School Management System 安全漏洞

School Management System is a school management system developed by ManiKandan G, based on PHP and MySQL. There is a security vulnerability in School Management System, which stems from incorrect handling of the busid parameter in the buslocation.php file, potentially leading to SQL injection...

SuperAGI 安全漏洞

SuperAGI is an open-source infrastructure application developed by SuperAGI. It is used to build components, tools, frameworks, and models to achieve open-source AGI. Versions of SuperAGI 0.0.14 and earlier contain security vulnerabilities. These vulnerabilities stem from incorrect handling of th...

SuperAGI 安全漏洞

SuperAGI is an open-source infrastructure application developed by SuperAGI. It is used to build components, tools, frameworks, and models to achieve open-source AGI. Versions of SuperAGI 0.0.14 and earlier contain security vulnerabilities. These vulnerabilities stem from incorrect operations wit...

SuperAGI 安全漏洞

SuperAGI is an open-source infrastructure application developed by SuperAGI. It is used to build components, tools, frameworks, and models to achieve open-source AGI. Versions of SuperAGI 0.0.14 and earlier contain security vulnerabilities. These vulnerabilities stem from improper handling of the...

PT-2026-33836

Name of the Vulnerable Software and Affected Versions OVN affected versions not specified Description A flaw in OVN Open Virtual Network allows a remote attacker to cause the ovn-controller to perform an out-of-bounds read by sending crafted DHCPv6 Dynamic Host Configuration Protocol for IPv6...

PT-2026-33690

A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file buslocation.php of the component HTTP GET Parameter Handler. The manipulation of the argument bus id leads to sql...

UBUNTU-CVE-2026-5367

A flaw was found in OVN Open Virtual Network. A remote attacker, by sending crafted DHCPv6 Dynamic Host Configuration Protocol for IPv6 SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the...

PT-2026-33789

Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Vexa transcription-collector service exposes an internal endpoint GET /internal/transcripts/meeting id that returns transcript data for any meeting without any authentication or...

CVE-2026-6585 TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorization

A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This issue affects the function updateorganisation of the file superagi/controllers/organisation.py of the component Organisation Update Endpoint. This manipulation of the argument organisationid causes authorization...

CVE-2026-6584 TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorization

A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. This vulnerability affects the function updateuser of the file superagi/controllers/user.py of the component User Update Endpoint. The manipulation of the argument userid results in authorization bypass. The attack may be...

MINI-4V4P-H8G3-FPR7

Bulletin has no description...

CVE-2026-6559

creationtimestamp| type| source ---|---|--- 2026-04-19 09:49:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjtogghh3o2c...

CVE-2026-6355

creationtimestamp| type| source ---|---|--- 2026-04-19 02:00:04+00:00| seen| https://t.me/GithubRedTeam/80888 2026-04-22 16:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3wt2r7wq2k...

PT-2026-33653

A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. This vulnerability affects the function update user of the file superagi/controllers/user.py of the component User Update Endpoint. The manipulation of the argument user id results in authorization bypass. The attack may be...

PT-2026-33654

A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This issue affects the function update organisation of the file superagi/controllers/organisation.py of the component Organisation Update Endpoint. This manipulation of the argument organisation id causes authorization...

Fedora 42 : python3.12 (2026-30fbc5a8b2)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30fbc5a8b2 advisory. Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Tenable has extracted the preceding...

CVE-2026-6056

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-68001

creationtimestamp| type| source ---|---|--- 2026-04-18 23:00:13+00:00| published-proof-of-concept| Telegram/J1TSaArQ0ScFY239N-pEajUhnEKmxSQcewj6uEimw6KDWT0 2026-04-19 03:00:05+00:00| published-proof-of-concept| Telegram/fUN7x3zhWJI41Y9qvAix9-DSuCPZFxW-u6Jn34L6Wbqg7U...

MINI-PV9P-RX7H-8R2V

Bulletin has no description...

GHSA-C3FC-8QFF-9HWX vulnerabilities

Vulnerabilities for packages: pinot, apache-nifi, apache-pulsar, commercial-elasticsearch, jruby, kserve-modelmesh, zipkin, druid, geoserver, logstash, ruby3.4-bouncy-castle-java, sonarqube, jenkins, keycloak, nacos-docker, ghidra, guacamole-client, kayenta, elasticsearch,...