CVE-2026-30563

CVE-2026-30563 describes a Stored XSS in SourceCodester Sales and Inventory System 1.0, triggered by unsanitized input in the update_details.php file. The vulnerability arises from accepting the POST parameter “website” without proper sanitization, allowing an authenticated attacker to store arbi...

CVE-2026-30530

creationtimestamp| type| source ---|---|--- 2026-03-29 17:45:11+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mi7p7vciva2d...

CVE-2026-33990

creationtimestamp| type| source ---|---|--- 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0374/ 2026-03-30 14:20:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mibuafutid24 2026-03-30 15:39:55+00:00| seen|...

CVE-2026-32979

creationtimestamp| type| source ---|---|--- 2026-03-29 14:51:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7fjcztjp2i 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU 2026-03-31 13:00:14+00:00| seen|...

CVE-2026-32915

creationtimestamp| type| source ---|---|--- 2026-03-29 13:39:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7biwcijt2c 2026-03-29 14:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7d2eiwad23 2026-03-29 15:19:56+00:00| published-proof-of-concept|...

CVE-2026-32922

creationtimestamp| type| source ---|---|--- 2026-03-29 13:37:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bejofyy2t 2026-03-29 14:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7dr5mjqh2o 2026-03-29 15:19:56+00:00| published-proof-of-concept|...

CVE-2026-5041

creationtimestamp| type| source ---|---|--- 2026-03-29 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116311996902257625 2026-03-29 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi6wwkabje2s...

CVE-2026-5023

creationtimestamp| type| source ---|---|--- 2026-03-29 04:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi6b56zi7624...

CVE-2026-30463

creationtimestamp| type| source ---|---|--- 2026-03-29 01:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi5x6dfnvs2c...

CVE-2026-5017

creationtimestamp| type| source ---|---|--- 2026-03-29 00:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5ve4sjyn2n 2026-03-29 01:15:46+00:00| published-proof-of-concept| Telegram/2ZCZ0X-UsuKs7wtR6ZGpeXrnXUtKYHoBRWUbFIBTrMUhlY 2026-04-04 06:00:14+00:00| seen|...

CVE-2026-5015

creationtimestamp| type| source ---|---|--- 2026-03-29 00:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5v36dpqi2d...

CVE-2026-5014

creationtimestamp| type| source ---|---|--- 2026-03-29 00:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5us7vke72d...

CVE-2026-5013

creationtimestamp| type| source ---|---|--- 2026-03-29 00:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5ujbhlua2s...

CVE-2026-5007

creationtimestamp| type| source ---|---|--- 2026-03-28 20:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5gu4g5pn2i...

SUSE CVE-2026-2457

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to spoof permalink embeds impersonating other users via crafted PUT requests to the post update API endpoint.. Mattermost Advisory ID:...

CVE-2026-4960

A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed remotel...

CVE-2026-5001

A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is the function doPOST of the file backend/server.py. This manipulation causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publishe...

CVE-2026-5001 PromtEngineer localGPT server.py do_POST unrestricted upload

A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is the function doPOST of the file backend/server.py. This manipulation causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publishe...

CVE-2026-4998

creationtimestamp| type| source ---|---|--- 2026-03-28 15:15:27+00:00| published-proof-of-concept| Telegram/09Z2uSywZ0eaMBcjzeKEvNTJqqyhgJAVS7JG0bu28jYxi8 2026-03-28 15:25:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi4wy26n572y 2026-03-28 17:19:58+00:00| seen|...

CVE-2018-25220

creationtimestamp| type| source ---|---|--- 2026-03-28 15:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4w2lcg4d27 2026-04-14 04:43:18+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mjgkyj5fcc22...