Aggregator

CVE-2026-3403 | PHPGurukul Student Record Management System 1.0 /edit-subject.php Subject 1 cross site scripting (EUVD-2026-9136)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in PHPGurukul Student Record Management System 1.0. It has been classified as problematic. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. This vulnerability is reported as CVE-2026-3403. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2026-3405 | thinkgem JeeSite up to 5.15.1 Connection path traversal (EUVD-2026-9138)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in thinkgem JeeSite up to 5.15.1. It has been rated as problematic. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. This vulnerability is traded as CVE-2026-3405. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-3406 | projectworlds Online Art Gallery Shop 1.0 Registration /admin/registration.php fname sql injection (EUVD-2026-9139)

Vuldb Updates
1 month 1 week ago
A vulnerability categorized as critical has been discovered in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. This vulnerability is known as CVE-2026-3406. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com

CVE-2026-20416 | MediaTek MT6991/MT6993/MT8188/MT8678 pcie out-of-bounds write

Vuldb Updates
1 month 1 week ago
A vulnerability described as critical has been identified in MediaTek MT6991, MT6993, MT8188 and MT8678. This vulnerability affects unknown code of the component pcie. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-20416. The attack needs to be approached locally. There is no available exploit. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2026-20423 | MediaTek MT7902/MT7920/MT7921/MT7922/MT7925/MT7927 WLAN STA Driver routine

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical has been found in MediaTek MT7902, MT7920, MT7921, MT7922, MT7925 and MT7927. This issue affects some unknown processing of the component WLAN STA Driver. This manipulation causes exposed dangerous routine. The identification of this vulnerability is CVE-2026-20423. The attack can only be executed locally. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2026-20425 | MediaTek MT8793 Display out-of-bounds write (CNNVD-202603-240)

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical was found in MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8196, MT8678 and MT8793. Impacted is an unknown function of the component Display. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-20425. The attack can only be performed from a local environment. No exploit is available. Applying a patch is advised to resolve this issue.
vuldb.com

CVE-2026-20424 | MediaTek MT6991/MT6993/MT8196/MT8678/MT8793 Display out-of-bounds (CNNVD-202603-237)

Vuldb Updates
1 month 1 week ago
A vulnerability labeled as problematic has been found in MediaTek MT6991, MT6993, MT8196, MT8678 and MT8793. Affected by this issue is some unknown functionality of the component Display. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2026-20424. It is possible to launch the attack on the local host. There is not any exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2026-3400 | Tenda AC15 up to 15.13.07.13 TextEditingConversion wpapsk_crypto2_4g stack-based overflow (EUVD-2026-9133 / CNNVD-202603-021)

Vuldb Updates
1 month 1 week ago
A vulnerability, which was classified as critical, was found in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapsk_crypto2_4g results in stack-based buffer overflow. This vulnerability is cataloged as CVE-2026-3400. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2026-3412 | itsourcecode University Management System 1.0 /att_single_view.php dt cross site scripting (EUVD-2026-9145)

Vuldb Updates
1 month 1 week ago
A vulnerability classified as problematic was found in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. This vulnerability is identified as CVE-2026-3412. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

CVE-2026-3413 | itsourcecode University Management System 1.0 admin_single_student.php ID sql injection (EUVD-2026-9148)

Vuldb Updates
1 month 1 week ago
A vulnerability, which was classified as critical, has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /admin_single_student.php. This manipulation of the argument ID causes sql injection. This vulnerability is tracked as CVE-2026-3413. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2026-3410 | itsourcecode Society Management System 1.0 /admin/check_studid.php student_id sql injection (EUVD-2026-9143)

Vuldb Updates
1 month 1 week ago
A vulnerability described as critical has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/check_studid.php. Executing a manipulation of the argument student_id can lead to sql injection. The identification of this vulnerability is CVE-2026-3410. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2026-3411 | itsourcecode University Management System 1.0 admin_single_student_update.php ID sql injection (EUVD-2026-9144)

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. This vulnerability is referenced as CVE-2026-3411. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com

How is AI security getting better over the years

Security Boulevard
1 month 1 week ago

How Do Non-Human Identities Influence AI Security? Have you ever wondered how the intricate dance between machine identities and cybersecurity shapes AI security? The advent of advanced AI systems has introduced an array of complex security challenges. Non-Human Identities (NHIs) have become paramount in securing these systems, especially when organizations shift to cloud-based environments. Understanding […]

The post How is AI security getting better over the years appeared first on Entro.

The post How is AI security getting better over the years appeared first on Security Boulevard.

Alison Mack

Can advanced AI security solutions help you feel more relaxed

Security Boulevard
1 month 1 week ago

Are Non-Human Identities the Key to Robust Cybersecurity? Safeguarding digital assets goes beyond securing human credentials. Increasingly, organizations are realizing the need to extend this protection to Non-Human Identities (NHIs), machine-driven identities integral to modern IT. These NHIs combine encrypted secrets—such as passwords, tokens, or keys—and the permissions they have on destination servers. Managed effectively, […]

The post Can advanced AI security solutions help you feel more relaxed appeared first on Entro.

The post Can advanced AI security solutions help you feel more relaxed appeared first on Security Boulevard.

Alison Mack

How independent can your AI operate securely

Security Boulevard
1 month 1 week ago

Can Your Organization Truly Trust Machine Identities? Managing Non-Human Identities (NHIs) has become critical for organizations seeking to bolster cybersecurity measures, especially in cloud environments. These identities, representing machine-generated credentials, act as gatekeepers of sensitive data across various systems. But how independent can your AI operate securely without compromising these machine identities? The concept of […]

The post How independent can your AI operate securely appeared first on Entro.

The post How independent can your AI operate securely appeared first on Security Boulevard.

Alison Mack

Managed ad