VulDB Recent Entries

A vulnerability categorized as problematic has been discovered in Shenzhen Hongyavision Technology SODOLA SL902-SWTGW124AS up to 200.1.20. This affects an unknown function of the component Network Traffic Handler. Executing a manipulation can lead to cleartext transmission of sensitive information. This vulnerability is tracked as CVE-2026-27752. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Shenzhen Hongyavision Technology SODOLA SL902-SWTGW124AS up to 200.1.20. It has been rated as very critical. The impacted element is an unknown function of the component Management Interface. Performing a manipulation results in use of default credentials. This vulnerability is identified as CVE-2026-27751. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in Doditsolutions Homey BNB V4. It has been declared as critical. The affected element is an unknown function. Such manipulation of the argument username/password leads to sql injection. This vulnerability is referenced as CVE-2019-25494. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in seerr-team seerr up to 3.0.x. It has been classified as problematic. Impacted is an unknown function of the file /api/v1/user/. This manipulation causes authorization bypass. The identification of this vulnerability is CVE-2026-27793. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Intermesh groupoffice up to 6.8.153/25.0.86/26.0.8 and classified as critical. This issue affects some unknown processing. The manipulation results in argument injection. This vulnerability was named CVE-2026-27947. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability has been found in seerr-team seerr up to 3.0.x and classified as critical. This vulnerability affects unknown code of the file /api/v1/auth/jellyfin. The manipulation leads to authentication bypass using alternate channel. This vulnerability is uniquely identified as CVE-2026-27707. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in bigcat88 pillow_heif up to 1.2.x. This affects an unknown part of the file _pillow_heif.c of the component HEIF Image Parser. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2026-28231. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Doditsolutions Homey BNB V4. Affected by this issue is some unknown functionality of the file admin/getcmsdata.php. Performing a manipulation of the argument pt results in sql injection. This vulnerability is known as CVE-2019-25492. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as critical was found in Doditsolutions Homey BNB V4. Affected by this vulnerability is an unknown functionality of the file admin/cms_getpagetitle.php. Such manipulation of the argument catid leads to sql injection. This vulnerability is traded as CVE-2019-25491. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in thorsten phpmyfaq up to 4.0.17. Affected is an unknown function of the file /api/webauthn/prepare of the component WebAuthn Prepare Endpoint. This manipulation causes missing authorization. This vulnerability appears as CVE-2026-27836. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Intermesh groupoffice up to 6.8.152/25.0.86/26.0.7. This impacts an unknown function of the file index.php?r=email/template/emailSelection of the component Endpoint. The manipulation of the argument advancedQueryData results in sql injection. This vulnerability is reported as CVE-2026-27832. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in VMware Workstation up to 25H1. This affects an unknown function. The manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2026-22716. The attack needs to be performed locally. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Doditsolutions Homey BNB V4. The impacted element is an unknown function of the file admin/edit.php. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2019-25490. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability identified as critical has been detected in osCommerce 2.3.4.1. The affected element is an unknown function of the file shopping_cart.php. Performing a manipulation of the argument currency results in sql injection. This vulnerability is cataloged as CVE-2019-25497. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability categorized as problematic has been discovered in MacWarrior clipbucket-v5 up to up to 5.5.2. Impacted is the function removeItemFromCollection of the file /actions/add_to_collection.php. Such manipulation leads to authorization bypass. This vulnerability is listed as CVE-2026-28354. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in osCommerce 2.3.4.1. It has been rated as critical. This issue affects some unknown processing of the file product_info.php. This manipulation of the argument products_id causes sql injection. This vulnerability is tracked as CVE-2019-25496. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in osCommerce 2.3.4.1. It has been declared as critical. This vulnerability affects unknown code of the file product_reviews_write.php. The manipulation of the argument reviews_id results in sql injection. This vulnerability is identified as CVE-2019-25495. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in Doditsolutions Homey BNB V4. It has been classified as critical. This affects an unknown part of the file admin/getrecord.php. The manipulation of the argument val leads to sql injection. This vulnerability is referenced as CVE-2019-25493. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in VMware Workstation up to 25H1 and classified as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2026-22717. The attack can only be executed locally. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in KNOWHY EduAsist up to 27022026 and classified as problematic. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2025-11950. The attack may be initiated remotely. There is no available exploit.