PT-2026-79765

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

PT-2026-79781

Name of the Vulnerable Software and Affected Versions Dromara UJCMS versions prior to 10.1.4 Description A remote flaw exists in the web-file-template endpoint within the update function of the WebFileTemplateController.java file. This issue occurs due to the improper neutralization of special...

PT-2026-79752

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument roll no/name/father name/class/mobile/email/password/remark causes sql injectio...

CVE-2019-12758

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| published-proof-of-concept| https://t.me/nuancesprognews/751 2026-08-23 00:00:14+00:00| published-proof-of-concept| https://t.me/nuancesprognews/751...

CVE-2019-13627

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| published-proof-of-concept| https://t.me/nuancesprognews/634 2026-08-23 00:00:13+00:00| published-proof-of-concept| https://t.me/nuancesprognews/634...

CVE-2026-47883

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99157 2026-08-23 00:00:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99157...

CVE-2026-72844

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99139 2026-08-23 00:00:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99139...

CVE-2026-67447

creationtimestamp| type| source ---|---|--- 2026-08-20 22:35:02+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-r553-m4fv-5v97...

CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...

CVE-2026-63003

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:15+00:00| published-proof-of-concept| https://github.com/django-cms/django-cms/security/advisories/GHSA-6x92-6vx4-5fwr...

CVE-2026-61663

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:13+00:00| published-proof-of-concept| https://github.com/django-cms/django-cms/security/advisories/GHSA-8qj2-c6q4-f399...

CVE-2026-63124

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:06+00:00| published-proof-of-concept| https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-8cfx-wx3q-mh5q 2026-08-20 23:51:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtkgttee5z2v...

CVE-2026-63202

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:03+00:00| published-proof-of-concept| https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-4899-mpch-38p3...

CVE-2026-18501

creationtimestamp| type| source ---|---|--- 2026-08-20 20:00:03+00:00| seen| https://t.me/captainsmok3rofficial/449 2026-08-20 20:00:03+00:00| seen| https://t.me/captainsmok3rofficial/447 2026-08-21 00:00:08+00:00| published-proof-of-concept| https://t.me/captainsmok3rofficial/447 2026-08-21...

EUVD-2026-63479

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET&section=ptestsn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may b...

CVE-2026-77004

Comfast CF-N1-S firmware 2.6.0.1 exposes a command injection flaw in the sprintf function at /cgi-bin/mbox-config?method=SET&section=ptest_sn. Remote attackers with low privileges can manipulate the sn argument to execute arbitrary commands; a proof-of-concept exploit has been published. No patch...

CVE-2026-76071

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:06+00:00| seen...

CVE-2026-76800

A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/selectmediapost.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published...

EUVD-2026-63194

A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/selectmediapost.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published...

AZL-97542 CVE-2022-4996 affecting package nghttp2 1.61.0-3

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...