CVE-2026-19060

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure...

CVE-2026-19062

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-19058

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/datainterpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public...

CVE-2026-15733

A Remote Code Execution RCE vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root...

CVE-2026-19159

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2026-41804

Craft CMS: Missing authorization check allows non-admin control panel users to reorder Global Sets...

CVE-2026-19110

DataGear up to 5.0.0 contains a stored cross-site scripting issue in the function HtmlTplDashboardWidgetHtmlRenderer of HtmlTplDashboardWidgetHtmlRenderer.java within the Chart Name Handler. The vulnerability is triggered by manipulation of the Title argument, allowing remote initiation of the at...

CVE-2026-19168

CVE-2026-19168 affects Google Chrome’s V8 engine. The flaw is an inappropriate implementation in V8 that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. The vulnerability is tied to Chrome versions before 151.0.7922.109; the Chrome stable r...

CVE-2026-19108

Summary: MZ Automation libiec61850 (up to 1.6.1) has a local-use-after-free in deleteDataSetValuesShadowBuffer (src/iec61850/server/mms_mapping/reporting.c, URCB Revalidation). An attacker with local access could exploit, and a public exploit exists. A fix is available in version 1.6.2; upgrade t...

CVE-2026-19070 itsourcecode Hospital Management System viewadmin.php sql injection

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2026-64663

Statamic (a Laravel/Git-based CMS) contains a vulnerability (CVE-2026-64663) affecting Antlers templates. Prior to versions 5.74.1 and 6.24.0, if user-supplied input is incorporated into Antlers templates, it could lead to loss of content and assets on sites where templates pass untrusted input i...

CVE-2026-19066

SourceCodester Online Examination & Learning Management System 1.0 contains a vulnerability in view_students.php where manipulating the class_group argument enables authorization bypass. The issue is exploitable remotely and affects an unknown function within the file. No additional exploit, affe...

CVE-2026-19064 SourceCodester Online Examination & Learning Management System view.php authorization

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

CVE-2026-19062 chiuwingyan house selectall.action sql injection

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-19062

Summary: CVE-2026-19062 affects the chiuwingyan house application, specifically the /paid/selectall.action endpoint. The vulnerability arises from manipulation of the zuname parameter, enabling a remote SQL injection. Public disclosure exists; no product version details are provided, and there is...

CVE-2026-19060 FoundationAgents MetaGPT code injection

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure...

CVE-2026-19060

FoundationAgents MetaGPT (up to 0.8.2) is vulnerable to a code-injection issue described as affecting an unknown function; exploitation requires local access. An exploit is publicly available. The CVE entry notes the vendor was contacted but did not respond. The provided metrics indicate medium s...

CVE-2026-19059

FoundationAgents MetaGPT (up to version 0.8.2) contains a path traversal flaw in metagpt/tools/libs/editor.py: the read function is vulnerable, enabling local attackers to traverse the filesystem. The issue is local-access, with a publicly disclosed exploit. Vendor contact about the disclosure oc...

CVE-2026-19059 FoundationAgents MetaGPT editor.py read path traversal

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path traversal. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendo...

CVE-2026-19058

FoundationAgents MetaGPT (up to 0.8.2) contains a code-injection vulnerability in the DataInterpreter function located at metagpt/roles/di/data_interpreter.py. The issue allows local attackers to manipulate input to inject code, with impact on confidentiality, integrity, and availability describe...