Vuldb Updates

A vulnerability was found in Directory Management System 1.0. It has been classified as critical. This vulnerability affects unknown code of the file add-directory.php. This manipulation of the argument fullname causes sql injection. The identification of this vulnerability is CVE-2022-31384. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as critical has been found in Tenda ONT GPON AC1200 1.0.1. This vulnerability affects unknown code of the component Ping Handler. The manipulation leads to command injection. This vulnerability is documented as CVE-2022-30023. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in IObit IOTransfer 4.3.1.1561. It has been rated as critical. This vulnerability affects unknown code of the component Airserv. Performing a manipulation results in missing authentication. This vulnerability was named CVE-2022-24562. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability marked as problematic has been reported in ASG Zena Cross Platform Server Enterprise Edition 4.2.1. Impacted is an unknown function of the component Cookie Handler. This manipulation causes missing encryption of sensitive data. The identification of this vulnerability is CVE-2021-45025. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in ASG Zena Cross Platform Server Enterprise Edition 4.2.1. This affects an unknown function. Executing a manipulation can lead to xml external entity reference. This vulnerability is tracked as CVE-2021-45024. The attack is only possible within the local network. No exploit exists.

A vulnerability, which was classified as problematic, was found in ASG Zena Cross Platform Server Enterprise Edition 4.2.1. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2021-45026. The attack may be launched remotely. There is no exploit available.

A vulnerability identified as problematic has been detected in Ruckus Wireless ZoneDirector 9.8.3.0. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2020-21161. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as critical has been found in Tenda AC23 16.03.07.44. The impacted element is the function formWifiBasicSet. The manipulation of the argument security_5g leads to stack-based buffer overflow. This vulnerability is documented as CVE-2022-32384. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in SourceCodester Zoo Management System 1.0. It has been rated as problematic. This impacts an unknown function of the component Add Classification. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2022-33075. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in itsourcecode Hospital Management System 1.0. It has been declared as critical. This affects an unknown part of the file /patientreport.php. Executing a manipulation of the argument editid can lead to sql injection. This vulnerability is tracked as CVE-2026-14731. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. It has been rated as critical. This vulnerability affects unknown code of the file /edit_exam.php. The manipulation of the argument ID leads to sql injection. This vulnerability is listed as CVE-2026-14732. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability categorized as critical has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_coursea.php. The manipulation of the argument ID results in sql injection. This vulnerability is cataloged as CVE-2026-14733. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability identified as critical has been detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation of the argument ID causes sql injection. This vulnerability is registered as CVE-2026-14734. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability labeled as critical has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. This vulnerability is documented as CVE-2026-14735. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability marked as critical has been reported in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. This vulnerability is reported as CVE-2026-14736. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. This vulnerability is traded as CVE-2026-14737. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/engines/mlx/vision.py of the component Vision Feature Cache. The manipulation results in use of weak hash. This vulnerability is known as CVE-2026-14738. It is possible to launch the attack remotely. Furthermore, an exploit is available. The pull request to fix this issue awaits acceptance.

A vulnerability was found in langchain-ai langgraph up to 1.2.4. It has been rated as problematic. The affected element is the function _freeze of the file libs/langgraph/langgraph/_internal/_cache.py of the component Task Result Cache. This manipulation of the argument default_cache_key causes use of weak hash. This vulnerability is tracked as CVE-2026-14742. The attack is possible to be carried out remotely. Moreover, an exploit is present. The pull request to fix this issue awaits acceptance.

A vulnerability categorized as critical has been discovered in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. This vulnerability is listed as CVE-2026-14743. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. This vulnerability is cataloged as CVE-2026-14744. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.