5369098 matches found
CVE-2026-18171
creationtimestamp| type| source ---|---|--- 2026-08-20 01:24:58+00:00| seen| https://bsky.app/profile/kindtech.bsky.social/post/3mti3losfbl2r...
CVE-2026-76785
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy/orderFormat results in sql injection. It is possible to...
CVE-2026-76795
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2026-75628
Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...
CVE-2026-76783
A security vulnerability has been detected in DeDeCMS 531UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument sql leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...
CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...
CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...
CVE-2026-75628
creationtimestamp| type| source ---|---|--- 2026-08-20 01:14:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/bisevgxccrvvo...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
CVE-2025-21479 – Qualcomm Adreno GPU privilege escalation vuln...
CVE-2026-76583
creationtimestamp| type| source ---|---|--- 2026-08-20 01:09:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mti2peshry2p 2026-08-20 01:09:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117125162450089157...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validat...
CVE-2026-76879
creationtimestamp| type| source ---|---|--- 2026-08-20 01:04:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mti2hg64yy2m...
CVE-2026-76886
creationtimestamp| type| source ---|---|--- 2026-08-20 01:04:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mti2h7jbye27...
CVE-2026-76795 AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2026-76795
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2026-75628
Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...
CVE-2026-75628 Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter
Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...
EUVD-2026-63189
Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...