PT-2026-91759

Name of the Vulnerable Software and Affected Versions DocsGPT versions prior to 0.20.1 Description The software posts OAuth connector session tokens to a wildcard target origin in the 'callback-status' endpoint without validating the sender origin. An attacker can act as the window.opener during...

CVE-2026-91201: Origin Validation Error

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to...

TencentOS Server 4: util-linux (TSSA-2026:0999)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0999 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-15600: Improper Neutralization of Special Elements used in an SQL Command

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...

CVE-2026-90579

creationtimestamp| type| source ---|---|--- 2026-09-13 20:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eoggxcz3opldc...

CVE-2026-89744

creationtimestamp| type| source ---|---|--- 2026-09-13 15:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfufbjt4s22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-53761

creationtimestamp| type| source ---|---|--- 2026-09-13 13:00:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvfnmopjzu2v 2026-09-13 13:00:05+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117263853354402081...

CVE-2026-89674

creationtimestamp| type| source ---|---|--- 2026-09-13 11:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfilt7kxi24 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90514

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

EUVD-2026-76996

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90514

SourceCodester School Registration and Fee System 1.0 is vulnerable to SQL injection via the Status argument in the file /bilal/normal/save_stud.php (function unspecified). The attack is remote and requires no authentication , rated CVSS 3.1: 7.3 (HIGH) with low impact on confidentiality, integri...

CVE-2026-90616

creationtimestamp| type| source ---|---|--- 2026-09-13 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117263264954155475 2026-09-13 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvffb6fut32p...

CVE-2026-89754

creationtimestamp| type| source ---|---|--- 2026-09-13 10:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfdlppxow22...

CVE-2026-82432

creationtimestamp| type| source ---|---|--- 2026-09-13 09:44:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117263083487894588...

Exploit for CVE-2026-24332

CVE-2026-24332 – Discord Invisible Mode Presence Leak Summ...

CVE-2026-90608

creationtimestamp| type| source ---|---|--- 2026-09-13 00:45:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117260963860445623 2026-09-14 01:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvgvudb4b22t 2026-09-14 01:30:25+00:00| seen|...

CVE-2026-89626

creationtimestamp| type| source ---|---|--- 2026-09-13 00:31:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117260910566293006 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...