Code-Projects Simple IT Discussion Forum SQL注入漏洞

Code-Projects Simple IT Discussion Forum is a simple forum developed by Code-Projects as open source. Version 1.0 of the code-projects Simple IT Discussion Forum has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter postid in the...

PT-2026-31561

Name of the Vulnerable Software and Affected Versions Simple IT Discussion Forum version 1.0 Description A SQL injection issue exists in Simple IT Discussion Forum 1.0 due to manipulation of the post id argument within an unknown function of the /pages/content.php file. This allows for remote...

CVE-2026-33350

creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-09 07:16:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2b6vhc752s 2026-04-19 04:07:06+00:00| seen|...

CVE-2026-30815

creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-13 05:33:41+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mje5dkd3ls2g 2026-05-07 14:00:13+00:00| seen|...

CVE-2026-33756

creationtimestamp| type| source ---|---|--- 2026-04-08 23:32:54+00:00| published-proof-of-concept| Telegram/nyeqn3leA21ahM9eDPOdcOfg88eaiSN6Cc1j2Af2p1JdwTU 2026-04-09 09:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2h25tabw2p...

SUSE CVE-2026-4277

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

SUSE CVE-2026-4292

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

SUSE CVE-2026-32283

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3...

CVE-2026-5811

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

CVE-2026-40024

creationtimestamp| type| source ---|---|--- 2026-04-08 23:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizg6drzp72z 2026-04-09 01:27:32+00:00| published-proof-of-concept| Telegram/Dz-0u6C1u9T0WCXCs4W5hHtkLp3TtNEV9yEjsLh0yFvD1Y 2026-04-09 01:33:01+00:00| seen|...

pentestfr

Pentest Framework — Kali Linux / VirtualBox Framework Python...

CVE-2026-39429

creationtimestamp| type| source ---|---|--- 2026-04-08 22:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizfcvhhxw27 2026-04-09 01:27:18+00:00| published-proof-of-concept| Telegram/viJYT7gg8S3gJ-1aMGboAArF-0qOTu7PWcGdGBWdFKwXc 2026-04-09 07:00:11+00:00| seen|...

CVE-2026-39851

creationtimestamp| type| source ---|---|--- 2026-04-08 22:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizd2fxkvu2q...

CVE-2026-5806

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly a...

CVE-2026-5711

The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

CVE-2026-5811 SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

CVE-2026-35479

creationtimestamp| type| source ---|---|--- 2026-04-08 22:11:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizcrhd7sc2z...

CVE-2026-35407

creationtimestamp| type| source ---|---|--- 2026-04-08 22:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizc7jymup2i...

CVE-2026-34724

creationtimestamp| type| source ---|---|--- 2026-04-08 21:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbxtsm2b22 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 15:00:04+00:00|...

CVE-2026-35401

creationtimestamp| type| source ---|---|--- 2026-04-08 21:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbl575ko27 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 07:15:52+00:00| seen|...