CubeCart 6.7.4 - SQL

Exploit Title: CubeCart 6.7.4 - SQL Bypass in maintenance.index.inc.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54646 Advisory / References...

GHSA-P6GQ-J5CR-W38F

creationtimestamp| type| source ---|---|--- 2026-08-30 21:00:04+00:00| seen| https://t.me/GithubRedTeam/100406 2026-08-31 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100406...

MINI-C26V-FVQF-XF88

Bulletin has no description...

ECHO-224B-7D14-E186

Bulletin has no description...

ECHO-3050-E6F8-F8C9

Bulletin has no description...

MINI-HG34-CQG8-M9R6

Bulletin has no description...

ROOT-OS-DEBIAN-13-CVE-2025-68174 CVE-2025-68174 in linux - Patched by Root

Root has patched CVE-2025-68174 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68173 CVE-2025-68173 in linux - Patched by Root

Root has patched CVE-2025-68173 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31409 CVE-2026-31409 in linux - Patched by Root

Root has patched CVE-2026-31409 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40166 CVE-2025-40166 in linux - Patched by Root

Root has patched CVE-2025-40166 in the linux package for Root:Debian:13. Multiple fixed versions available...

MINI-C5HH-M26P-V2R5

Bulletin has no description...

MINI-H6RX-6QJP-FM54

Bulletin has no description...

MINI-FJ4W-8HWR-4W5M

Bulletin has no description...

MINI-7HF9-G6HH-JCQH

Bulletin has no description...

MINI-7MJX-P7RJ-J7XP

Bulletin has no description...

MINI-9WFF-MC24-FJ82

Bulletin has no description...

MINI-89G3-PHGC-4WJP

Bulletin has no description...

MINI-744R-4V3P-R484

Bulletin has no description...

CVE-2026-18904

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers...

CVE-2026-82267

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...