CVE-2026-16581

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...

CVE-2026-64791

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

Weak Password Vulnerability in Various Gateways of Mapleton Technology Co.

Mapletree Technology Co., Ltd. is a leading provider of network products and solutions in China. A weak password vulnerability exists in a number of MyPlus Technology's gateways, which can be exploited by an attacker to log in to the backend and obtain sensitive information...

HDHCMS has a logic flaw vulnerability

HDHCMS is an all-in-one self-service station building management system based on PC website + mobile website + WeChat small program + third-party platform access WeChat public number, Xiongpang number. HDHCMS has a logic flaw vulnerability. An attacker can exploit the vulnerability by constructin...

Cookie Spoofing Vulnerability in Website Building System of Henan Yipug Computer Technology Co.

Henan Yipug Computer Technology Co., Ltd. is a service organization that focuses on enterprise network marketing landing. Ltd. building system there is a cookie deception vulnerability, the attacker has been verified through the success of the cookie, the use of loopholes without authentication t...