CVE-2026-4838

A flaw has been found in SourceCodester Malawi Online Market 1.0. The impacted element is an unknown function of the file /display.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be us...

GHSA-4C29-8RGM-JVJJ

creationtimestamp| type| source ---|---|--- 2026-03-27 03:18:12+00:00| seen| Telegram/wovzpCQvp7hlTQxwTsDEYFJDESQHFA6mVe176dFHuk85of0...

CVE-2026-33280

creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:00+00:00| seen| https://jvn.jp/en/jp/JVN83788689/ 2026-03-27 07:18:51+00:00| seen| Telegram/P-c6qw41ZnFxRT6ZQxEHaCculf4buxnen-CyMrcI5qxOnbs 2026-03-27 08:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhzp4c3p6p23...

GHSA-VFGG-MVXX-MGG7

creationtimestamp| type| source ---|---|--- 2026-03-27 01:18:53+00:00| seen| Telegram/67MCm8uvWkL1PFFVLqu-Ae9nhYuAfQmsKMFjCSOu4hiA4mc...

GHSA-83XR-5XXR-MH92

creationtimestamp| type| source ---|---|--- 2026-03-27 01:18:44+00:00| published-proof-of-concept| Telegram/iwwl46KpLYwipkJFr9bJW43ngNWdoc7X8GY9RAN-oHOG28...

CVE-2026-33730

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Prior to version 3.4.2, an Insecure Direct Object Reference IDOR vulnerability allows an authenticated low-privileged user to access the password change functionality of...

CVE-2026-33730 Open Source Point of Sale has an IDOR in Password Change (Home)

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Prior to version 3.4.2, an Insecure Direct Object Reference IDOR vulnerability allows an authenticated low-privileged user to access the password change functionality of...

CVE-2026-33730

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Prior to version 3.4.2, an Insecure Direct Object Reference IDOR vulnerability allows an authenticated low-privileged user to access the password change functionality of...

CVE-2026-33730

Open Source Point of Sale (opensourcepos) is a PHP web app using CodeIgniter. Prior to version 3.4.2, an Insecure Direct Object Reference (IDOR) allows an authenticated low-privilege user to access the password change functionality of other users (including administrators) by manipulating the emp...

XAgent 安全漏洞

XAgent is an open-source, experimental large language model-driven autonomous agent developed by OpenBMB. Version 1.0.0 of XAgent contains a security vulnerability, which stems from incorrect handling of the parameter interactionid in the file XAgentServer/application/websockets/replayer.py,...

PT-2026-28516

Name of the Vulnerable Software and Affected Versions Open Source Point of Sale opensourcepos versions prior to 3.4.2 Description The application is a web-based point of sale system written in PHP using the CodeIgniter framework. A security issue exists where an authenticated user with limited...

WeGIA SQL注入漏洞

WeGIA is a network manager for the welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.7 contained an SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter idtag in the file html/socio/sistema/deletartag.php, which could lead...

SourceCodester Online Food Ordering System 安全漏洞

The SourceCodester Online Food Ordering System is an open-source online meal ordering system developed by SourceCodester. Version 1.0 of the SourceCodester Online Food Ordering System contains a security vulnerability. This vulnerability arises from the improper cleaning of the id parameter in th...

CVE-2026-30534

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/managecategory.php via the "id" parameter...

CVE-2026-30532

A SQL Injection vulnerability exists in the SourceCodester Online Food Ordering System v1.0 . The flaw is located in the admin/view_product.php file and is caused by the improper cleaning of the "id" parameter . This vulnerability allows an attacker to perform SQL injection attacks, potentially l...

PT-2026-28684

A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on connect/ReplayServer.send data of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the argument interaction id leads to authorization...

CVE-2026-4966: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/modroom/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and m...

CVE-2026-30534: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/managecategory.php via the "id" parameter...

CVE-2026-30533: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manageproduct.php file via the "id" parameter...

CVE-2026-30532: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/viewproduct.php file via the "id" parameter...