PT-2026-28731

Name of the Vulnerable Software and Affected Versions code-projects Simple Food Order System version 1.0 Description A security flaw exists in code-projects Simple Food Order System version 1.0. The issue resides in the Parameter Handler component, specifically within the file /all-tickets.php...

PT-2026-28733

Name of the Vulnerable Software and Affected Versions code-projects Simple Food Order System version 1.0 Description A security issue exists in code-projects Simple Food Order System version 1.0 related to SQL injection. The issue is located in the all-orders.php file within the Parameter Handler...

Code-Projects Simple Food Order System SQL注入漏洞

Code-Projects Simple Food Order System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the Code-Projects Simple Food Order System has a SQL injection vulnerability. This vulnerability stems from an unknown function in the Component Parameter Handler’s fi...

GHSA-Q67F-28XG-22RW

creationtimestamp| type| source ---|---|--- 2026-03-27 23:27:55+00:00| seen| Telegram/9UoOcMml4hO1LPqEQWig8KjS1ZNRBXJeCq-u3-UaU0LNh0...

GHSA-MJGM-7HWC-QQCR

creationtimestamp| type| source ---|---|--- 2026-03-27 23:27:39+00:00| seen| Telegram/rLqHCNltFCNj1PrF3FJbrFEjnsSClo3JgFDbDQ7L99dJsxY...

CVE-2026-33976

creationtimestamp| type| source ---|---|--- 2026-03-27 22:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116303385663176446 2026-03-27 22:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi34km6wmg2q 2026-03-27 22:18:31+00:00| seen|...

CVE-2026-33765

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:14+00:00| published-proof-of-concept| Telegram/B1-lnNSHplGL4tzlck3EB0WXwjfJllp4cXItiyc0oKB0vU 2026-03-28 16:29:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116307745303049894 2026-03-29 13:46:12+00:00| seen|...

GHSA-VCHX-5PR6-FFX2

creationtimestamp| type| source ---|---|--- 2026-03-27 21:22:55+00:00| seen| Telegram/Gog278dWyh4lEZUplneDunVggYKWxHPgBiv3mkrQtX1ZGY...

GHSA-QFC3-HM4J-7Q77

creationtimestamp| type| source ---|---|--- 2026-03-27 21:22:34+00:00| seen| Telegram/HCzuKY5MuLPsfoEI5S3ks6iQFEX7xEFL0kHnLhrHZ36Sb0...

CVE-2026-33879 FLIP doesn't have rate limiting or brute-force protection on login

Federated Learning and Interoperability Platform FLIP is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and...

CVE-2026-33879

Federated Learning and Interoperability Platform FLIP is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and...

CVE-2026-33879 FLIP doesn't have rate limiting or brute-force protection on login

Federated Learning and Interoperability Platform FLIP is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...

CVE-2026-5027

creationtimestamp| type| source ---|---|--- 2026-03-27 17:23:12+00:00| published-proof-of-concept| Telegram/kHfLfkapUcGKUVgufiQubAbscQMrKjcom26lkyfAO4Fyc 2026-03-27 18:20:00+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116302518672297608 2026-03-27 23:00:43+00:00| seen|...

CVE-2026-5026

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:52+00:00| published-proof-of-concept| Telegram/pyEIr0Ko2hoCavwas1rlZ1K5Q5ZdrBNaOpK3idLXyAytNFs 2026-03-27 17:23:12+00:00| published-proof-of-concept| Telegram/kHfLfkapUcGKUVgufiQubAbscQMrKjcom26lkyfAO4Fyc 2026-03-27 18:20:00+00:00| seen...

CVE-2026-25334

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:05+00:00| seen| Telegram/0TkjLsQfxXDhGLxRci6Ro2HiEhTKYRR1p268AcWiw3KWvWE 2026-04-07 04:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miuwyhv7db2w...

CVE-2026-5046

creationtimestamp| type| source ---|---|--- 2026-03-27 16:52:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116302173508994263 2026-03-28 09:58:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306207828256273 2026-03-29 17:15:27+00:00| published-proof-of-concept|...

CVE-2026-5036

creationtimestamp| type| source ---|---|--- 2026-03-27 16:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116302066909306765 2026-03-28 16:16:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116307694173463292 2026-03-29 09:00:30+00:00| seen|...

CVE-2026-1496

creationtimestamp| type| source ---|---|--- 2026-03-27 15:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2i7xzklv2s 2026-03-27 17:22:21+00:00| seen| Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME...