Aggregator

A vulnerability identified as critical has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Performing a manipulation of the argument sy results in sql injection. This vulnerability is known as CVE-2026-11486. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability categorized as critical has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of the argument sy leads to sql injection. This vulnerability is traded as CVE-2026-11485. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been rated as critical. This impacts an unknown function of the file /archive3.php. This manipulation of the argument sy causes sql injection. This vulnerability appears as CVE-2026-11484. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been declared as critical. This affects an unknown function of the file /archive4.php. The manipulation of the argument sy results in sql injection. This vulnerability is reported as CVE-2026-11483. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been classified as critical. The impacted element is an unknown function of the file /archive5.php. The manipulation of the argument sy leads to sql injection. This vulnerability is documented as CVE-2026-11482. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #834264 / VDB-309022

Submit #834111 / VDB-369106

Submit #834110 / VDB-369105

Submit #834109 / VDB-369104

Submit #834108 / VDB-369103

Submit #834107 / VDB-369102

A vulnerability was found in yoanbernabeu grepai up to 0.35.0 and classified as problematic. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. This vulnerability is registered as CVE-2026-11481. The attack needs to be launched locally. Furthermore, an exploit is available. The pull request to fix this issue awaits acceptance.

Submit #834018 / VDB-325830

Submit #834017 / VDB-325828

Submit #834016 / VDB-325828

Submit #834003 / VDB-325828

​活人讨论，在 AI 时代非常「宝贵」。

A vulnerability has been found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22 and classified as critical. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the component Admin Design Builder Endpoint. Performing a manipulation of the argument settings.value results in sql injection. This vulnerability is cataloged as CVE-2026-11480. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. To fix this issue, it is recommended to deploy a patch.

Submit #833997 / VDB-369101

Submit #833973 / VDB-369100