CVE-2026-64880 Blind SQL Injection

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...

CVE-2026-64880

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...

CVE-2026-64880

CVE-2026-64880 corresponds to a blind SQL injection in Tenable Security Center, caused by unsanitized user input in report filtering parameters that is concatenated into SQL queries. This can enable unauthorized database read access. The CVE is listed with a base score of 7.1 (HIGH) on CVSS v3.1/...

CVE-2026-64880 Blind SQL Injection

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...

ops-py-appreg (0.0.0), ops-py-cert-report (5.0.0) +1 more potentially affected by CVE-2026-59890 via setuptools (75.0.0)

setuptools PYPI version 75.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ops-py-appreg 0.0.0 - ops-py-cert-report 5.0.0 - ops-py-reports =0.0.1, =0.3.0 Source cves: CVE-2026-59890 Source advisory:...

AutoBugBounty

AutoScan — Legendary Bug Bounty Automation Framework ▄█...

CVE-2026-28310

creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afpcpwm2q 2026-07-26 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrldo4thtn23...

CVE-2026-16450

The CVE-2026-16450 issue affects zsadmin2025 ZS-Admin (up to commit b52e14536d59fda11e56e2536a1c32e82a38cead) in the MyBatis-Plus Tenant Plugin, specifically the function getTenantId in /api/system/sys/dept/page. The underlying problem is manipulation of the X-Tenant-Id argument, which leads to a...

Metasploitable2-Exploit

Metasploitable2 Exploitation Lab A complete penetration testi...

EUVD-2026-46276

A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file /api/system/sys/dept/page of the component com.zs.sys.dept.controller.SysDeptController. This manipulation of the...

SUSE CVE-2026-63916

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that the HIDDGINPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify...

CVE-2026-1771

creationtimestamp| type| source ---|---|--- 2026-07-21 10:53:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5nfg3ns62b 2026-07-21 14:14:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr5ylsgfxk2o...

CVE-2026-63963

creationtimestamp| type| source ---|---|--- 2026-07-21 09:28:48+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr5in7swgl2p 2026-07-21 09:28:51+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr5incph7d25 2026-07-21 09:28:54+00:00| seen|...

Malicious code in rasterkit-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d748af7546aacbfca356759d4c81386f113a32dfc80ff8bb75da3eb3c8b4358d rasterkit-demo ships a CLI entry point rasterkit-demo whose rundemo function imports demochannelwindows from PIL.data and passes the returned buffer ...

CVE-2026-16336

Technical details about CVE-2026-16336 are not publicly available in the provided documents. Monitor for updates from trinodb/trino project and CVE listings.

PT-2026-62104

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries. This...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

blockies (0.0.1), demosys-py (>=0.1.2, <=0.3.12) +17 more potentially affected by CVE-2026-59205 via pillow (4.0.0)

pillow PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.1 - demosys-py =0.1.2, =0.0.2, =1.6.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.0, =3.0.0 and more Source cves:...

blockies (0.0.1), demosys-py (>=0.1.2, <=0.3.12) +17 more potentially affected by CVE-2026-55379 via pillow (4.0.0)

pillow PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.1 - demosys-py =0.1.2, =0.0.2, =1.6.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.0, =3.0.0 and more Source cves:...

blockies (0.0.1), demosys-py (>=0.1.2, <=0.3.12) +17 more potentially affected by CVE-2026-54059 via pillow (4.0.0)

pillow PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.1 - demosys-py =0.1.2, =0.0.2, =1.6.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.0, =3.0.0 and more Source cves:...