---METADATA---
VENDOR: Alexantr
PRODUCT: filemanager
AFFECTED_VERSIONS: v.1.0
---END_METADATA---

Description Summary:
A critical remote code execution vulnerability exists in the filemanager.php component of Alexantr filemanager v.1.0, allowing unauthenticated attackers to execute arbitrary system commands.

Executive Summary:
A critical remote code execution vulnerability in Alexantr filemanager v.1.0 permits unauthenticated attackers to gain full control of the host server.

Vulnerability Details

CVE-ID: CVE-2026-37637

Affected Software: Alexantr filemanager

Affected Versions: v.1.0

Vulnerability: The vulnerability resides in the filemanager.php file, which fails to adequately sanitize user input, enabling an unauthenticated remote attacker to inject and execute arbitrary code. This flaw allows for complete system compromise if the file manager is exposed to the internet.

Business Impact

A CVSS score of 9.1 highlights the extreme risk associated with this vulnerability, as it allows for full server takeover, data theft, and lateral movement within the network. The ability to execute arbitrary code without authentication provides an attacker with total control over the affected environment, leading to severe reputational and operational damage.

Remediation Plan

Immediate Action: Discontinue use of Alexantr filemanager v.1.0 immediately or isolate the component from all network access until a security update is applied.

Proactive Monitoring: Inspect server logs for suspicious PHP execution patterns or files created in the web directory that were not authorized by administrative staff.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common code injection attempts targeting file management utilities.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jun 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a severe risk to any environment hosting this file manager. Immediate removal or patching is required to prevent unauthorized system access. Security teams should prioritize identifying any instances of this software within their infrastructure and ensuring they are either updated or decommissioned.

---METADATA---
VENDOR: projectworlds
PRODUCT: Online Art Gallery Shop
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A weakness has been identified in projectworlds Online Art Gallery Shop 1 that could allow attackers to compromise the online storefront and its data.

Executive Summary:
The projectworlds Online Art Gallery Shop 1 is vulnerable to a high-severity security flaw that threatens the security of customer transactions and personal information.

Vulnerability Details

CVE-ID: CVE-2026-3758

Affected Software: projectworlds Online Art Gallery Shop

Affected Versions: 1

Vulnerability: A security weakness exists in version 1 of the Online Art Gallery Shop. This flaw likely involves an insecure handling of web requests, which could allow an attacker to perform unauthorized actions or access sensitive database contents.

Business Impact

The exploitation of this vulnerability could lead to the exposure of customer PII and transaction details. With a CVSS score of 7.3, the risk to the business includes financial loss due to fraudulent activity and long-term damage to the brand's reputation among art collectors and artists.

Remediation Plan

Immediate Action: Update the Online Art Gallery Shop software to the most recent version available from projectworlds to resolve the identified weakness.

Proactive Monitoring: Monitor e-commerce transaction logs for anomalies and review web server error logs for patterns indicating automated vulnerability scanning.

Compensating Controls: Deploy an egress filtering policy to prevent the exfiltration of data in the event of a successful application compromise.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. Despite this, the high severity of the flaw suggests that it could be targeted by opportunistic attackers.

Analyst Recommendation

The security of the Online Art Gallery Shop is paramount for maintaining customer trust. It is highly recommended that the primary remediation step—applying the vendor's security update—be completed immediately to protect against potential exploitation.

---METADATA---
VENDOR: Open Vehicle
PRODUCT: Monitoring System 3 (OVMS3)
AFFECTED_VERSIONS: 3.3.005
---END_METADATA---

Description Summary:
A buffer overflow in the Open Vehicle Monitoring System (OVMS3) 3.3.005 allows remote attackers to cause a denial of service or execute arbitrary code via crafted GVRET frames.

Executive Summary:
A critical buffer overflow in Open Vehicle Monitoring System 3 (OVMS3) allows remote attackers to execute arbitrary code or cause a system crash.

Vulnerability Details

CVE-ID: CVE-2026-37541

Affected Software: Open Vehicle Monitoring System 3

Affected Versions: 3.3.005

Vulnerability: Located in canformat_gvret.cpp, this buffer overflow is caused by improper validation of the length field in binary GVRET data, allowing memory corruption when processing malformed frames.

Business Impact

The CVSS score of 10.0 identifies this as a maximum-severity vulnerability. In the context of vehicle monitoring systems, this could lead to safety risks, loss of system control, and unauthorized access to vehicle telematics data.

Remediation Plan

Immediate Action: Update to the latest available version of OVMS3 as provided by the vendor.

Proactive Monitoring: Monitor telematics logs for malformed frames or unexpected device reboots.

Compensating Controls: Isolate the vehicle monitoring system from untrusted public networks where possible to minimize the attack surface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly critical and requires immediate attention. Organizations using OVMS3 should apply patches as soon as they are made available to protect against potential remote exploitation and loss of system integrity.

---METADATA---
VENDOR: Cannelloni
PRODUCT: v2
AFFECTED_VERSIONS: 2.0.0
---END_METADATA---

Description Summary:
A buffer overflow vulnerability in Cannelloni v2 allows remote attackers to cause a denial of service or execute arbitrary code via crafted CAN FD frames.

Executive Summary:
A critical buffer overflow vulnerability in the Cannelloni v2 parser and decoder functions poses a severe risk of arbitrary code execution for affected systems.

Vulnerability Details

CVE-ID: CVE-2026-37539

Affected Software: Cannelloni v2

Affected Versions: 2.0.0

Vulnerability: This is a buffer overflow vulnerability located in the parseCANFrame and decodeFrame functions. The vulnerability is exploitable by an unauthenticated remote attacker who can send crafted CAN FD frames to the target system.

Business Impact

The successful exploitation of this vulnerability can lead to a complete system crash (Denial of Service) or the execution of unauthorized code with the privileges of the application. Given the CVSS score of 9.8, this represents a critical risk to operational continuity and system integrity, potentially allowing attackers to gain full control over the affected hardware or software environment.

Remediation Plan

Immediate Action: Update the Cannelloni v2 software to the latest available version provided by the vendor.

Proactive Monitoring: Monitor system logs for anomalous CAN frame traffic or frequent application crashes that may indicate exploitation attempts.

Compensating Controls: Implement network segmentation to isolate CAN bus traffic from untrusted networks and utilize deep packet inspection to identify malformed frames.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention. Organizations should prioritize patching the affected software components to prevent potential remote code execution. If immediate updates are not feasible, strict network access controls must be enforced to minimize the attack surface until a permanent fix is deployed.

---METADATA---
VENDOR: miaofng
PRODUCT: uds-c
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A stack buffer overflow vulnerability exists in the send_diagnostic_request function of the miaofng/uds-c library.

Executive Summary:
A critical stack buffer overflow in the uds-c library could lead to arbitrary code execution, potentially allowing an attacker to hijack the system.

Vulnerability Details

CVE-ID: CVE-2026-37536

Affected Software: miaofng/uds-c

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The send_diagnostic_request function in the library fails to properly validate input sizes, leading to a stack buffer overflow. This is a classic memory corruption issue that can be exploited by an attacker providing malicious input.

Business Impact

With a CVSS score of 8.8, this is a severe vulnerability. Successful exploitation could allow an attacker to gain full control over the process or service using the library, leading to system-wide compromise or persistent access for an attacker.

Remediation Plan

Immediate Action: Update the uds-c library to the latest version that includes the stack buffer overflow protection.

Proactive Monitoring: Monitor logs for segmentation faults or abnormal process crashes, which are common indicators of a failed or successful buffer overflow attempt.

Compensating Controls: Ensure that the application using the library is compiled with modern exploit mitigation techniques, such as stack canaries and ASLR.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly dangerous due to the nature of buffer overflows. Developers and system administrators must prioritize upgrading the library and ensuring that all downstream applications are recompiled and patched.

---METADATA---
VENDOR: Open-SAE-J1939
PRODUCT: SAE-J1939 Library
AFFECTED_VERSIONS: Commits up to b6caf884df46435e539b1ecbf92b6c29b345bdfe
---END_METADATA---

Description Summary:
An integer underflow vulnerability in the Open-SAE-J1939 library allows remote attackers to perform arbitrary memory writes via crafted CAN frames.

Executive Summary:
An integer underflow in the Open-SAE-J1939 library allows unauthenticated attackers to achieve arbitrary memory corruption and potential code execution.

Vulnerability Details

CVE-ID: CVE-2026-37534

Affected Software: Open-SAE-J1939

Affected Versions: Commits up to b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30)

Vulnerability: This is an integer underflow vulnerability within the SAE_J1939_Read_Transport_Protocol_Data_Transfer function. An unauthenticated attacker can exploit this by sending a crafted CAN frame containing a specific sequence number, leading to an out-of-bounds memory write.

Business Impact

With a CVSS score of 9.8, this vulnerability poses a critical threat to business operations. Memory corruption vulnerabilities of this nature typically allow for full system compromise, potentially resulting in data exfiltration, the installation of persistent malicious backdoors, or critical system failure.

Remediation Plan

Immediate Action: Update the Open-SAE-J1939 library to a version that includes the fix for this integer underflow.

Proactive Monitoring: Review system logs for unexpected memory access errors or segmentation faults that may suggest an ongoing attack.

Compensating Controls: Deploy host-based intrusion detection systems to monitor for anomalous memory usage patterns and restrict network access to the CAN interface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The potential for arbitrary memory corruption makes this vulnerability extremely dangerous. Security teams must treat this as a high-priority remediation item. Ensure all implementations of the library are updated to the secure version to prevent unauthorized system access.

---METADATA---
VENDOR: AGL
PRODUCT: app-framework-main
AFFECTED_VERSIONS: thru 17.1.12
---END_METADATA---

Description Summary:
AGL app-framework-main is vulnerable to Zip Slip path traversal and a TOCTOU race condition during widget installation, allowing arbitrary file writes.

Executive Summary:
A critical combination of Zip Slip and TOCTOU vulnerabilities in the AGL app-framework-main allows unauthenticated attackers to write arbitrary files to the filesystem.

Vulnerability Details

CVE-ID: CVE-2026-37531

Affected Software: AGL app-framework-main

Affected Versions: thru 17.1.12

Vulnerability: The application fails to block dot-notation traversal sequences in ZIP entries and performs file extraction before signature verification. This allows an attacker to write files anywhere on the system, with the malicious files persisting even if signature verification fails.

Business Impact

This vulnerability provides an attacker with the ability to overwrite critical system files or place malicious executables, leading to full system compromise. The CVSS score of 9.8 highlights the severity of this flaw in the widget installation flow.

Remediation Plan

Immediate Action: Upgrade to the latest version of the AGL app-framework-main to ensure secure extraction and signature validation.

Proactive Monitoring: Monitor filesystem integrity and watch for the creation of unauthorized files in sensitive directories during the widget installation process.

Compensating Controls: Restrict the service account running the app-framework-main to the minimum necessary filesystem permissions to prevent unauthorized writes.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate patching is required to address the insecure file handling in the installation process. Failure to update may allow attackers to bypass security controls and achieve persistence on the affected device.

---METADATA---
VENDOR: Automotive Grade Linux (AGL)
PRODUCT: app-framework-binder (afb-daemon)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The AGL app-framework-binder (afb-daemon) contains a security vulnerability affecting versions through v19.

Executive Summary:
A vulnerability in the AGL app-framework-binder could allow for unauthorized access or system compromise in automotive infotainment systems.

Vulnerability Details

CVE-ID: CVE-2026-37526

Affected Software: AGL app-framework-binder

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The afb-daemon is responsible for binding applications within the AGL environment. A vulnerability here could allow an attacker to bypass security constraints or interact with services they should not have access to.

Business Impact

With a CVSS score of 7.8, this vulnerability poses a high risk to the security and integrity of automotive systems. Exploitation could allow unauthorized control over vehicle infotainment features or access to sensitive user data, undermining the safety and privacy of the platform.

Remediation Plan

Immediate Action: Update the afb-daemon package to the latest version provided by your AGL distribution or automotive software vendor.

Proactive Monitoring: Review system logs for unauthorized service binding attempts or suspicious inter-process communication (IPC) activity.

Compensating Controls: Implement strict sandboxing and MAC (Mandatory Access Control) policies to limit the privileges of applications running within the framework.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Automotive manufacturers and software developers must treat this vulnerability with high urgency. Patching the binder daemon is critical to maintaining the overall security integrity of the vehicle's software ecosystem.

---METADATA---
VENDOR: itsourcecode
PRODUCT: University Management System
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
itsourcecode University Management System 1 is vulnerable to a high-severity flaw that could lead to unauthorized administrative access and data manipulation.

Executive Summary:
A critical security vulnerability in itsourcecode University Management System 1 puts sensitive institutional and student data at risk of unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-3747

Affected Software: itsourcecode University Management System

Affected Versions: 1

Vulnerability: The University Management System version 1 contains a security weakness that may allow an attacker to compromise the application. The high CVSS score suggests that the vulnerability could be exploited by an unauthenticated attacker to gain unauthorized privileges.

Business Impact

A successful exploit could allow an attacker to alter academic records, access sensitive financial information, or disrupt university operations. The CVSS score of 7.3 confirms the high impact on confidentiality and integrity, which could result in severe regulatory and reputational consequences for the institution.

Remediation Plan

Immediate Action: Administrators must immediately update the University Management System to the latest patched version to mitigate the risk of exploitation.

Proactive Monitoring: Conduct a thorough audit of administrative user accounts and review system logs for any signs of unauthorized privilege escalation.

Compensating Controls: Implement multi-factor authentication (MFA) for all management interfaces to provide an additional layer of security against unauthorized access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, management systems are high-value targets, and the potential for exploitation remains high.

Analyst Recommendation

The severity of this vulnerability requires immediate attention from IT and security leadership. Applying the primary vendor patch is the only effective way to ensure the continued security and integrity of the university's digital assets.

---METADATA---
VENDOR: FRRouting
PRODUCT: FRRouting (FRR)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability exists in the ParseIP6Extended function of the FRRouting (FRR) BGP component.

Executive Summary:
A high-severity out-of-bounds read vulnerability in the FRRouting BGP component could lead to service disruption or memory exposure.

Vulnerability Details

CVE-ID: CVE-2026-37461

Affected Software: FRRouting (FRR)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability is an out-of-bounds read located in the ParseIP6Extended function within the BGP routing component. This can be triggered by a specially crafted packet, causing the application to crash or potentially leak sensitive information from memory.

Business Impact

The CVSS score of 7.5 reflects a High-severity risk. Routing protocols are essential for network stability; a crash or compromise in FRR could lead to significant network instability, routing loops, or denial-of-service (DoS) conditions.

Remediation Plan

Immediate Action: Update FRRouting to the latest stable release containing the fix for the BGP parsing component.

Proactive Monitoring: Monitor BGP process stability and check system logs for segmentation faults or abnormal memory usage.

Compensating Controls: Use network-level filtering to ensure that only trusted BGP peers can communicate with the FRR instance.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, BGP-related vulnerabilities are frequently targeted to disrupt core network services.

Analyst Recommendation

Network infrastructure components must be maintained at the latest patch levels. Given the risk to BGP stability, administrators should verify their FRRouting versions and update immediately to mitigate the potential for DoS attacks.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Simple Responsive Tourism Website
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A security vulnerability in SourceCodester Simple Responsive Tourism Website 1 could enable attackers to compromise the website and access backend data.

Executive Summary:
SourceCodester Simple Responsive Tourism Website 1 contains a high-severity flaw that risks unauthorized access to tourism-related data and website defacement.

Vulnerability Details

CVE-ID: CVE-2026-3746

Affected Software: SourceCodester Simple Responsive Tourism Website

Affected Versions: 1

Vulnerability: This vulnerability affects version 1 of the tourism website script. Based on the CVSS score of 7.3, the flaw likely permits an attacker to bypass authentication or perform unauthorized actions within the web application environment.

Business Impact

Exploitation of this flaw could result in the theft of customer travel information and the unauthorized modification of website content. This poses a significant risk to business operations, potentially leading to financial discrepancies and a loss of customer confidence in the platform's security.

Remediation Plan

Immediate Action: Apply the latest security updates from SourceCodester immediately to address the vulnerability in the tourism website script.

Proactive Monitoring: Monitor for suspicious database activity or changes to web files that could indicate a successful compromise or web shell installation.

Compensating Controls: Utilize a Web Application Firewall (WAF) to detect and block common web-based attack vectors such as SQL injection or cross-site scripting.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. The lack of a public exploit does not reduce the urgency, as the vulnerability is rated as High severity.

Analyst Recommendation

Given the potential for unauthorized access to business-critical data, immediate remediation is required. Security teams should prioritize patching the Simple Responsive Tourism Website to version 1 or higher as recommended by the vendor.

---METADATA---
VENDOR: FRRouting
PRODUCT: FRRouting (FRR)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An integer underflow vulnerability exists in the FRRouting (FRR) stable/10 release.

Executive Summary:
A high-severity integer underflow flaw in FRRouting (FRR) could result in service instability or remote exploitation.

Vulnerability Details

CVE-ID: CVE-2026-37459

Affected Software: FRRouting (FRR)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This integer underflow vulnerability occurs within the FRRouting codebase. Such vulnerabilities often lead to memory corruption, which can be leveraged by an attacker to cause a denial-of-service or execute arbitrary code.

Business Impact

With a CVSS score of 7.5, this is a High-severity vulnerability. Because FRR is a critical networking component, any instability or potential for exploitation could jeopardize the availability of the entire network segment it manages.

Remediation Plan

Immediate Action: Upgrade to the latest version of FRRouting as recommended by the project maintainers to resolve the integer underflow issue.

Proactive Monitoring: Monitor the FRR daemon for unexpected restarts or performance degradation.

Compensating Controls: Implement strict control plane policing to limit the volume and nature of traffic processed by the routing daemon.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, memory corruption flaws in networking software are high-risk.

Analyst Recommendation

Maintaining the integrity of routing software is critical for network security. Administrators are advised to update their FRRouting deployments immediately to ensure the stability and security of their routing environment.

---METADATA---
VENDOR: code-projects
PRODUCT: Student Web Portal
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A high-severity vulnerability in code-projects Student Web Portal 1 could allow an attacker to gain unauthorized access to sensitive academic and personal data.

Executive Summary:
The code-projects Student Web Portal 1 is affected by a security vulnerability that could lead to a complete compromise of student information systems.

Vulnerability Details

CVE-ID: CVE-2026-3744

Affected Software: code-projects Student Web Portal

Affected Versions: 1

Vulnerability: A vulnerability was identified in version 1 of the Student Web Portal. The flaw likely involves improper input validation or broken access control, potentially allowing an attacker to interact with the portal's backend without appropriate authorization.

Business Impact

The impact of this vulnerability is severe, as it threatens the privacy of student records and institutional data. With a CVSS score of 7.3, the risk includes unauthorized data modification and potential identity theft, which could lead to legal non-compliance and a loss of trust within the educational community.

Remediation Plan

Immediate Action: Update the Student Web Portal to the latest version provided by the vendor to close the identified security gap.

Proactive Monitoring: Review application access logs for any anomalous administrative activity or unauthorized attempts to access student profiles.

Compensating Controls: Restrict access to the web portal via a VPN or IP allowlisting to ensure only authorized users can reach the vulnerable interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, student portals are frequent targets for unauthorized data harvesting, making rapid remediation essential.

Analyst Recommendation

The High-severity rating and the sensitive nature of student data necessitate immediate intervention. IT departments should verify their current software version and apply the necessary security updates without delay to prevent potential exploitation.

---METADATA---
VENDOR: Beauty Parlour Management System
PRODUCT: Beauty Parlour Management System
AFFECTED_VERSIONS: v1.1
CONFIDENCE: medium
MISSING: patch, technical_details
---END_METADATA---

Description Summary:
A SQL injection vulnerability in Beauty Parlour Management System v1.1 allows unauthenticated attackers to extract sensitive database information via the 'aptnumber' parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability in Beauty Parlour Management System v1.1 enables attackers to compromise sensitive database content.

Vulnerability Details

CVE-ID: CVE-2026-37431

Affected Software: Beauty Parlour Management System

Affected Versions: v1.1

Vulnerability: This is a classic SQL injection vulnerability located in the /appointment-detail.php endpoint. The attacker does not require authentication (PR:N) to supply malicious SQL statements via the aptnumber parameter.

Business Impact

The vulnerability allows for unauthorized access to the application's database, which likely contains sensitive customer or appointment information. A CVSS score of 9.8 reflects the high risk of data exfiltration and potential loss of confidentiality and integrity, which could lead to significant reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: Since no official patch is currently available, disable the affected endpoint or the application entirely until a security update is released by the vendor.

Proactive Monitoring: Review database query logs for suspicious patterns, such as unexpected SQL keywords (e.g., UNION, SELECT, SLEEP) targeting the aptnumber parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter malicious traffic directed at the /appointment-detail.php page.

Exploitation Status

Public Exploit Available: Yes — a public proof-of-concept exists on GitHub.

Analyst Notes: As of May 8, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The existence of a public PoC increases the likelihood of opportunistic attacks.

Analyst Recommendation

Due to the lack of an official vendor patch and the presence of a public proof-of-concept, this application should be considered insecure. Administrators must implement aggressive WAF filtering or isolate the system from the network until a formal remediation is provided by the developers.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Payroll Management and Information System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL injection via the 'view_employee.php' file.

Executive Summary:
A critical SQL injection vulnerability in the Payroll Management and Information System allows unauthenticated attackers to execute unauthorized database queries.

Vulnerability Details

CVE-ID: CVE-2026-37347

Affected Software: SourceCodester Payroll Management and Information System

Affected Versions: v1.0

Vulnerability: The application lacks proper input sanitization in 'view_employee.php', allowing for SQL injection. An unauthenticated attacker can manipulate queries to extract or modify sensitive payroll and employee data.

Business Impact

With a CVSS score of 9.1, this vulnerability poses a significant risk to the security of sensitive employee and financial information. A successful exploit could lead to data breach, regulatory non-compliance, and loss of organizational trust.

Remediation Plan

Immediate Action: Update to the latest version of the Payroll Management and Information System.

Proactive Monitoring: Audit database logs for unusual query patterns and monitor for unauthorized access to employee data tables.

Compensating Controls: Implement a WAF to block common SQL injection payloads and enforce strict database user permissions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The sensitivity of the data handled by this system makes this vulnerability particularly dangerous. Administrators must prioritize patching to prevent the theft of sensitive payroll information.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Vehicle Parking Area Management System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL injection via the 'manage_park.php' file.

Executive Summary:
A critical SQL injection vulnerability in the Vehicle Parking Area Management System allows unauthenticated attackers to execute arbitrary database queries.

Vulnerability Details

CVE-ID: CVE-2026-37345

Affected Software: SourceCodester Vehicle Parking Area Management System

Affected Versions: v1.0

Vulnerability: The application fails to properly sanitize user-supplied input in the 'manage_park.php' file. This allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized data extraction or modification.

Business Impact

With a CVSS score of 9.8, this flaw risks complete database compromise. Attackers can bypass access controls to steal sensitive information, destroy data, or gain administrative access to the underlying application.

Remediation Plan

Immediate Action: Apply patches provided by the vendor or upgrade to a secured version if available.

Proactive Monitoring: Monitor database query logs for anomalous syntax or unexpected access patterns indicative of SQL injection attempts.

Compensating Controls: Deploy a WAF configured to detect and block common SQL injection patterns (e.g., 'UNION SELECT', 'OR 1=1').

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

SQL injection is a high-impact vulnerability that requires immediate attention. Organizations using this system should prioritize patching or implementing strict input validation to mitigate the risk of data loss.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Simple Music Cloud Community System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL injection via the 'view_user.php' file.

Executive Summary:
A critical SQL injection vulnerability in the Simple Music Cloud Community System allows unauthenticated attackers to compromise the application database.

Vulnerability Details

CVE-ID: CVE-2026-37338

Affected Software: SourceCodester Simple Music Cloud Community System

Affected Versions: v1.0

Vulnerability: The application does not adequately validate input in the 'view_user.php' file. This enables an unauthenticated attacker to inject SQL queries, potentially compromising the integrity and confidentiality of the entire database.

Business Impact

The CVSS score of 9.4 reflects the severe risk of unauthorized data access. Exploitation could lead to the exposure of user credentials, personal information, and the total loss of database integrity.

Remediation Plan

Immediate Action: Update to the latest version of the system or apply the vendor-provided patch.

Proactive Monitoring: Watch database query logs for suspicious activity and utilize database activity monitoring (DAM) to detect unauthorized access.

Compensating Controls: Use a WAF to filter malicious traffic and sanitize inputs before they reach the application backend.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease with which SQL injection can be exploited, administrators must ensure that all input fields are sanitized. Immediate patching is critical to securing the application against external database threats.

---METADATA---
VENDOR: itsourcecode
PRODUCT: Free Hotel Reservation System
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1 that could allow an attacker to compromise the application's integrity and confidentiality.

Executive Summary:
itsourcecode Free Hotel Reservation System 1 contains a high-severity security vulnerability that poses a significant risk to guest data and system availability.

Vulnerability Details

CVE-ID: CVE-2026-3730

Affected Software: itsourcecode Free Hotel Reservation System

Affected Versions: 1

Vulnerability: The application contains an unspecified security flaw in version 1. While the exact authentication requirements are not detailed in the initial disclosure, the vulnerability likely resides in a core processing function, potentially allowing an attacker to bypass standard security controls.

Business Impact

A successful exploit could lead to the unauthorized disclosure of sensitive guest information, including personal details and booking history. Given the CVSS score of 7.3, this High-severity vulnerability could also result in the modification of reservation data or system downtime, leading to significant reputational damage and financial loss for hospitality providers.

Remediation Plan

Immediate Action: Administrators should immediately apply any available security patches from the vendor or migrate to a supported, updated version of the reservation system.

Proactive Monitoring: Implement rigorous monitoring of web server logs for unusual POST requests or unauthorized access attempts targeting the reservation management interface.

Compensating Controls: Deploy a Web Application Firewall (WAF) with generic exploit detection rules to filter potentially malicious traffic while awaiting a formal patch.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in a public-facing reservation system, the potential for exploitation is high once technical details emerge.

Analyst Recommendation

This vulnerability represents a significant risk to the confidentiality of customer data. Organizations utilizing this software must prioritize the application of vendor-provided updates immediately to mitigate the risk of unauthorized access and data exfiltration.

---METADATA---
VENDOR: Fire-Boltt
PRODUCT: Smartwatch FB BGS001
AFFECTED_VERSIONS: Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Fire-Boltt Smartwatch FB BGS001 firmware allows unauthorized access via GATT Write Request commands, enabling replay attacks using captured BLE packets.

Executive Summary:
A critical authentication bypass vulnerability in Fire-Boltt Smartwatch FB BGS001 firmware allows attackers to execute arbitrary commands via BLE replay attacks.

Vulnerability Details

CVE-ID: CVE-2026-37271

Affected Software: Fire-Boltt Smartwatch FB BGS001

Affected Versions: Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4

Vulnerability: The device suffers from improper authentication, failing to validate sessions for GATT Write Request commands. An unauthenticated attacker in physical proximity can capture and replay Bluetooth Low Energy (BLE) packets to trigger device functions.

Business Impact

This vulnerability poses a significant risk to user privacy and device integrity. With a CVSS score of 9.8, the potential for total system compromise is high, as an attacker could manipulate smartwatch functions without user consent. Such unauthorized access could lead to the exposure of sensitive personal data or the disruption of critical device services.

Remediation Plan

Immediate Action: Review the vendor advisory at https://github.com/advisories/GHSA-wjqj-v3q8-x4h3 and apply firmware updates if available.

Proactive Monitoring: Monitor the environment for unusual Bluetooth pairing requests or unexpected device behavior that may indicate unauthorized BLE interaction.

Compensating Controls: Disable Bluetooth connectivity on the device when not in use and avoid pairing in public, high-traffic areas where BLE sniffing could occur.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical severity of this authentication bypass, administrators and users must prioritize the application of security patches. If a firmware update is not currently available, maintain strict physical control over the device and limit exposure to unauthorized Bluetooth environments.

---METADATA---
VENDOR: OpenAirInterface
PRODUCT: OpenAirInterface5G (nr-softmodem)
AFFECTED_VERSIONS: 2.4.0
---END_METADATA---

Description Summary:
A divide-by-zero vulnerability in the O-RAN RAN function module of OpenAirInterface5G can lead to application crashes.

Executive Summary:
A critical logic flaw in the OpenAirInterface5G nr-softmodem could cause service outages by triggering an unhandled exception during PRB usage calculations.

Vulnerability Details

CVE-ID: CVE-2026-37232

Affected Software: OpenAirInterface OpenAirInterface5G

Affected Versions: 2.4.0 (nr-softmodem)

Vulnerability: The vulnerability exists in the fill_RRU_PrbTotDl() and fill_RRU_PrbTotUl() functions, where the software performs a division operation without validating the divisor. An unauthenticated remote attacker can trigger this condition, causing the service to crash and resulting in a denial-of-service.

Business Impact

With a CVSS score of 8.6, this vulnerability poses a high risk to telecommunications infrastructure availability. A crash in the nr-softmodem component can disrupt 5G connectivity for connected users, leading to service degradation and potential operational losses for operators relying on this software.

Remediation Plan

Immediate Action: Update the OpenAirInterface5G deployment to a patched version that implements proper zero-check validation in the affected functions.

Proactive Monitoring: Monitor the nr-softmodem service logs for frequent restarts or crash reports that may indicate exploitation attempts.

Compensating Controls: Deploy rate-limiting at the network edge to mitigate potential floods of traffic that might trigger the vulnerable calculation routines.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ease of triggering a crash makes the potential for exploitation high.

Analyst Recommendation

Organizations utilizing OpenAirInterface5G for 5G research or deployment should prioritize patching the nr-softmodem component. Ensuring the stability of these core functions is essential to maintaining network uptime and preventing unauthorized service interruption.