CVE-2026-5599

creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 15:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4f2ag5j2j...

CVE-2026-5559

creationtimestamp| type| source ---|---|--- 2026-04-05 12:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpugsen52d...

CVE-2026-5564

creationtimestamp| type| source ---|---|--- 2026-04-05 12:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpsnbbsk2i 2026-04-05 13:15:30+00:00| published-proof-of-concept| Telegram/YoTTVTi9Zv4k-o9HEVMgDeJ9GD4yUztoWynI9KgYScEME...

CVE-2026-5546

creationtimestamp| type| source ---|---|--- 2026-04-05 08:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqdjamnh72q...

CVE-2026-5542

creationtimestamp| type| source ---|---|--- 2026-04-05 08:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqcofacya2o...

CVE-2026-5544

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely. The exploit h...

CVE-2026-5544 UTT HiPER 1250GW formRemoteControl stack-based overflow

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely. The exploit h...

CVE-2026-5544

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely. The exploit h...

CVE-2026-5544

CVE-2026-5544 affects UTT HiPER 1250GW, up to version 3.2.7-210907-180535. The vulnerability exists in an unknown function of the file /goform/formRemoteControl where manipulating the Profile argument causes a stack-based buffer overflow. It can be exploited remotely, and public exploits are avai...

CVE-2026-5539

creationtimestamp| type| source ---|---|--- 2026-04-05 04:41:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipwodhauf2j...

CVE-2026-5529

creationtimestamp| type| source ---|---|--- 2026-04-05 04:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipwfer7bx2g...

CVE-2026-5527

creationtimestamp| type| source ---|---|--- 2026-04-05 00:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miphlosyj72q...

CVE-2026-5528

creationtimestamp| type| source ---|---|--- 2026-04-05 00:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipgzrxvbe2j...

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project of PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “fullname” in the...

PT-2026-30497

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng profile id parameter. Attackers can send crafted requests with malicious SQL payloads in the mng profile id parameter to extract sensitive database...

PT-2026-30416

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely. The exploit h...

CVE-2026-22665

prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit...

CVE-2026-5472

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /adminpanel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes unrestrict...

CVE-2018-25251

creationtimestamp| type| source ---|---|--- 2026-04-04 15:35:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miokqunz2y24...

EUVD-2018-21746

MyBB Like Plugin 3.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating posts or threads with unvalidated subject content. Attackers can craft post subjects containing script tags that execute when other users view the attacker's profile,...