CVE-2026-102427 (matched: php)

1st October 2026

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing (task=getContent), a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates the uploaded file’s content with a real ...

CVE-2025-13247 (matched: php)

1st October 2026

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for ...

CVE-2025-40690 (matched: php)

1st October 2026

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'.

Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2025-40690

Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability

1st October 2026

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-86950

By Month

By Month

Support

Announcements

CVE-2026-102427 (matched: php)

CVE-2025-13247 (matched: php)

CVE-2025-40690 (matched: php)

Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability

Support

By Month

By Month

Support

Announcements

CVE-2026-102427 (matched: php)

CVE-2025-13247 (matched: php)

CVE-2025-40690 (matched: php)

Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability

Support

Generate Password