VulDB Recent Entries

A vulnerability was found in AJCloud AJY IPC. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component jdbhttpd web service. The manipulation leads to path traversal. This vulnerability is traded as CVE-2026-56718. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in ash-project ash_cloak up to 0.3.x and classified as problematic. Affected is an unknown function of the component AshCloak.Transformers.SetUpEncryption. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-81322. The attack may be performed from remote. There is no available exploit.

A vulnerability has been found in ash-project ash_graphql up to 1.10.x and classified as problematic. This impacts the function AshGraphql.Subscription.Batcher.do_send of the component Subscription Batcher. Performing a manipulation results in improper authorization. This vulnerability is reported as CVE-2026-81643. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in ash-project ash_graphql up to 1.10.0. This affects the function AshGraphql.Subscription.Batcher.do_send of the component Subscription Batcher. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-82367. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in ash-project ash_graphql up to 1.10.x. The impacted element is the function AshGraphql.Graphql.Resolver.resolve_node of the component Relay Node. This manipulation causes improper input validation. This vulnerability is registered as CVE-2026-81633. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in ash-project ash_graphql up to 1.10.x. The affected element is the function Ash.can of the component Subscription Resolver. The manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-80223. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in ash-project ash_graphql up to 1.10.x. Impacted is the function build_error_path of the file AshGraphql.Errors of the component Handler. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-78693. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in ash-project ash_graphql up to 1.10.x. This issue affects the function AshGraphql.Graphql.Resolver.query_complexity of the component Query Complexity. Executing a manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2026-81636. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp_setPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. This vulnerability is identified as CVE-2026-82703. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability labeled as critical has been found in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. This vulnerability is referenced as CVE-2026-82702. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability identified as critical has been detected in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. The identification of this vulnerability is CVE-2026-82701. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability categorized as problematic has been discovered in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. This vulnerability was named CVE-2026-82700. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in ash-project ash_cloak up to 0.3.x. It has been rated as problematic. Affected is the function AshCloak.Calculations.Decrypt. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2026-81319. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. It has been declared as problematic. This impacts an unknown function of the file aca.sql of the component Password Handler. Executing a manipulation of the argument Password can lead to cleartext storage of sensitive information. This vulnerability is handled as CVE-2026-82699. The attack can be executed remotely. Additionally, an exploit exists. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.

A vulnerability was found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. It has been classified as problematic. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. This vulnerability is known as CVE-2026-82698. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 and classified as problematic. The impacted element is the function session_start. Such manipulation leads to cookie without 'httponly' flag. This vulnerability is traded as CVE-2026-82697. The attack may be launched remotely. Furthermore, there is an exploit available. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0 and classified as critical. The affected element is an unknown function of the file /pages/inv_searchfrm.php. This manipulation of the argument ID causes sql injection. This vulnerability appears as CVE-2026-82696. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability, which was classified as very critical, was found in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. This vulnerability is reported as CVE-2026-82695. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability, which was classified as very critical, has been found in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. This vulnerability is documented as CVE-2026-82694. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability classified as very critical was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. This vulnerability is registered as CVE-2026-82693. It is possible to launch the attack remotely. Furthermore, an exploit is available.