🔥 Trending CVEs - Last 90 Days

This CVE describes a SQL injection vulnerability in code-projects Online Application System for Admission 1.0, specifically in the login endpoint at e...

CVE-2026-2173 is an SQL injection vulnerability in code-projects Online Examination System 1.0 that allows attackers to manipulate database queries th...

CVE-2026-2174 is an authentication bypass vulnerability in code-projects Contact Management System 1.0 that allows attackers to manipulate CRUD endpoi...

This SQL injection vulnerability in Online Student Management System 1.0 allows attackers to manipulate database queries through the login form. Attac...

CVE-2026-2164 is an unrestricted file upload vulnerability in detronetdip E-commerce 1.0.0 that allows attackers to upload malicious files to the serv...

CVE-2026-2165 is an authentication bypass vulnerability in detronetdip E-commerce 1.0.0 that allows unauthenticated attackers to create admin accounts...

This SQL injection vulnerability in code-projects Online Reviewer System 1.0 allows attackers to manipulate database queries through the login form. R...

This SQL injection vulnerability in itsourcecode Directory Management System 1.0 allows attackers to execute arbitrary SQL commands via the email para...

CVE-2026-2158 is a SQL injection vulnerability in code-projects Student Web Portal 1.0 that allows remote attackers to execute arbitrary SQL commands ...

CVE-2026-2136 is a SQL injection vulnerability in projectworlds Online Food Ordering System 1.0 that allows remote attackers to execute arbitrary SQL ...

CVE-2026-2133 is an unrestricted file upload vulnerability in code-projects Online Music Site 1.0 that allows attackers to upload malicious files via ...

This is a SQL injection vulnerability in code-projects Online Music Site 1.0 that allows remote attackers to execute arbitrary SQL commands via the tx...

This vulnerability allows remote attackers to execute arbitrary SQL commands via the expenses_id parameter in the /admin/edit_expenses.php file in its...

This is a SQL injection vulnerability in itsourcecode Society Management System 1.0 that allows remote attackers to execute arbitrary SQL commands via...

This vulnerability allows remote attackers to execute arbitrary SQL commands on itsourcecode Society Management System 1.0 through the /admin/delete_e...

CVE-2026-2114 is an SQL injection vulnerability in itsourcecode Society Management System 1.0 that allows attackers to manipulate database queries thr...

This CVE describes a remote code execution vulnerability in yuan1994 tpadmin's WebUploader component through insecure deserialization in preview.php. ...

This SQL injection vulnerability in SourceCodester Online Class Record System 1.0 allows remote attackers to execute arbitrary SQL commands via the 't...

This SQL injection vulnerability in PHPGurukul Beauty Parlour Management System 1.1 allows attackers to manipulate database queries through the 'delid...

This SQL injection vulnerability in SourceCodester Online Class Record System 1.0 allows attackers to manipulate database queries through the ID param...

This SQL injection vulnerability in SourceCodester Online Class Record System 1.0 allows attackers to manipulate database queries through the user_ema...

This SQL injection vulnerability in code-projects Social Networking Site 1.0 allows attackers to manipulate database queries through the /delete_post....

CVE-2026-2073 is a SQL injection vulnerability in itsourcecode School Management System 1.0 that allows remote attackers to execute arbitrary SQL comm...

This SQL injection vulnerability in Simple Blood Donor Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID para...

This SQL injection vulnerability in SourceCodester Medical Center Portal Management System 1.0 allows attackers to manipulate database queries through...

This CVE describes a SQL injection vulnerability in the CloudClassroom-PHP-Project software that allows remote attackers to execute arbitrary SQL comm...

This SQL injection vulnerability in SourceCodester Medical Center Portal Management System 1.0 allows attackers to execute arbitrary SQL commands via ...

CVE-2026-2018 is a SQL injection vulnerability in itsourcecode School Management System 1.0 that allows remote attackers to execute arbitrary SQL comm...

CVE-2026-2014 is a SQL injection vulnerability in itsourcecode Student Management System 1.0 that allows attackers to manipulate database queries thro...

This SQL injection vulnerability in itsourcecode Student Management System 1.0 allows attackers to execute arbitrary SQL commands via the ID parameter...

A heap-based buffer overflow vulnerability in the image module allows attackers to crash affected systems, potentially causing denial of service. This...

This SQL injection vulnerability in itsourcecode Student Management System 1.0 allows attackers to execute arbitrary SQL commands through the /ramonsy...

CVE-2026-2012 is a SQL injection vulnerability in itsourcecode Student Management System 1.0 that allows remote attackers to execute arbitrary SQL com...

A stack-based buffer overflow vulnerability in Open5GS allows remote attackers to execute arbitrary code or cause denial of service by manipulating th...

This CVE describes a command injection vulnerability in the Ziroom ZHOME A0101 router firmware version 1.0.1.0. Attackers can remotely execute arbitra...

Authenticated students in Open eClass platform can inject malicious JavaScript into user profile fields, which executes when other users view those pr...

This cross-site scripting vulnerability in Moodle allows attackers to inject malicious scripts through AI prompt responses. When users view compromise...

This Cross-Site Scripting (XSS) vulnerability in Moodle allows attackers to inject malicious JavaScript code into arithmetic expression fields in the ...

This vulnerability allows remote attackers to bypass authentication on EFM ipTIME A8004T routers via improper authentication in the Hidden Hiddenlogin...

HotCRP conference review software versions from October 2025 through January 2026 incorrectly delivered all document types with inline Content-Disposi...

CVE-2026-1701 is an SQL injection vulnerability in itsourcecode Student Management System 1.0 that allows remote attackers to execute arbitrary SQL co...

This CVE describes a remote command injection vulnerability in Tenda HG10 routers. Attackers can execute arbitrary commands on affected devices by man...

This SQL injection vulnerability in itsourcecode Directory Management System 1.0 allows attackers to execute arbitrary SQL commands via the Username p...

This CVE describes a command injection vulnerability in Tenda HG10 routers through the Boa webserver's formSamba endpoint. Attackers can remotely exec...

CVE-2026-1595 is an SQL injection vulnerability in itsourcecode Society Management System 1.0 that allows remote attackers to execute arbitrary SQL co...

This vulnerability allows remote attackers to execute SQL injection attacks against itsourcecode School Management System 1.0 via the txtsearch parame...

This SQL injection vulnerability in itsourcecode School Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID par...

CVE-2026-1593 is a SQL injection vulnerability in itsourcecode Society Management System 1.0 that allows remote attackers to execute arbitrary SQL com...

This is an SQL injection vulnerability in itsourcecode Society Management System 1.0 that allows attackers to execute arbitrary SQL commands through t...

CVE-2026-1545 is a SQL injection vulnerability in itsourcecode School Management System 1.0 that allows remote attackers to execute arbitrary SQL comm...