Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.9 CVE-2026-13533

agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access_CVE-2026-13533

A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this issue is the function Spyc::YAMLLoad of the file ...

agentejo Cockpit CMS 0.12.0 CVE
MEDIUM 5.3 CVE-2026-13532

itsourcecode Hospital Management System departmentDoctor.php sql injection_CVE-2026-13532

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the fi...

itsourcecode Hospital Management System 1.0 CVE
NONE 21A78238-3419-

hwpoc_21A78238-3419-5054-BA51-F3AE51FC7B27

Vulnerability Database for Intrusion Prevention Systems This database collects vulnerability information during intrusion prevention system HW depl...

N/A N/A GITHUBEXPLOIT
NONE THN:7F8FBC92092...

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer_THN:7F8FBC92092A0D5AB55CB5577BBCD06A

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBjmO4haWCgXfALMAtSHKJXRWIlLfYqulkKflfK-3BSYON-8A4MjUNoZRxOyaLGc-4Bsj1eIfGDhdpJuKZrJ...

N/A N/A THN
MEDIUM 5.3 CVE-2026-13531

itsourcecode Hospital Management System department.php sql injection_CVE-2026-13531

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. Th...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 5.3 CVE-2026-13530

itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection_CVE-2026-13530

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php ...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 6.3 CVE-2026-13529

YzmCMS index.php sql injection_CVE-2026-13529

A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipu...

n/a YzmCMS 7.0 CVE
MEDIUM 6.9 CVE-2026-13528

YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal_CVE-2026-13528

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPat...

YunaiV ruoyi-vue-pro 2026.04-jdk8-SNAPSHOT CVE
MEDIUM 6.9 CVE-2026-13527

SourceCodester Class and Exam Timetabling System preview4.php sql injection_CVE-2026-13527

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /pr...

SourceCodester Class and Exam Timetabling System 1.0 CVE
NONE 18E8EBA0-DAE2-

aysec-cheatsheets_18E8EBA0-DAE2-5124-87B6-9495E8F8AB35

AYSEC Security Cheatsheets A free, practical collection of cybersecurity cheatsheets — web exploitation, privilege escalation, Active Directory, ne...

N/A N/A GITHUBEXPLOIT