MINI-63R3-M83J-4C6P

Bulletin has no description...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-19327 abracadabra50 claude-sesh enricher.ts enrichSession path traversal

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

CVE-2026-19327

CVE-2026-19327 affects the package abracadabra50 claude-sesh 1.0.0. The flaw is in the function getEnrichedData/enrichSession within src/services/enricher.ts, where manipulating the argument sessionId can trigger path traversal. The issue is operable locally, with CVSS-based assessments indicatin...

ECHO-996A-0359-856A

Bulletin has no description...

ECHO-1B5A-EE63-2C52

Bulletin has no description...

PT-2026-69285

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description Remote SQL injection is possible through the manipulation of the task id variable within the '/user/comment count user.php' endpoint. SQL injection is a technique where an attacker...

PT-2026-69322

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An issue exists in the processing of the '/user/CommentSave.php' endpoint. Remote attackers can trigger cross site scripting XSS—a technique used to inject malicious scripts into web...

PT-2026-69286

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An authorization bypass exists in the /user/UpdateTaskStatus.php endpoint. A remote attacker can exploit this by manipulating the task id/val argument, allowing unauthorized actions ...

CVE-2026-15257

creationtimestamp| type| source ---|---|--- 2026-08-08 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslv7c4uaq2i 2026-08-09 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnyb3cao62a...

GHSA-WPQR-6V78-JR5G

creationtimestamp| type| source ---|---|--- 2026-08-08 11:48:00+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585...

CVE-2026-19279 MIMICLab mcp-pdf-vision index.ts load_pdf command injection

A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function loadpdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was inform...

GHSA-7C4V-FWGW-9RF7

creationtimestamp| type| source ---|---|--- 2026-08-08 09:31:21+00:00| seen| https://gist.github.com/alon710/9318966a289b67d09be3b424c52f31ab...

CSS Injection

Mermaid is vulnerable to CSS Injection. The vulnerability is due to sibling combinator selectors generated from attacker-controlled diagram class or ID names, allowing CSS injection that can alter the appearance or behavior of unrelated page elements...

CVE-2026-19270 Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...

CVE-2026-19270

Hulupeep mcp-ui-probe up to 0.2.0 contains a local path-traversal vulnerability in Journey/Usage’s JourneyStorage.ts. The affected functions—get_journey, delete_journey, analyze_journey, and usage_stats—manipulate journeyId/filename to access unintended paths. The issue requires local access; no ...

EUVD-2026-54769

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...

CVE-2026-19270 Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...