EUVD-2026-41685

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-14638

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-14619

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the argument editid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and ma...

PT-2026-55729

Name of the Vulnerable Software and Affected Versions connorskees grass versions prior to 0.13.5 Description A flaw in the UTF-8 Character Handler component allows local execution of a manipulation that can lead to a denial of service. The issue resides in the grass compiler::raw to parse error...

PT-2026-55721

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

PT-2026-55706

Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.2.3 Description A flaw in the Parameter Handler component allows a remote attacker to cause a divide by zero error. This issue occurs within the read, write, and sys ioctl functions located in the components/lwp/l...

PT-2026-55742

Name of the Vulnerable Software and Affected Versions HdrHistogram versions prior to 2.2.3 Description A flaw exists in the decodeFromByteBuffer function within the org.HdrHistogram.AbstractHistogram class. This issue occurs when the numberOfSignificantValueDigits argument is manipulated, leading...

CVE-2026-57682

creationtimestamp| type| source ---|---|--- 2026-07-03 00:31:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppc7k6qrt2b 2026-07-31 14:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrx6wavptm2h 2026-07-31 18:44:08+00:00| seen|...

PT-2026-55816

CVE ID :CVE-2026-50238 Published : July 3, 2026, 10:25 a.m. | 3 hours, 20 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-52792

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:07+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-mm6c-5j6x-hq8m...

HTTP Request Smuggling

Overview webrick is a HTTP server toolkit that can be configured as an HTTPS server, a proxy server, and a virtual-host server. Affected versions of this package are vulnerable to HTTP Request Smuggling in the request process. An attacker can bypass request boundaries and interfere with HTTP...

CVE-2026-50192

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:11+00:00| published-proof-of-concept| https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j...

CVE-2026-13459

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated...

CVE-2026-50151

creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:11+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7 2026-07-18 16:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwn4wyzpq23...

CVE-2026-50138

creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:05+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-3whc-qvhv-xqjp...

CVE-2026-49857

creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:16+00:00| published-proof-of-concept| https://github.com/ymw0407/auth-fetch-mcp/security/advisories/GHSA-pvrj-8cg3-j5f8...

CVE-2026-29080

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vjr5-c9qv-hgm3...

CVE-2026-48796

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-85jm-cwp2-mvpv...

Inefficient Algorithmic Complexity

Overview org.webjars.npm:brace-expansion is a WebJar for brace-expansion. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the expand function. An attacker can cause excessive CPU consumption and block the event loop by supplying a specially crafted strin...

CVE-2026-9711

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress full is vulnerable to SQL Injection via the WordPress 'search' parameter in versions up to, and including, 5.0.11 due to insufficient escaping on the user supplied parameter and lack of preparation on the existing SQL quer...