Aggregator

Submit #912244 / VDB-403113

Submit #912236 / VDB-403112

Submit #912235 / VDB-403111

Submit #912234 / VDB-403110

A vulnerability was found in Fedora libxml2. It has been declared as critical. This affects an unknown part of the component Catalog. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-76781. The attack may be performed from remote. There is no available exploit.

打通审计/Fuzz/崩溃分析/补丁研究，实现标准化漏洞研究闭环

看雪论坛作者ID：mb_peeqldfc

A vulnerability was found in Microchip AN1044, AN953 and SW300052 up to A/A/2.6. It has been classified as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in session fixiation. This vulnerability is reported as CVE-2026-89172. The attack requires a local approach. No exploit exists.

A vulnerability was found in Microsoft Edge and classified as critical. Affected by this vulnerability is an unknown functionality. Such manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-85892. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. This vulnerability is registered as CVE-2026-90519. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. This vulnerability is cataloged as CVE-2026-90518. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. This vulnerability is listed as CVE-2026-90517. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud.php. Executing a manipulation of the argument selector[] can lead to sql injection. This vulnerability is tracked as CVE-2026-90515. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_report.php. Performing a manipulation of the argument period results in sql injection. This vulnerability is identified as CVE-2026-90516. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability described as critical has been identified in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such manipulation of the argument Status leads to sql injection. This vulnerability is referenced as CVE-2026-90514. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #912224 / VDB-403106

Submit #912177 / VDB-300693

Submit #912176 / VDB-403105

Submit #912139 / VDB-403104

A vulnerability marked as critical has been reported in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument toEmails/ccEmails/replyToEmails/subject/message causes missing authentication. The identification of this vulnerability is CVE-2026-90513. It is possible to initiate the attack remotely. There is no exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.