EUVD-2026-18829

prompts.chat prior to commit 1464475 contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit...

CVE-2026-25726

creationtimestamp| type| source ---|---|--- 2026-04-03 21:17:42+00:00| published-proof-of-concept| Telegram/qTocgF1bA6EikMAxrpKqC2AQPtdVVaE6KTy64KQmK5LJ1E 2026-04-03 21:28:15+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mimnzdwkyz2v 2026-04-04 05:14:42+00:00| seen|...

CVE-2026-22665

prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit...

CVE-2026-22665

prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit...

CVE-2026-22665 prompts.chat Identity Confusion via Case-Sensitive Username Handling

prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit...

CVE-2026-22665 prompts.chat Identity Confusion via Case-Sensitive Username Handling

prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit...

CVE-2026-25197 Gardyn Cloud API Authorization Bypass Through User-Controlled Key

A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call...

CVE-2026-25197 Gardyn Cloud API Authorization Bypass Through User-Controlled Key

A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call...

EUVD-2026-18803

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /adminpanel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes unrestrict...

CVE-2025-59710

creationtimestamp| type| source ---|---|--- 2026-04-03 16:55:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim6rab3eg2d...

CVE-2026-26477

creationtimestamp| type| source ---|---|--- 2026-04-03 16:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim67de7yf2d 2026-04-04 06:17:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minlmex7u227...

CVE-2026-25043

creationtimestamp| type| source ---|---|--- 2026-04-03 16:30:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim5fqfxge2i...

CVE-2026-5472

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /adminpanel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes unrestrict...

CVE-2026-25044

creationtimestamp| type| source ---|---|--- 2026-04-03 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4kcoevj2i 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...

CVE-2026-31398

creationtimestamp| type| source ---|---|--- 2026-04-03 16:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4g6ct632t...

CVE-2026-31404

creationtimestamp| type| source ---|---|--- 2026-04-03 16:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim43ex3js2i 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31402

creationtimestamp| type| source ---|---|--- 2026-04-03 16:02:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3sfcm7t2z 2026-04-10 03:00:06+00:00| published-proof-of-concept| Telegram/UD4f2fAiHC8hrDsfHLnzkdfzuqQpRpS5NbwfSwmP7L4Z6U 2026-04-30 13:50:26+00:00| seen|...

CVE-2026-31399

creationtimestamp| type| source ---|---|--- 2026-04-03 16:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3pp62gd2j 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-08-03 05:51:36+00:00| seen...

CVE-2026-5472 ProjectsAndPrograms School Management System Profile Picture settings.php unrestricted upload

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /adminpanel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes unrestrict...

CVE-2026-5472

CVE-2026-5472 affects ProjectsAndPrograms School Management System (up to build 6b6fae5426044f89c08d0dd101c7fa71f9042a59). The vulnerability lies in the Profile Picture Handler, specifically an unknown function in /admin_panel/settings.php that manipulates the File argument to cause unrestricted ...