VulDB Recent Entries

A vulnerability described as critical has been identified in Google Agent Development Kit up to 1.28.0/2.0.0a1. This impacts an unknown function. Executing a manipulation can lead to missing authentication. The identification of this vulnerability is CVE-2026-4810. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. This vulnerability was named CVE-2026-6202. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability labeled as critical has been found in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. This vulnerability is uniquely identified as CVE-2026-6201. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability identified as critical has been detected in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the file /goform/webtypelibrary. This manipulation of the argument menufacturer/Go causes stack-based buffer overflow. This vulnerability is handled as CVE-2026-6200. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability categorized as critical has been discovered in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-based buffer overflow. This vulnerability is known as CVE-2026-6199. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Tenda F456 1.0.0.5. It has been rated as critical. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is traded as CVE-2026-6198. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Tenda F456 1.0.0.5. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of the argument mit_ssid can lead to stack-based buffer overflow. This vulnerability appears as CVE-2026-6197. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in Tenda F456 1.0.0.5. It has been classified as critical. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-6196. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024 and classified as critical. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. This vulnerability is documented as CVE-2026-6195. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability has been found in Totolink A3002MU B20211125.1046 and classified as critical. Affected by this vulnerability is the function sub_410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. This vulnerability is registered as CVE-2026-6194. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, was found in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.php. The manipulation of the argument email results in sql injection. This vulnerability is cataloged as CVE-2026-6193. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. This vulnerability is listed as CVE-2026-6192. The attack must be carried out locally. In addition, an exploit is available. It is suggested to install a patch to address this issue.

A vulnerability classified as critical was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /equipments.php. Executing a manipulation of the argument Name can lead to sql injection. This vulnerability is tracked as CVE-2026-6191. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /employees.php. Performing a manipulation of the argument Name results in sql injection. This vulnerability is identified as CVE-2026-6190. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability described as critical has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Such manipulation of the argument Username leads to sql injection. This vulnerability is referenced as CVE-2026-6189. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability marked as critical has been reported in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=delete_sales. This manipulation of the argument ID causes sql injection. The identification of this vulnerability is CVE-2026-6188. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=chk_prod_availability. The manipulation of the argument ID results in sql injection. This vulnerability was named CVE-2026-6187. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatStaticMap. The manipulation of the argument NatBind leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-6186. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability categorized as problematic has been discovered in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of the argument News Title can lead to cross site scripting. This vulnerability is handled as CVE-2026-6184. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in code-projects Simple Content Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. This vulnerability is known as CVE-2026-6183. Remote exploitation of the attack is possible. Furthermore, an exploit is available.