHPGurukul Daily Expense Tracker System version 1.1. The vulnerability exists in the file /dets/index.php within the Login component. An attacker can manipulate the email argument to perform SQL injection attacks. The vulnerability is remotely exploitable, meaning no local access is required. A public exploit is already available, increasing the risk of active exploitation. This type of vulnerability can allow attackers to bypass authentication, extract sensitive data, or manipulate the underlying database. The affected product is a PHP-based expense tracking web application. Users of this system are advised to apply patches or mitigations immediately given the public exploit availability.
View original advisory →A critical OS command injection vulnerability has been identified in SabyasachiRana WebMap up to commit 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. The vulnerability exists in the nmap_newscan function within functions_nmap.py, part of the New Nmap Scan Handler component. Attackers can manipulate the target/params arguments to inject arbitrary OS commands. The attack can be launched remotely without requiring physical access. A public exploit has been disclosed, increasing the risk of active exploitation. The vulnerability has been silently patched via commit 3d52f65803a2716bff14d938352c6fef45b0cfb6. Users are strongly advised to apply the patch immediately to mitigate the risk.
View original advisory →A SQL injection vulnerability has been identified in PHPGurukul Blood Donor Management System version 1.0. The flaw resides in the file /application/controllers/admin/Report.php at the Report Endpoint component. Attackers can manipulate the 'fromdate' and 'todate' arguments to perform SQL injection attacks. The vulnerability can be exploited remotely without requiring physical access to the target system. A public exploit has already been released, increasing the risk of active exploitation. The vulnerability affects an unknown functionality within the report handling logic. Organizations using this system are advised to apply patches or mitigations immediately. The issue has been documented in VulDB and NVD, and a proof-of-concept is available on GitHub.
View original advisory →A critical vulnerability has been identified in PHPGurukul Blood Donor Management System version 1.0. The flaw resides in the __construct function within the file /application/controllers/admin/Dashboard.php of the Admin Controllers component. The vulnerability allows manipulation leading to improper authentication, enabling attackers to bypass authentication controls. The attack can be initiated remotely without requiring local access. A public exploit is already available, increasing the risk of active exploitation. The affected product is a PHP-based web application used for managing blood donor records. Organizations using this system are urged to apply patches or mitigations immediately. The vulnerability has been catalogued under CVE-2026-90840 and tracked across multiple security databases including VulDB and NVD.
View original advisory →A stack-based buffer overflow vulnerability has been identified in the D-Link DI-8300 router firmware version 16.07. The flaw resides in the function rzgl_asp within the file /rzgl.asp, part of the CGI Service component. Attackers can exploit this vulnerability by manipulating the redirct_url argument to trigger the overflow. Remote exploitation is possible without requiring physical access to the device. A proof-of-concept exploit has been publicly published, increasing the risk of active exploitation. The vulnerability is tracked as CVE-2026-91003. D-Link networking equipment is widely deployed, making this a significant concern for network security. No patch information is currently provided in the article. Users of the affected device are advised to monitor official D-Link advisories for updates.
View original advisory →A critical OS command injection vulnerability has been identified in EFM ipTIME C200E firmware version 1.094. The vulnerability resides in an unknown function within the iux_set.cgi file of the System Setup component. An attacker can remotely exploit this vulnerability to inject and execute arbitrary OS commands on the affected device. The exploit has been publicly disclosed, increasing the risk of active exploitation. The attack can be initiated remotely without physical access to the device. This type of vulnerability in network-connected devices poses significant risks to network security and integrity. The public availability of exploit details elevates the urgency for patching or mitigation.
View original advisory →A stack-based buffer overflow vulnerability has been discovered in D-Link DI-8400 firmware version 16.07. The flaw exists in the ddns_asp function within the /ddns.asp file, part of the DDNS Configuration component. Attackers can exploit this vulnerability by manipulating arguments such as serv, user, host, wild, mx, bmx, cust, or ip to trigger the overflow. The attack can be initiated remotely without requiring physical access to the device. A public exploit has already been released, significantly increasing the risk of active exploitation. The vulnerability is classified as a stack-based buffer overflow, which can potentially allow arbitrary code execution. D-Link DI-8400 is a networking device, making this vulnerability particularly concerning for network infrastructure security. The availability of a public proof-of-concept exploit raises the urgency for patching or mitigation. Users of the affected firmware version should apply any available patches or workarounds immediately.
View original advisory →A security vulnerability exists in the Node.js proxy-addr module (versions 1.1.0 through 2.0.7) that backs Express req.ip and req.ips. When a trust subnet is written in IPv4-mapped IPv6 notation with an IPv4-sized prefix (e.g., ::ffff:10.0.0.0/8 instead of ::ffff:10.0.0.0/104), the module silently accepts it but incorrectly trusts every IPv4 address on the internet. This fail-open regression allows any unauthenticated client to supply an arbitrary X-Forwarded-For header and spoof their apparent IP address. The impact includes bypassing IP-based access control, rate limiting, geolocation, and audit logging. The vulnerability was introduced in version 1.1.0 and is fixed in proxy-addr 2.0.8. Users should upgrade immediately. As a workaround, ensure IPv4-mapped IPv6 trust subnets use a prefix length of at least 97, or use plain IPv4 notation instead.
View original advisory →Cisco has patched a critical vulnerability in Cisco Secure Email Gateway affecting AsyncOS Software. The flaw stems from insufficient validation of incoming email messages, allowing an unauthenticated attacker to send specially crafted emails containing malicious SQL instructions. Successful exploitation can lead to arbitrary SQL execution and ultimately remote code execution with root privileges on the underlying operating system. Cisco has confirmed active exploitation of this vulnerability in the wild. The attack vector requires no authentication, making it particularly dangerous for internet-facing email gateways. NCSC urgently recommends applying the security update immediately and inspecting affected systems for indicators of compromise. Organizations should consult Cisco's advisory for specific IoCs and additional remediation guidance.
View original advisory →A critical SQL injection vulnerability exists in Cisco AsyncOS software for Cisco Secure Email Gateway (SEG). The flaw allows an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. No authentication is required to exploit this vulnerability, making it particularly dangerous. The vulnerability is tracked as CVE-2026-76461 and has been flagged by CISA under BOD 26-04, which prioritizes security updates based on risk. Organizations using Cisco SEG are urged to apply patches immediately. CISA has also outlined forensic triage requirements for affected systems. The vulnerability is documented in both the NVD and Cisco's official security advisory portal.
View original advisory →CVE-2026-85706 is a path traversal vulnerability affecting GitLab Community Edition and Enterprise Edition. An unauthenticated attacker can read arbitrary files on the server by exploiting improper path confinement and missing authentication enforcement in the repository commits API. The vulnerability does not require any credentials, significantly increasing its risk profile. CISA has flagged this under BOD 26-04, which prioritizes security updates based on risk. A patch has been released in GitLab version 19.3.2. Organizations using affected GitLab instances are urged to apply the patch immediately. CISA also provides forensic triage requirements for affected entities under the BOD 26-04 implementation guidance. The vulnerability is tracked in NVD as well.
View original advisory →JFrog Artifactory contains an improper authentication vulnerability tracked as CVE-2026-42018. The flaw can cause the system to return an internal anonymous-user token to an unauthenticated caller even when anonymous access is explicitly disabled. This misconfiguration-like behavior could expose sensitive resources and internal API endpoints to unauthorized parties. The vulnerability is listed in CISA's known exploited vulnerabilities catalog and is subject to BOD 26-04 prioritization requirements. Organizations running self-managed Artifactory instances are advised to apply patches detailed in JFrog's security advisories. The issue highlights risks in artifact repository authentication mechanisms. CISA has also outlined forensic triage requirements for affected systems under BOD 26-04 implementation guidance.
View original advisory →CVE-2026-42016 is an incorrect authorization vulnerability in JFrog Artifactory that allows attackers to escalate privileges. The flaw arises from improper validation of token signatures and issuers without adequately checking the token's scope. This oversight enables unauthorized actors to gain elevated access within affected Artifactory deployments. The vulnerability is tracked by CISA and is subject to BOD 26-04, which prioritizes security updates based on risk. JFrog has published security advisories and self-managed release notes addressing the issue. Organizations running self-managed Artifactory instances are advised to apply the relevant patches immediately. The vulnerability has been assigned a high criticality rating due to its potential for privilege escalation in enterprise environments.
View original advisory →CVE-2026-84869 affects ConnectWise ScreenConnect and involves both improper privilege management and missing authorization vulnerabilities. The flaw allows an attacker to perform file transfer and execution through active remote sessions without proper authorization or host confirmation. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog and is subject to BOD 26-04 remediation requirements. Organizations using ScreenConnect are urged to apply security updates as prioritized by CISA guidance. ConnectWise published a security bulletin on 2026-09-08 addressing this issue. The vulnerability poses a significant risk as it can be exploited during legitimate remote sessions, bypassing host controls. CISA has also issued forensic triage requirements for affected systems under BOD 26-04 implementation guidance.
View original advisory →