225901 matches found
CVE-2026-19895
CVE-2026-19895 affects open source POS Open Source Point of Sale, version up to 3.4.2. The vulnerability lies in Login::index (file app/Config/Filters.php, Login Endpoint), where excessive authentication attempts are improperly restricted. This allows a remote attack with high complexity; exploit...
CVE-2026-19895 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
CVE-2026-19894
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...
UBUNTU-CVE-2026-74501
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface sndusbmidi2ump object in ump-privatedata, but it never installs an...
CVE-2026-74520
In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopfgroupalloc links each last-page IOPF group into the generic IOPF pending list before invoking the domain fault handler. iommufdfaultiopfhandler also queued an accepted group in the...
CVE-2026-74485 binfmt_misc: reject a flag character as the field delimiter
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: reject a flag character as the field delimiter The registration string starts with a user chosen delimiter that separates the individual fields. So that the field parsers terminate even on a truncated string createent...
EUVD-2026-59746
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...
CVE-2026-19894
The CVE-2026-19894 entry concerns itsourcecode Hospital Management System 1.0. Affected is an unknown function in /viewmedicine.php where manipulating the delid parameter yields a SQL injection. This can be triggered remotely, and public exploits exist. Connected sources corroborate an attacker-c...
GHSA-66H4-QJ4X-38XP
creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:07+00:00| seen| https://t.me/CyberSecurityExploit/29329 2026-08-16 00:00:23+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/29329...
CVE-2026-30121
creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:04+00:00| seen| https://t.me/CyberSecurityExploit/30370 2026-08-16 00:00:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30370...
MINI-H949-H392-F3WX
Bulletin has no description...
MINI-QF8Q-P7CV-R7RR
Bulletin has no description...
MINI-265F-9RRF-5JCW
Bulletin has no description...
MINI-77WX-76P9-P8F4
Bulletin has no description...
MINI-8XVG-8R8V-86GH
Bulletin has no description...
MINI-F9CR-G3G9-9RJR
Bulletin has no description...
MINI-H8WH-2V5X-9H9P
Bulletin has no description...
MINI-WR88-54QX-RR56
Bulletin has no description...