Balbooa Joomla Forms Builder SQL注入漏洞

Balbooa Joomla Forms Builder is a website form building plugin provided by Balbooa Corporation, which offers visual form design and data collection features. Version 2.0.6 of Balbooa Joomla Forms Builder contains an SQL injection vulnerability. This vulnerability stems from an unauthenticated SQL...

PT-2026-41191

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5 Description An authenticated attacker can perform mass assignment via the 'POST /api/v1/evaluations/feedback' endpoint. This is possible because the FeedbackForm uses a configuration that allows extra fields,...

PT-2026-51716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw exists in the ipc idr alloc function within the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation. The function forwards requests to id...

PT-2026-39483

Name of the Vulnerable Software and Affected Versions Jetpack version 9.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts into victim browsers. This is achieved by manipulating the post id parameter within the "grunion-form-view.php"...

PT-2026-39506

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com baforms component with malicious JSON payloads in the 'id' field...

PT-2026-39459

Name of the Vulnerable Software and Affected Versions CodeAstro Online Catering Ordering System version 1.0 Description Remote SQL injection is possible via the manipulation of the ID argument in the '/deleteorder.php' endpoint. SQL injection is a technique where malicious SQL statements are...

PT-2026-39484

Name of the Vulnerable Software and Affected Versions WordPress Contact Form Builder version 1.6.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts. This is achieved by sending crafted URLs to the 'code generator.php' endpoint using t...

CVE-2026-8213

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit h...

CVE-2026-42258

creationtimestamp| type| source ---|---|--- 2026-05-09 21:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6bqgjhp2c 2026-05-10 12:01:26+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplvolm72y 2026-07-18 12:01:14+00:00| seen|...

CVE-2026-8196

creationtimestamp| type| source ---|---|--- 2026-05-09 21:10:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5soy25r2h 2026-05-13 15:00:06+00:00| seen| Telegram/cc4rNasGAf6eBRoD2kZTJIxW5lr85DmN8AZG7mw1GXsUUwc...

CVE-2026-8148

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5f6gkr42g...

CVE-2026-42309

creationtimestamp| type| source ---|---|--- 2026-05-09 08:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftrjndiz2i...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual...

BELL-CVE-2026-43459

Bulletin has no description...

BELL-CVE-2026-43373

Bulletin has no description...

BELL-CVE-2026-43445

Bulletin has no description...

BELL-CVE-2026-43314

Bulletin has no description...

GHSA-MV93-W799-CJ2W

creationtimestamp| type| source ---|---|--- 2026-05-09 05:40:29+00:00| seen| https://gist.github.com/alon710/be4c0540ec919d713e0bd6ccf621615c...

CVE-2025-66170

creationtimestamp| type| source ---|---|--- 2026-05-09 04:46:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgsdlek52e 2026-05-10 06:15:00+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mli4aews2d22...

CVE-2026-41705

creationtimestamp| type| source ---|---|--- 2026-05-09 04:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlffwxr3u52o 2026-05-09 18:44:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnclkqn2g 2026-05-11 09:04:11+00:00| seen|...