CVE-2026-14767

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoiceno results in sql injection. The attack can be executed...

CVE-2026-14767 CodeAstro Ecommerce Website POST Parameter confirm.php sql injection

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoiceno results in sql injection. The attack can be executed...

CVE-2026-14767

CodeAstro Ecommerce Website 1.0 contains a SQL injection in the POST Parameter Handler within /ecommerce-website-php/customer/confirm.php (invoice_no). The vulnerability can be triggered remotely; the exploit has been released publicly. The CVSS-derived metrics in the sources indicate network att...

EUVD-2026-41777

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoiceno results in sql injection. The attack can be executed...

UBUNTU-CVE-2026-14759

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...

CVE-2026-14759

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...

EUVD-2026-41769

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...

CVE-2026-14759

radare2 (radareorg) up to version 6.1.6 is affected by CVE-2026-14759 in the RBinJava Line Number Table Parser. The vulnerability is located in function r_bin_java_inner_classes_attr_calc_size (file shlr/java/class.c) and leads to a heap-based buffer overflow when a manipulation is performed. The...

EUVD-2026-41760

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/addroom.php. Executing a manipulation of the argument deleteimage/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. T...

MINI-XFG6-XGC8-7VVM

Bulletin has no description...

CVE-2026-57661

creationtimestamp| type| source ---|---|--- 2026-07-05 06:16:35+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpuwgs7gyb2c...

CVE-2026-14689 CodeAstro Apartment Visitor Management System add-apartment.php sql injection

A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-visitor/add-apartment.php. The manipulation of the argument apartmentno results in sql injection. The attack may be launched remotely. The...

PT-2026-55809

Name of the Vulnerable Software and Affected Versions radareorg radare2 versions prior to 6.1.7 Description A heap-based buffer overflow occurs in the RBinJava Line Number Table Parser component within the r bin java inner classes attr calc size function located in the shlr/java/class.c file. Thi...

CVE-2026-58419

creationtimestamp| type| source ---|---|--- 2026-07-04 02:11:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprybxveca2a...

CVE-2026-58295

creationtimestamp| type| source ---|---|--- 2026-07-04 01:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprxllbwp52x 2026-07-04 22:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpu2r3xim62n 2026-07-05 17:05:19+00:00| seen|...

CVE-2026-38971

creationtimestamp| type| source ---|---|--- 2026-07-03 17:23:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2rgfqwy2c...

CVE-2026-9545

creationtimestamp| type| source ---|---|--- 2026-07-03 09:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbriwjim22 2026-07-03 21:33:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriqdj5vb2n 2026-07-08 08:10:35+00:00| seen|...

CVE-2026-4772

creationtimestamp| type| source ---|---|--- 2026-07-03 03:54:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppnkmjaf22n...

ECHO-2905-42D3-1810

Bulletin has no description...

CVE-2026-9145

creationtimestamp| type| source ---|---|--- 2026-07-02 22:18:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2suimi22o 2026-07-03 03:22:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplrucijr2n...