CVE-2026-0590: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate th...

CVE-2026-0583: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely...

CVE-2026-0580: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

CVE-2026-0584: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/leftcart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

WordPress Form to Chat App plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Form to Chat App versions = 1.2.5...

CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

The vulnerability of the functions ForegroundLockActivity() and WelcomeActivity() in the Reolink app for video surveillance management, which allows a intruder to gain unauthorized access to the functions or components of the app.

The vulnerability of the ForegroundLockActivity and WelcomeActivity functions in the Reolink app for video surveillance management involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

The vulnerabilities of the functions ForegroundLockActivity() and MainActivity() in the Reolink app for video surveillance management, which allow a intruder to gain unauthorized access to the app’s data and functions.

The vulnerability of the ForegroundLockActivity and MainActivity functions in the Reolink app for video surveillance system management involves bypassing the authentication process by using an alternative path. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

CVE-2025-62840 HBS 3 Hybrid Backup Sync

A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following...

CVE-2025-15424

creationtimestamp| type| source ---|---|--- 2026-01-02 04:33:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbg2vkqh3y2r 2026-01-02 18:53:53+00:00| published-proof-of-concept| Telegram/06q-TvAKXAyL-ZabO-7p63z6qQH9ntO7cFX9ghbvmNNE5E 2026-01-02 21:55:41+00:00|...

CVE-2025-11961

creationtimestamp| type| source ---|---|--- 2026-01-02 00:01:41+00:00| seen| https://bsky.app/profile/slackers.it/post/3mbfloxy2422a 2026-01-09 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynjr2oyn22 2026-01-10 20:53:09+00:00| seen|...

PT-2026-1126

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A security flaw exists in yeqifu warehouse due to path traversal. The issue is related to the manipulation of the path argument within the createResponseEntity function located in th...

CVE-2025-13029

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

CVE-2025-22189

creationtimestamp| type| source ---|---|--- 2026-01-01 04:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdkmhyy2q2x...

CVE-2025-67709

creationtimestamp| type| source ---|---|--- 2026-01-01 01:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd6tyvcak2c 2026-01-02 02:25:33+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mbftqanq7x2d 2026-01-02 08:00:19+00:00| seen|...

CVE-2025-69412

creationtimestamp| type| source ---|---|--- 2026-01-01 00:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd4wvviop2g...

EUVD-2025-206056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...

CVE-2025-50053 WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...

CVE-2025-50053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin – Your native, mobile iPhone App...