PT-2026-50963

Name of the Vulnerable Software and Affected Versions Joomla! Component jCart for OpenCart version 2.0 Description An SQL injection allows unauthenticated attackers to manipulate database queries by injecting SQL code. This is achieved by sending GET requests to the 'index.php' endpoint using the...

PT-2026-50951

Name of the Vulnerable Software and Affected Versions Joomla! Component Twitch Tv version 1.1 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by injecting malicious code through the username and id parameters. Attackers can send GET...

PT-2026-50997

Name of the Vulnerable Software and Affected Versions JoomCRM version 1.1.1 Description An SQL injection allows authenticated attackers to execute arbitrary SQL queries. By sending GET requests to the 'index.php' endpoint with the parameters option=com joomcrm and view=contacts, attackers can...

PT-2026-51099

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.1 Description An Insecure Direct Object Reference IDOR issue exists in the /api/v1/responses endpoint. This occurs because the get flow by id or endpoint name function queries the database using a flow ID without...

CVE-2026-6716

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

MINI-JHJW-HGXV-QCRW

Bulletin has no description...

MINI-X2FW-P82Q-V99H

Bulletin has no description...

MINI-J8JF-HQW5-H25V

Bulletin has no description...

MINI-57GJ-33MF-67JX

Bulletin has no description...

ECHO-D378-1B5A-F13E

Bulletin has no description...

GHSA-GFJ5-979R-92PW

creationtimestamp| type| source ---|---|--- 2026-06-18 20:11:22+00:00| seen| https://gist.github.com/alon710/ddadbe26c2841109bcde2cf3e1d364b2 2026-06-18 20:22:11+00:00| seen| https://gist.github.com/alon710/fd355e480f025edd956fae7107a02df9...

CVE-2026-9692

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy...

CVE-2026-42487

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model via XENDOMCTLioportmapping, and hence the linked list used may changed at any time. Traversal of those lists while handling guest I/O port accesses therefore needs...

CVE-2026-5667

creationtimestamp| type| source ---|---|--- 2026-06-18 18:13:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3molgkjvhag2n 2026-06-18 18:54:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3moliuhtdar2v 2026-07-15 12:00:04+00:00| published-proof-of-concept...

EUVD-2026-37926

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy...

CVE-2025-32424

creationtimestamp| type| source ---|---|--- 2026-06-18 17:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molf6ewx2p2o...

CVE-2026-54105

The U.S. Government Accountability Office GAO Electronic Protest Docketing System EPDS and Civilian Board of Contract Appeals CBCA Electronic Docketing System EDS expose sensitive account information through the 'update-profile/' API endpoint. A remote, unauthenticated attacker can submit a reque...

CVE-2026-40733

creationtimestamp| type| source ---|---|--- 2026-06-18 17:05:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3molcrxci6i26...

CVE-2026-54105

The U.S. Government Accountability Office GAO Electronic Protest Docketing System EPDS and Civilian Board of Contract Appeals CBCA Electronic Docketing System EDS expose sensitive account information through the 'update-profile/' API endpoint. A remote, unauthenticated attacker can submit a reque...

CVE-2026-54104

The U.S. Government Accountability Office GAO Electronic Protest Docketing System EPDS and Civilian Board of Contract Appeals CBCA Electronic Docketing System EDS trusts client-provided values for the 'epdsroleid' parameter without verification, allowing a remote, authenticated attacker to escala...