CyberIntel ⬡ News
★ Saved ◆ Cyber Reads

// Vulnerabilities & CVEs
Intel Feed

cyberintel.kalymoon.com  ·  11216 articles  ·  updated every 4 hours · grows forever

11216Total
4292Full Text
Jul 08, 2026Latest
◈ Women in Cyber ◉ Threat Intelligence ◎ How-To & Tutorials ⬡ Vulnerabilities & CVEs 🔍 Digital Forensics ◍ Incident Response & DFIR ◆ Security Tools & Reviews ◇ Industry News & Leadership ✉ Email Security 🛡 Active Threats ⚠ Critical CVEs ◐ Insider Threat & DLP ◌ Quantum Computing ◬ AI & Machine Learning
🔥 Trending Topics · Last 48h
⬡ Vulnerabilities & CVEs Jun 08, 2026
CVE-2026-11529 | designcomputer mysql-mcp-server up to 0.2.2 mysql URI server.py read_resource uri_str sql injection (Issue 89)

A vulnerability was found in designcomputer mysql-mcp-server up to 0.2.2 . It has been rated as critical . The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 08, 2026
CVE-2026-11530 | imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 Login /index.ph usr/pwd sql injection

A vulnerability categorized as critical has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 . This affects an unknown function of the file /index.p…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 08, 2026
CVE-2026-11531 | imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 Administrator Login Endpoint admin/admin_login.php a_usr/a_pwd sql injection

A vulnerability identified as critical has been detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 . This impacts an unknown function of the file admin/admin…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 08, 2026
CVE-2026-11532 | imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 Student Record /add.php access control

A vulnerability labeled as critical has been found in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 . Affected is an unknown function of the file /add.php of the co…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 08, 2026
CVE-2026-11533 | imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 Student Deletion Endpoint /see.php del improper authorization

A vulnerability marked as critical has been reported in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 . Affected by this vulnerability is an unknown functionality o…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 08, 2026
CVE-2026-11534 | imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 /add.php name/address/fname cross site scripting

A vulnerability described as problematic has been identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 . Affected by this issue is some unknown functionality…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11511 | Bolt CMS up to 3.7.5 HTML Attribute TextType.php style HTML injection

A vulnerability was found in Bolt CMS up to 3.7.5 . It has been declared as problematic . This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML …

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11512 | itsourcecode Hospital Management System 1.0 /billing.php patientid cross site scripting

A vulnerability was found in itsourcecode Hospital Management System 1.0 . It has been rated as problematic . This issue affects some unknown processing of the file /billing.php . The manipulation of …

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11516 | UTT HiPER 2610G up to 3.0.0-171107 /goform/formNatStaticMap strcpy NatBinds buffer overflow

A vulnerability marked as critical has been reported in UTT HiPER 2610G up to 3.0.0-171107 . This affects the function strcpy of the file /goform/formNatStaticMap . Performing a manipulation of the ar…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11517 | UTT HiPER 2610G up to 3.0.0-171107 formConfigDnsFilterGlobal strcpy GroupName buffer overflow

A vulnerability described as critical has been identified in UTT HiPER 2610G up to 3.0.0-171107 . This impacts the function strcpy of the file /goform/formConfigDnsFilterGlobal . Executing a manipulat…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11518 | SourceCodester Inventory System 1.0 User Management Page /users.php fullname/username cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Inventory System 1.0 . Affected is an unknown function of the file /users.php of the component User Management Page . The man…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11519 | SourceCodester Inventory System 1.0 Account Creation users_handler.php ROLE improper authorization

A vulnerability classified as critical was found in SourceCodester Inventory System 1.0 . Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_handler.ph…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11520 | SourceCodester Inventory System 1.0 header.php cross site scripting

A vulnerability, which was classified as problematic , has been found in SourceCodester Inventory System 1.0 . Affected by this issue is some unknown functionality of the file header.php . This manipu…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11521 | Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948 Transaction Endpoint TransactionController.java improper authorization

A vulnerability, which was classified as critical , was found in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948 . This affects an unknown part of the f…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11522 | Tenda W20E 15.11.0.6 /goform/setPortMirror formSetPortMirror portMirrorMirroredPorts stack-based overflow

A vulnerability has been found in Tenda W20E 15.11.0.6 and classified as critical . This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror . Performing a manipulat…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11523 | Tenda W20E 15.11.0.6 Web Management Interface /goform/PortalAuth formPortalAuth gotoUrl stack-based overflow

A vulnerability was found in Tenda W20E 15.11.0.6 and classified as critical . This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface .…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11524 | Tenda W20E 15.11.0.6 Web Management Interface modifyWifiFilterRules wifiFilterListRemark stack-based overflow

A vulnerability was found in Tenda W20E 15.11.0.6 . It has been classified as critical . Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web M…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11481 | yoanbernabeu grepai up to 0.35.0 Postgres Embedding Cache indexer/chunker.go PostgresStore.LookupByContentHash content_hash weak hash (Issue 249)

A vulnerability was found in yoanbernabeu grepai up to 0.35.0 and classified as problematic . The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of t…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11482 | SourceCodester Class and Exam Timetabling System 1.0 /archive5.php sy sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 . It has been classified as critical . The impacted element is an unknown function of the file /archive5.php . The man…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11483 | SourceCodester Class and Exam Timetabling System 1.0 /archive4.php sy sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 . It has been declared as critical . This affects an unknown function of the file /archive4.php . The manipulation of …

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11484 | SourceCodester Class and Exam Timetabling System 1.0 /archive3.php sy sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 . It has been rated as critical . This impacts an unknown function of the file /archive3.php . This manipulation of th…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11485 | SourceCodester Class and Exam Timetabling System 1.0 /archive2.php sy sql injection

A vulnerability categorized as critical has been discovered in SourceCodester Class and Exam Timetabling System 1.0 . Affected is an unknown function of the file /archive2.php . Such manipulation of t…

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11486 | SourceCodester Class and Exam Timetabling System 1.0 /archive1.php sy sql injection

A vulnerability identified as critical has been detected in SourceCodester Class and Exam Timetabling System 1.0 . Affected by this vulnerability is an unknown functionality of the file /archive1.php …

VulDB Read →
⬡ Vulnerabilities & CVEs Jun 07, 2026
CVE-2026-11487 | Neovim up to 0.12.2 View Branch secure.lua M.read path command injection (Issue 39914)

A vulnerability labeled as critical has been found in Neovim up to 0.12.2 . Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch . Executin…

VulDB Read →
← Prev 134 / 468 Next →