19403 matches found
CVE-2026-82614
A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...
PT-2026-83728
A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...
PT-2026-83790
A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve mgr.cgi. This manipulation of the argument f dev causes os command injection. The attack is possible to be carried out remotely. The exploit has...
CVE-2026-12513
creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-09-01 20:00:04+00:00| published-proof-of-concept|...
CVE-2026-82484
A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the ID parameter of the file /pages/emp_searchfrm.php. The flaw allows a remote, low-privileged attacker to manipulate the argument to inject SQL, with low impact on confidentiality, integrity, a...
PT-2026-83611
A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add customer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...
PT-2026-83531
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...
CVE-2026-19296
creationtimestamp| type| source ---|---|--- 2026-08-28 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100150 2026-08-29 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100150...
CVE-2026-55588
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:26+00:00| published-proof-of-concept| https://github.com/oras-project/oras/security/advisories/GHSA-298f-872v-2rcx...
CVE-2026-54766
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:32+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-f27p-pw2p-9pr4...
GHSA-6PG3-CHWQ-WGQC
creationtimestamp| type| source ---|---|--- 2026-08-28 15:00:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3418 2026-08-29 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3418...
CVE-2026-81819
creationtimestamp| type| source ---|---|--- 2026-08-27 18:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2qhkptqxzcrll...
CVE-2019-9673
creationtimestamp| type| source ---|---|--- 2026-08-27 14:00:12+00:00| published-proof-of-concept| Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE 2026-08-28 00:00:43+00:00| published-proof-of-concept| Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE...
CVE-2026-19914
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:04+00:00| published-proof-of-concept| Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg 2026-08-27 12:00:06+00:00| seen| Telegram/1RDfiYvrsmnO1GwdulIpRqcmzxQFBcCsg-HKcZQ14O2mKw 2026-08-28 00:00:42+00:00| published-proof-of-concep...
CVE-2026-34308
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:04+00:00| published-proof-of-concept| Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots 2026-08-28 00:00:48+00:00| published-proof-of-concept| Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots...
CVE-2026-81491
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...
GHSA-2XP9-VWFH-VXW4
creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:07+00:00| published-proof-of-concept| Telegram/5OcvQ0Kvc7EZmNnx124YGJsJb961fNxRCYGvYNIkiajBUhEy 2026-09-04 13:52:33+00:00| seen| https://bsky.app/profile/newshoundai.bsky.social/post/3mup4ebo6nc2i...
CVE-2026-77622
creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834 2026-08-27 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834...
CVE-2026-54616
creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...
GHSA-95X5-QVVM-HMFP
creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...