CERTFR-2026-ACT-016

creationtimestamp| type| source ---|---|--- 2026-04-13 09:31:53+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116396701141864601 2026-04-14 13:28:56+00:00| seen| https://bsky.app/profile/macsouverain.bsky.social/post/3mjhiefzp3q2z 2026-04-15 09:38:44+00:00| seen|...

CVE-2026-6164

creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:08+00:00| seen| Telegram/IHOzCDm6ocMXwhKClYe85fycTrPO6GtT3pOiprPCJXwKD8...

CVE-2026-34862

creationtimestamp| type| source ---|---|--- 2026-04-13 07:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjecnqkgda2o...

EUVD-2026-21780

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMERID results in sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-6151

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMERID results in sql injection. It is possible to launch the attack remotely. The exploit h...

MINI-XJJV-HH23-M5R6

Bulletin has no description...

MINI-FX4R-GP4R-P3J9

Bulletin has no description...

CVE-2026-6151 code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMERID results in sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-6151

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMERID results in sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-6151

CVE-2026-6151 affects the code-projects Vehicle Showroom Management System 1.0. The vulnerability exists in /util/PaymentStatusFunction.php where manipulating the argument CUSTOMER_ID leads to SQL injection. The issue can be exploited remotely and the exploit is public. No remediation details are...

CVE-2026-31283

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...

PT-2026-32227

Name of the Vulnerable Software and Affected Versions Vehicle Showroom Management System version 1.0 Description A flaw exists in the /util/PaymentStatusFunction.php file within the Vehicle Showroom Management System. The CUSTOMER ID argument can be manipulated to cause a SQL injection. This can ...

Code-Projects Vehicle Showroom Management System SQL注入漏洞

The Code-Projects Vehicle Showroom Management System is an open-source vehicle exhibition hall management system developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a SQL injection vulnerability. This vulnerability arises from improper handling...

Eaton Active Devices Detection

The current plugin identifies Eaton devices that are still under active support. Eaton Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until the...

CVE-2026-6168

creationtimestamp| type| source ---|---|--- 2026-04-12 21:50:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116393942185014498 2026-04-13 07:47:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjeeshd4l727 2026-04-13 09:17:05+00:00| seen|...

MINI-WHHQ-M3PR-5M58

Bulletin has no description...

CVE-2026-6141

creationtimestamp| type| source ---|---|--- 2026-04-12 16:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-6141 2026-04-13 02:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjduepjwot23...

MAL-2026-2611 Malicious code in upstart-lending-status (npm)

Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...

Malicious code in upstart-lending-status (npm)

Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...

Malicious code in upstart-loan-status (npm)

Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...