58481 matches found
EUVD-2026-35026
A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of the file /Ingredients-Stock/addstock.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be...
CVE-2026-11476
creationtimestamp| type| source ---|---|--- 2026-06-08 05:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqxjlapfc2f...
MINI-9H79-H2H5-2GFH
Bulletin has no description...
MINI-54C5-JGXW-WGV4
Bulletin has no description...
CVE-2026-11438
A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argument project.forkedFromId leads to improper authorization. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11468
creationtimestamp| type| source ---|---|--- 2026-06-08 01:11:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqisppkvv2d...
PT-2026-47570
Summary The TDengine DAQ storage connector's escapeTdString at server/runtime/storage/tdengine/index.js:10 doubles single quotes but does not escape backslashes. TDengine's SQL parser treats ' as a literal single quote inside a string, so a tag id of the form x' OR 1=1-- escapes the first single...
cve-2026-41007 - HIGH - Spring HATEOAS heap exhaustion through unbounded internal caching
cve-2026-41007 - HIGH - Spring HATEOAS heap exhaustion through unbounded internal caching...
Amazon Linux 2023 : perl-YAML-Syck, perl-YAML-Syck-tests (ALAS2023-2026-1769)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1769 advisory. YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 sexagesimal parsing code in perlsyck.h has a buffer underflow bug in both intbase60 and floatbase60 handlers. When...
📄 Computer Laboratory Management System 1.0 SQL Injection
A remote SQL Injection vulnerability exists in Computer Laboratory Management System Using PHP and MySQL LMS version 1.0. The application fails to properly validate and sanitize user-supplied input provided through the id parameter, allowing an authenticated attacker to manipulate backend SQL...
PT-2026-47617
Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.3.2 Description The TDengine DAQ storage connector contains a flaw in the escapeTdString function located in server/runtime/storage/tdengine/index.js. While the function doubles single quotes, it fails to escape...
PT-2026-47311
A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read resource of the file src/mysql mcp server/server.py of the component mysql URI Handler. This manipulation of the argument uri str causes sql injection. Remote exploitation of t...
CVE-2026-11487
A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch. Executing a manipulation of the argument path can lead to command injection. It is possible to launch the attack on the local host. The...
MINI-8HVV-9HJ9-XJ5V
Bulletin has no description...
CVE-2026-11460
creationtimestamp| type| source ---|---|--- 2026-06-07 20:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnpzmz7i4y2o 2026-06-07 21:59:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnq62vmklq2k...
MINI-8626-VJ6Q-J323
Bulletin has no description...
MINI-MVHF-4VV7-VV5P
Bulletin has no description...
MINI-2H5C-24JW-43XM
Bulletin has no description...