CVE-2026-33670

creationtimestamp| type| source ---|---|--- 2026-03-23 11:09:58+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xmw9-6r43-x9ww 2026-03-23 11:09:58+00:00| published-proof-of-concept|...

CVE-2026-22901

creationtimestamp| type| source ---|---|--- 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...

CVE-2026-3736

creationtimestamp| type| source ---|---|--- 2026-03-23 10:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhpsgy2ttp2h...

CVE-2026-3587

creationtimestamp| type| source ---|---|--- 2026-03-23 08:02:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/116277439434054031 2026-03-23 08:02:11+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mhplts73kmm2 2026-03-23 08:17:02+00:00| seen|...

CVE-2026-4600

creationtimestamp| type| source ---|---|--- 2026-03-23 06:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpi3iqjyc2e 2026-03-24 06:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhrvirfmhx2p...

CVE-2026-4601

creationtimestamp| type| source ---|---|--- 2026-03-23 06:49:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhphskdlhb2e 2026-03-23 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116277315523815630 2026-03-23 07:30:34+00:00| seen|...

EUVD-2026-14363

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

CVE-2026-4573

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

CVE-2026-30886

creationtimestamp| type| source ---|---|--- 2026-03-23 05:58:29+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-f35r-v9x5-r8mc 2026-03-23 19:16:25+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30886...

cpython: POP3 command injection in user-controlled commands

A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...

CVE-2026-4572

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /viewproduct.php of the component HTTP POST Request Handler. Executing a manipulation of the argument searchtxt can lead to sql injection. The attack m...

CVE-2026-4570

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /viewcustomers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed remotely. The...

CVE-2026-4573

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

CVE-2026-4573 SourceCodester Simple E-learning System HTTP GET Parameter delete_post.php sql injection

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

CVE-2026-4572

The CVE-2026-4572 entry identifies a vulnerability in SourceCodester Sales and Inventory System 1.0. The flaw affects the file /view_product.php, specifically the HTTP POST parameter searchtxt, where manipulation can lead to a SQL Injection. It is described as exploitable remotely and with a publ...

CVE-2026-4563

creationtimestamp| type| source ---|---|--- 2026-03-23 03:59:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhp6ccrsl42n...

CVE-2026-4570

SourceCodester Sales and Inventory System 1.0 is affected by a SQL injection in the POST handler for /view_customers.php, caused by manipulation of the searchtxt parameter. This enables remote exploitation and is corroborated by multiple sources; an exploit is publicly available. Affected compone...

CVE-2026-4570 SourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql injection

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /viewcustomers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed remotely. The...

CVE-2026-4570 SourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql injection

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /viewcustomers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed remotely. The...

CVE-2025-13997

creationtimestamp| type| source ---|---|--- 2026-03-23 03:04:01+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/388 2026-03-23 08:41:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpnzuowoe2d 2026-03-23 22:51:35+00:00| seen|...