Aggregator

A vulnerability marked as critical has been reported in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown part of the file checkUser.php of the component POST Parameter Handler. The manipulation of the argument Username leads to sql injection. This vulnerability is uniquely identified as CVE-2026-11488. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #834747 / VDB-369111

A vulnerability labeled as critical has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch. Executing a manipulation of the argument path can lead to command injection. This vulnerability is handled as CVE-2026-11487. It is possible to launch the attack on the local host. Additionally, an exploit exists. A patch should be applied to remediate this issue.

Submit #836666 / VDB-369110

Submit #834743 / VDB-369109

Submit #834716 / VDB-359846

Submit #834511 / VDB-369108

Новый подход помогает быстрее создавать нанофотонные материалы для камер, очков и квантовых систем.

Submit #834495 / VDB-369107

A vulnerability identified as critical has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Performing a manipulation of the argument sy results in sql injection. This vulnerability is known as CVE-2026-11486. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability categorized as critical has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of the argument sy leads to sql injection. This vulnerability is traded as CVE-2026-11485. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been rated as critical. This impacts an unknown function of the file /archive3.php. This manipulation of the argument sy causes sql injection. This vulnerability appears as CVE-2026-11484. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been declared as critical. This affects an unknown function of the file /archive4.php. The manipulation of the argument sy results in sql injection. This vulnerability is reported as CVE-2026-11483. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been classified as critical. The impacted element is an unknown function of the file /archive5.php. The manipulation of the argument sy leads to sql injection. This vulnerability is documented as CVE-2026-11482. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #834264 / VDB-309022

Submit #834111 / VDB-369106

Submit #834110 / VDB-369105

Submit #834109 / VDB-369104

Submit #834108 / VDB-369103

Submit #834107 / VDB-369102