Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.9 CVE-2026-13551

itsourcecode Baptism Information Management System editBaptism.php sql injection_CVE-2026-13551

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file ...

itsourcecode Baptism Information Management System 1.0 CVE
MEDIUM 6.9 CVE-2026-13550

itsourcecode Baptism Information Management System delbaptism.php sql injection_CVE-2026-13550

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /...

itsourcecode Baptism Information Management System 1.0 CVE
MEDIUM 5.3 CVE-2026-13549

CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization_CVE-2026-13549

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file app...

CodeAstro Complaint Management System 1.0 CVE
MEDIUM 5.3 CVE-2026-13548

itsourcecode Hospital Management System doctortimings.php sql injection_CVE-2026-13548

A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The ...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 6.9 CVE-2026-13547

Hanwang e-Face General Management Platform upload.do unrestricted upload_CVE-2026-13547

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manag...

Hanwang e-Face General Management Platform 6.3.5.4 CVE
MEDIUM 6.9 CVE-2026-13546

Feehi CMS REST API Endpoint articles missing authentication_CVE-2026-13546

A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API End...

Feehi CMS 2.1.0 CVE
HIGH 8.7 CVE-2026-13545

D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection_CVE-2026-13545

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Param...

D-Link DCS-935L 1.10.01 CVE
NONE D63B84A1-A624-

ShieldPatch_D63B84A1-A624-5F2E-AB72-AD2A289E0B7D

🛡️ ShieldPatch Predict . Protect . Prevail AI-driven vulnerability detection and automated patch management platform that helps organizations ident...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 FF3E594C-3BB4-

Exploit for Improper Access Control in Widgetfactorylimited Jce_FF3E594C-3BB4-54B9-B51D-967E5DDFDD81

No description provided...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 EA243E1F-DDE9-

Exploit for Missing Authentication for Critical Function in Splunk_EA243E1F-DDE9-5EB3-8E35-B0B053C11F4E

CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critic...

N/A N/A GITHUBEXPLOIT