|
3561
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulation of the argument p…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-8117
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3562
|
7.3 |
HIGH
Network
|
-
|
-
|
A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknown processing of the file post_comment.php. This manipulation of the argument Name causes sql injection. Remot…
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8126
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3563
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the argument msgid result…
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8128
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3564
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argument delwlistid can…
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8129
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3565
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql injecti…
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8130
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3566
|
7.3 |
HIGH
Network
|
-
|
-
|
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql …
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8131
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3567
|
2.4 |
LOW
Network
|
-
|
-
|
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /index.php?page=users. Executing a manipulation of the argument Name can lead…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-8136
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3568
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affected is the function executeCognitivePulse of the file src/kernel.ts. Performing a manipulation resul…
|
CWE-77
CWE-78
Command Injection
OS Command
|
CVE-2026-8112
|
2026-05-9 00:39 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3569
|
- |
|
-
|
-
|
A vulnerability in Legion of the Bouncy Castle Inc. BC-FJA BC-FIPS on Linux, X86_64, AVX, AVX-512f.
This vulnerability is associated with program files gcm128w, gcm512w.
This issue affects BC-FJ…
|
CWE-1068
Inconsistency Between Implementation and Documented Design
|
CVE-2026-8149
|
2026-05-9 00:38 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3570
|
- |
|
-
|
-
|
The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended data exposure due to authorization misconfiguration. The VerySecureApp allows anonymous users of the MyFirstModule…
|
CWE-277
Insecure Inherited Permissions
|
CVE-2026-7891
|
2026-05-9 00:37 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
