Aggregator

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. It has been declared as problematic. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. This vulnerability is referenced as CVE-2026-86280. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. It has been classified as critical. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. The identification of this vulnerability is CVE-2026-86279. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 and classified as problematic. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. This vulnerability was named CVE-2026-86278. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 and classified as critical. Impacted is an unknown function of the file delete_exam.php. The manipulation of the argument ID leads to authorization bypass. This vulnerability is uniquely identified as CVE-2026-86277. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability, which was classified as critical, was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. This vulnerability is handled as CVE-2026-86276. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability, which was classified as problematic, has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. This vulnerability is known as CVE-2026-86275. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #904882 / VDB-399442

Submit #904881 / VDB-399441

Submit #904880 / VDB-399440

Submit #904879 / VDB-399439

Submit #904877 / VDB-399438

Submit #904873 / VDB-399437

Submit #904872 / VDB-399436

A vulnerability classified as problematic was found in Veno File Manager 4.4.9. This issue affects some unknown processing of the file /vfm-admin/index.php of the component Translation. The manipulation of the argument remove results in path traversal. This vulnerability is reported as CVE-2026-37065. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in Veno File Manager 4.4.9. This affects an unknown function of the file /vfm-admin/index.php. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-37066. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability, which was classified as problematic, was found in Veno File Manager 4.4.9. This impacts an unknown function of the file /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php of the component zipstream. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-37069. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Veno File Manager 4.4.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vfm-admin/index.php of the component Translation Update. The manipulation of the argument action/section results in unrestricted upload. This vulnerability is known as CVE-2026-37068. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Veno File Manager 4.4.9. It has been classified as problematic. Affected by this issue is some unknown functionality of the file /vfm-admin/ajax/streamvid.php. This manipulation causes improper access controls. This vulnerability is handled as CVE-2026-37070. The attack can be initiated remotely. There is not any exploit available.

A vulnerability identified as critical has been detected in Veno File Manager 4.4.9. Impacted is an unknown function of the file admin-head-updates.php. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-37072. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as critical, was found in Veno File Manager 4.4.9. Affected by this issue is the function Actions::renameFile of the component File Rename. The manipulation results in improper privilege management. This vulnerability is reported as CVE-2026-37071. The attack can be launched remotely. No exploit exists.