CVE-2026-4580

A security flaw has been discovered in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkupdatestatus.php of the component Parameters Handler. The manipulation of the argument serviceId results in sql injection. The attack can be executed remotely. The...

CVE-2026-4585

creationtimestamp| type| source ---|---|--- 2026-03-23 08:40:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116277589578722237 2026-03-23 12:29:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq2rstcxo2u 2026-03-23 13:06:55+00:00| seen|...

CVE-2026-4570

creationtimestamp| type| source ---|---|--- 2026-03-23 04:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4570...

PT-2026-27188

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 26.1 Description AVideo is an open source video platform. Versions up to and including 26.0 have an issue in the password recovery endpoint at objects/userRecoverPass.php. This endpoint performs user existence and...

openSUSE Security Advisory (SUSE-SU-2026:0938-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained security vulnerabilities. These vulnerabilities stemmed from the password recovery endpoint, userRecoverPass.php, which performed an identity verification before...

Fixed in Apache Tomcat 10.1.53

Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 4d0615a5. This issue was reported to the Tomcat security team o...

Nexxt Solutions Nebula 300+ 安全漏洞

The Nexxt Solutions Nebula 300+ is a wireless router produced by the American company Nexxt Solutions. Versions of the Nebula 300+ prior to 12.01.01.37 contain security vulnerabilities. These vulnerabilities stem from the lack of cross-site request forgery protection in the status change manageme...

CVE-2026-4567

creationtimestamp| type| source ---|---|--- 2026-03-22 09:05:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116272025234810629 2026-03-23 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhp2yfkb7o2m 2026-03-23 05:00:15+00:00| seen|...

CVE-2026-4558

creationtimestamp| type| source ---|---|--- 2026-03-22 08:11:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116271813198950896 2026-03-22 18:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mho52thwyc2o 2026-03-22 19:18:35+00:00| seen|...

CVE-2026-4533

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

CVE-2026-4533

CVE-2026-4533 affects code-projects Simple Food Ordering System 1.0. The vulnerability is in the all-tickets.php file where manipulating the Status parameter results in an SQL injection, with remote exploitation possible. Exploitation details are reported across multiple sources (NVD, Red Hat, CI...

Code-Projects Simple Food Ordering System SQL注入漏洞

Code-Projects Simple Food Ordering System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the code-projects Simple Food Ordering System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the Status parameter in the fi...

PT-2026-26963

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

Linux Distros Unpatched Vulnerability : CVE-2026-33306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt implementation...

CVE-2026-32048

creationtimestamp| type| source ---|---|--- 2026-03-21 22:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlzrs2naa2s 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-4553

creationtimestamp| type| source ---|---|--- 2026-03-21 17:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116268258506979437 2026-03-22 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4553 2026-03-22 18:28:08+00:00| seen|...

CVE-2019-25568

creationtimestamp| type| source ---|---|--- 2026-03-21 15:22:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhldjoeowo2x 2026-03-23 07:56:56+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhplki664t2j...

CVE-2026-4535

creationtimestamp| type| source ---|---|--- 2026-03-21 08:47:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266293950470223 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4535 2026-03-22 06:00:31+00:00| seen|...

CVE-2026-4529

creationtimestamp| type| source ---|---|--- 2026-03-21 07:53:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266081669772514 2026-03-21 23:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm64a6a4q2n 2026-03-22 00:09:23+00:00| seen|...