Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the ...
First reported Oct 13, 2026 01:15 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordDisplay Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to acce...
First reported Oct 13, 2026 00:27 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe...
First reported Oct 13, 2026 01:08 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have a...
First reported Oct 13, 2026 01:05 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to un...
First reported Oct 13, 2026 06:30 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordZohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.
First reported Oct 13, 2026 07:51 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordSAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malici...
First reported Oct 13, 2026 00:22 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID l...
First reported Oct 13, 2026 02:45 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.
First reported Oct 12, 2026 23:22 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user t...
First reported Oct 13, 2026 01:10 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordThe HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. Th...
First reported Oct 13, 2026 00:23 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti...
First reported Oct 13, 2026 01:05 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordSAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges coul...
First reported Oct 13, 2026 00:24 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Perform...
First reported Oct 13, 2026 07:45 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation o...
First reported Oct 13, 2026 02:30 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function get_obj_from_str of the file src/utils/mo...
First reported Oct 13, 2026 00:30 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti...
First reported Oct 13, 2026 01:07 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of th...
First reported Oct 13, 2026 06:15 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent...
First reported Oct 13, 2026 01:06 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordGitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison c...
First reported Oct 13, 2026 01:08 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/gg...
First reported Oct 13, 2026 03:00 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of ...
First reported Oct 13, 2026 02:00 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpl...
First reported Oct 13, 2026 05:50 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordA weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component...
First reported Oct 13, 2026 00:15 UTCCatalog metadata updated Oct 13, 2026 08:27 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.