CVE-2026-5134 SQLi in Loca Software's CMS

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in a...

CVE-2026-61545

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4i4smu425...

CVE-2026-16102

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-12 04:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msuclvghtf22 2026-08-12 04:37:08+00:00| seen|...

CVE-2026-70429

creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:21+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-jenkins-2...

CVE-2026-64587

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64587...

CVE-2026-69240

A flaw was found in Sequelize. When configured to use an Oracle database, the Sequelize Node.js Object-Relational Mapper ORM tool fails to properly escape certain date and timestamp values. This oversight allows a remote attacker to bypass security filters. By injecting malicious SQL commands, an...

CVE-2026-6639

creationtimestamp| type| source ---|---|--- 2026-08-06 08:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u...

CVE-2026-20313

creationtimestamp| type| source ---|---|--- 2026-08-06 08:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfl6xfic22t 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...

GHSA-WM8W-6QJM-CV43

creationtimestamp| type| source ---|---|--- 2026-08-06 04:31:21+00:00| seen| https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b...

CVE-2026-11421

creationtimestamp| type| source ---|---|--- 2026-08-05 23:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msensp64kw26...

CVE-2026-17617

creationtimestamp| type| source ---|---|--- 2026-08-05 19:53:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecjiasie22 2026-08-11 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrs4xvgke2t...

CVE-2026-70447

creationtimestamp| type| source ---|---|--- 2026-08-05 18:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dwirplyq3m6dz...

CVE-2026-71192

creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...

GHSA-V93F-FGJR-HJRJ

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-50749

creationtimestamp| type| source ---|---|--- 2026-08-05 15:43:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/hhbopx5ltrfbd...

CVE-2026-48834

creationtimestamp| type| source ---|---|--- 2026-08-05 15:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz...

CVE-2026-14869

creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717...

CVE-2026-53992 Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

CVE-2026-53992

A reflected XSS in ProjectSend r2029 affects thumbnails-regenerate.php through unsanitized start_date and end_date GET parameters, which are echoed into HTML attributes. An attacker can craft a URL that, when opened by an authenticated user with edit_settings permissions, executes arbitrary HTML/...

CVE-2026-53992 Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...