CVE-2026-82666

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

CVE-2026-82689

creationtimestamp| type| source ---|---|--- 2026-08-31 06:44:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117188768492484602 2026-08-31 11:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muesjv2zil2p...

CVE-2026-82624

code-projects Simple Inventory System 1.0 is affected by an information disclosure vulnerability in the file inventorymanagement.sql , within the Database Backup File Handler component. The specific root cause is described as "some unknown functionality" of that file. The flaw is exploitable remo...

CVE-2026-82614

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...

PT-2026-83728

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

PT-2026-83790

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve mgr.cgi. This manipulation of the argument f dev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-12513

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-09-01 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-82484

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the ID parameter of the file /pages/emp_searchfrm.php. The flaw allows a remote, low-privileged attacker to manipulate the argument to inject SQL, with low impact on confidentiality, integrity, a...

PT-2026-83611

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add customer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

PT-2026-83531

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the /pages/emp searchfrm.php file. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL comman...

CVE-2026-19296

creationtimestamp| type| source ---|---|--- 2026-08-28 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100150 2026-08-29 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100150...

CVE-2026-55588

creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:26+00:00| published-proof-of-concept| https://github.com/oras-project/oras/security/advisories/GHSA-298f-872v-2rcx...

CVE-2026-54766

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:32+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-f27p-pw2p-9pr4...

GHSA-6PG3-CHWQ-WGQC

creationtimestamp| type| source ---|---|--- 2026-08-28 15:00:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3418 2026-08-29 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3418...

CVE-2026-81819

creationtimestamp| type| source ---|---|--- 2026-08-27 18:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2qhkptqxzcrll...

CVE-2019-9673

creationtimestamp| type| source ---|---|--- 2026-08-27 14:00:12+00:00| published-proof-of-concept| Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE 2026-08-28 00:00:43+00:00| published-proof-of-concept| Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE...

CVE-2026-19914

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:04+00:00| published-proof-of-concept| Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg 2026-08-27 12:00:06+00:00| seen| Telegram/1RDfiYvrsmnO1GwdulIpRqcmzxQFBcCsg-HKcZQ14O2mKw 2026-08-28 00:00:42+00:00| published-proof-of-concep...

CVE-2026-34308

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:04+00:00| published-proof-of-concept| Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots 2026-08-28 00:00:48+00:00| published-proof-of-concept| Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots...

CVE-2026-81491

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...

GHSA-2XP9-VWFH-VXW4

creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:07+00:00| published-proof-of-concept| Telegram/5OcvQ0Kvc7EZmNnx124YGJsJb961fNxRCYGvYNIkiajBUhEy 2026-09-04 13:52:33+00:00| seen| https://bsky.app/profile/newshoundai.bsky.social/post/3mup4ebo6nc2i...