CVE-2026-5000

A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. Impacted is the function LocalGPTHandler of the file backend/server.py of the component API Endpoint. The manipulation of the argument BaseHTTPRequestHandler results in missing authentication. T...

CVE-2026-2595

creationtimestamp| type| source ---|---|--- 2026-03-28 14:50:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4uy26joz2g...

MINI-RJWJ-JH7V-HM6F

Bulletin has no description...

CVE-2026-4996 Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection

A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function deletequestionandanswers/deletedocs/updatequestionanswer/updatedocs/getrelevantquestionanswersbyid/getrelevantdocsbyid of the file extensions/ee/vectorstores/lancedb/pandasailancedb/lancedb....

CVE-2026-5044

creationtimestamp| type| source ---|---|--- 2026-03-28 06:35:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116305409206627975 2026-03-28 09:43:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306150391983612 2026-03-29 13:19:51+00:00| seen|...

SQL Injection

wwbn/avideo is vulnerable to SQL Injection. The vulnerability is due to improper use of prepared statements where user-controlled input videosid is directly concatenated into the query, which allows an attacker to inject and execute arbitrary SQL commands...

CVE-2026-30533

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manageproduct.php file via the "id" parameter...

CVE-2026-4987

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2. This is due to the createpaymentintent function performing a payment validation solely based on the value of a...

CVE-2026-4987 SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2. This is due to the createpaymentintent function performing a payment validation solely based on the value of a...

CVE-2026-4987

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2. This is due to the createpaymentintent function performing a payment validation solely based on the value of a...

GHSA-M74M-F7CR-432X

creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...

SUSE CVE-2026-33062

free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5GC using the NRF discovery service are affected. The EncodeGroupId function attempts to access array indices 0, 1, 2...

SUSE CVE-2026-33215

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server provides an MQTT client interface. Prior to versions 2.11.15 and 2.12.5, Sessions and Messages can by hijacked via MQTT Client ID malfeasance. Versions 2.11.15 and 2.12.5 patch the issu...

Linux Distros Unpatched Vulnerability : CVE-2026-4985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgifaddframe of the file src/cgif.c of the component GIF Imag...

NewStart CGSL MAIN 7.02 : ceph Vulnerability (NS-SA-2026-0039)

The remote NewStart CGSL host, running version MAIN 7.02, has ceph packages installed that are affected by a vulnerability: - Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has none as JWT alg. And by doing so the J...

PT-2026-28706

Name of the Vulnerable Software and Affected Versions SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress versions up to and including 2.5.2 Description The SureForms plugin is susceptible to a Payment Amount Bypass issue. This occurs because the create payment...

GHSA-QVQR-5CV7-WH35

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:21+00:00| seen| Telegram/rRTxpaJmTYQmE8Q4CNoqCv49oiBv1g4u8JDlKqXnTcwR7sk...

GHSA-2328-F5F3-GJ25

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:03+00:00| seen| Telegram/EI25wC4yN3TaatXDJQ6U03Lar3nhYMfqPNXio5Iaw2cNO8...

CVE-2026-33991

WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file html/socio/sistema/deletartag.php uses extract$REQUEST on line 14 and directly concatenates the $idtag variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches t...

CVE-2026-27309

creationtimestamp| type| source ---|---|--- 2026-03-27 22:28:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi364lvtux2r 2026-03-27 22:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi37cgjnrz2i 2026-03-28 01:30:48+00:00| seen|...