CVE-2026-5638

creationtimestamp| type| source ---|---|--- 2026-04-06 10:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2l73xjh2o...

CVE-2026-5636

creationtimestamp| type| source ---|---|--- 2026-04-06 10:21:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit26j4rvh2i...

CVE-2026-31407

creationtimestamp| type| source ---|---|--- 2026-04-06 10:16:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miszuar4ni2g 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-06 05:49:59+00:00| seen|...

CVE-2026-5642

A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Handler. This manipulation of the argument Name causes improper authorization. It ...

CVE-2026-31406

creationtimestamp| type| source ---|---|--- 2026-04-06 10:05:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miszatikzt2t 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-5642 Cyber-III Student-Management-System HTTP POST Request update.php improper authorization

A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Handler. This manipulation of the argument Name causes improper authorization. It ...

CVE-2026-5642

Cyber-III Student-Management-System is affected up to commit 1a938fa61e9f735078e9b291d2e6215b4942af3f. The vulnerability lies in the HTTP POST Request Handler for /viva/update.php where manipulating the argument Name causes improper authorization. It can be initiated remotely and an exploit has b...

CVE-2026-5622

creationtimestamp| type| source ---|---|--- 2026-04-06 06:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misngvqja52s...

CVE-2026-5620

creationtimestamp| type| source ---|---|--- 2026-04-06 06:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mismwbqqid2s...

CVE-2026-5623

creationtimestamp| type| source ---|---|--- 2026-04-06 06:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mislyqxxes2d...

CVE-2026-5606

creationtimestamp| type| source ---|---|--- 2026-04-06 03:45:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mise2iigim2d...

CVE-2019-25704

creationtimestamp| type| source ---|---|--- 2026-04-06 00:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miry2g55jk27 2026-04-08 00:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwyetald32c...

PT-2026-30694

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

chyrp-lite 安全漏洞

Chyrp-Lite is a self-hosted blog and website platform developed by Daniel Pimley. Versions of Chyrp-Lite prior to version 2026.01 contained security vulnerabilities. These vulnerabilities stemmed from insecure direct object references or bulk assignment issues in the Post model, which could lead ...

goshs 路径遍历漏洞

Goshs is a simple HTTP server developed by Patrick Hener using Go language. Versions of Goshs prior to 2.0.0-beta.3 contained a path traversal vulnerability. This vulnerability stemmed from the lack of cleaning up POST multipart upload directories, which could lead to path traversal attacks...

CVE-2019-25685

creationtimestamp| type| source ---|---|--- 2026-04-05 23:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirwait4tn2i...

CVE-2019-25690

creationtimestamp| type| source ---|---|--- 2026-04-05 23:31:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvu23h4i22...

EUVD-2019-20083

CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...

EUVD-2019-20073

qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the searchbyextrafields parameter. Attackers can send POST requests to the users endpoint with malicious searchbyextrafields values to trigger SQL syntax errors and...

CVE-2019-25674

CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...