|
741
|
7.2 |
HIGH
Network
|
-
|
-
|
A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injection. It is possible to …
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-10870
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
742
|
7.2 |
HIGH
Network
|
-
|
-
|
A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation of the argument ipv…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-10871
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
743
|
7.2 |
HIGH
Network
|
-
|
-
|
A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command inj…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-10872
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
744
|
7.2 |
HIGH
Network
|
-
|
-
|
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command inject…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-10873
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
745
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument soc…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-10874
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
746
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-10875
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
747
|
7.2 |
HIGH
Network
|
-
|
-
|
The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.3 via the `sa…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-10586
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
748
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper…
|
CWE-266 CWE-285
Incorrect Privilege Assignment Improper Authorization
|
CVE-2026-10876
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
749
|
7.3 |
HIGH
Network
|
-
|
-
|
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-10877
|
2026-06-5 22:26 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
750
|
6.1 |
MEDIUM
Network
|
citeum
|
opencti
|
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable bo…
|
CWE-79
Cross-site Scripting
|
CVE-2026-35212
|
2026-06-5 22:07 |
2026-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|