Aggregator

CVE-2026-2671 | Mendi Neurofeedback Headset V4 Bluetooth Low Energy cleartext transmission (EUVD-2026-10185)

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability identified as problematic has been detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. This vulnerability is identified as CVE-2026-2671. The attack can only be performed from the local network. There is not any exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CLOP

Dark Feed IO
3 weeks 4 days ago

You must login to view this content

cohenido

CVE-2025-15603 | open-webui up to 0.6.16 JWT Key start_windows.bat WEBUI_SECRET_KEY random values

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability categorized as problematic has been discovered in open-webui up to 0.6.16. Affected is an unknown function of the file backend/start_windows.bat of the component JWT Key Handler. Such manipulation of the argument WEBUI_SECRET_KEY leads to insufficiently random values. This vulnerability is referenced as CVE-2025-15603. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com

CVE-2026-3724 | SourceCodester Patients Waiting Area Queue Management System 1.0 /checkin.php patient_id improper authorization (EUVD-2026-10227)

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in SourceCodester Patients Waiting Area Queue Management System 1.0. It has been rated as critical. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patient_id causes improper authorization. The identification of this vulnerability is CVE-2026-3724. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2026-3723 | code-projects Simple Flight Ticket Booking System 1.0 /Admindelete.php flightno sql injection (EUVD-2026-10226)

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. It has been declared as critical. This affects an unknown function of the file /Admindelete.php. The manipulation of the argument flightno results in sql injection. This vulnerability was named CVE-2026-3723. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com

Managed ad