Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68648

Tracked CVEs

6371

Critical

699

Exploited in wild

6478

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1274
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

111 matches

CVE-2026-116605Medium· 5.3

today

SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-sid…

▾ SunlitSourceCodester · Online Food Ordering SystemEPSS 0.30%via CVEORG

CVE-2026-116604Medium· 6.5PoC

yesterday

SourceCodester Online Food Ordering System delete_admin.php missing authentication

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is …

▾ TwilightSourceCodester · Online Food Ordering SystemEPSS 0.57%via CVEORG

CVE-2026-116603Medium· 4.7

yesterday

SourceCodester Online Food Ordering System add_food.php unrestricted upload

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be pe…

▾ SunlitSourceCodester · Online Food Ordering SystemEPSS 0.29%via CVEORG

CVE-2026-116602Medium· 6.5

yesterday

SourceCodester Online Food Ordering System delete.php unlink path traversal

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The atta…

▾ SunlitSourceCodester · Online Food Ordering SystemEPSS 0.47%via CVEORG

CVE-2026-116055Medium· 6.3

2d ago

SourceCodester Performance Indicator System deleteproduct.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be…

▾ SunlitSourceCodester · Performance Indicator SystemEPSS 0.32%via CVEORG

CVE-2026-116060High· 7.3PoC

2d ago

SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attac…

▾ MidnightSourceCodester · Performance Indicator SystemEPSS 0.27%via CVEORG

CVE-2026-116061High· 7.3

2d ago

SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument Contact leads to sql injection. The att…

▾ TwilightSourceCodester · Performance Indicator SystemEPSS 0.26%via CVEORG

CVE-2026-116062High· 7.3

2d ago

SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the argument Contact results in sql injecti…

▾ TwilightSourceCodester · Performance Indicator SystemEPSS 0.27%via CVEORG

CVE-2026-114267High· 7.3

6d ago

SourceCodester Food Order Management System Admin Endpoint authorization

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote.…

▾ TwilightSourceCodester · Food Order Management SystemEPSS 0.31%via CVEORG

CVE-2026-112096Low· 3.5PoC

1w ago

SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of …

▾ TwilightSourceCodester · Inventory SystemEPSS 0.20%via CVEORG

CVE-2026-112095Low· 3.5PoC

1w ago

SourceCodester Inventory System Product Management products_handler.php save cross site scripting

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Management. Executing a manipulation of the argument Product_Id/Product…

▾ TwilightSourceCodester · Inventory SystemEPSS 0.20%via CVEORG

CVE-2026-112097Low· 3.5

1w ago

SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the ar…

▾ SunlitSourceCodester · Inventory SystemEPSS 0.20%via CVEORG

CVE-2026-109620High· 7.3PoC

2w ago

A vulnerability has been found in SourceCodester Online Reviewer System 1.0

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql inject…

▾ MidnightSourceCodester · Online Reviewer SystemEPSS 0.26%via NVD

CVE-2026-109607High· 7.3PoC

2w ago

A flaw has been found in SourceCodester Online Exam System 1.0

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql i…

▾ MidnightSourceCodester · Online Exam SystemEPSS 0.33%via NVD

CVE-2026-109606High· 7.3PoC

2w ago

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name resu…

▾ MidnightSourceCodester · Art Gallery Management SystemEPSS 0.33%via NVD

CVE-2026-109605High· 7.3PoC

2w ago

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type …

▾ MidnightSourceCodester · Simple Cafe Billing SystemEPSS 0.35%via NVD

CVE-2026-108975High· 7.3PoC

2w ago

A security flaw has been discovered in SourceCodester Library Management System 1.0

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in u…

▾ MidnightSourceCodester · Library Management SystemEPSS 0.29%via NVD

CVE-2026-108974High· 7.3PoC

2w ago

A vulnerability was identified in SourceCodester E-Learning System 1.0

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be lau…

▾ MidnightSourceCodester · E-Learning SystemEPSS 0.29%via NVD

CVE-2026-108973High· 7.3PoC

2w ago

A vulnerability was determined in SourceCodester Contact Tracing System 1.0

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted up…

▾ MidnightSourceCodester · Contact Tracing SystemEPSS 0.29%via NVD

CVE-2026-108972High· 7.3PoC

2w ago

A vulnerability was found in SourceCodester Human Resource Management System 1.0

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.php of the component Employee Endpoint. The manipulation of th…

▾ MidnightSourceCodester · Human Resource Management SystemEPSS 0.40%via NVD

CVE-2026-108968High· 7.3PoC

2w ago

A weakness has been identified in SourceCodester Performance Indicator System 1.0

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote …

▾ MidnightSourceCodester · Performance Indicator SystemEPSS 0.26%via NVD

CVE-2026-108967High· 7.3

2w ago

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attac…

▾ TwilightSourceCodester · Performance Indicator SystemEPSS 0.26%via NVD

CVE-2026-108966High· 7.3PoC

2w ago

A vulnerability was identified in SourceCodester Performance Indicator System 1.0

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The att…

▾ MidnightSourceCodester · Performance Indicator SystemEPSS 0.26%via NVD

CVE-2026-108965High· 7.3PoC

2w ago

A vulnerability was determined in SourceCodester Performance Indicator System 1.0

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injectio…

▾ MidnightSourceCodester · Performance Indicator SystemEPSS 0.27%via NVD

CVE-2026-108964High· 7.3PoC

2w ago

A vulnerability was found in SourceCodester Performance Indicator System 1.0

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The atta…

▾ MidnightSourceCodester · Performance Indicator SystemEPSS 0.26%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

SourceCodester Online Food Ordering System delete_admin.php missing authentication

SourceCodester Online Food Ordering System add_food.php unrestricted upload

SourceCodester Online Food Ordering System delete.php unlink path traversal

SourceCodester Performance Indicator System deleteproduct.php sql injection

SourceCodester Performance Indicator System adddealer.php sql injection

SourceCodester Performance Indicator System edit_dealer.php sql injection

SourceCodester Performance Indicator System save_profile.php sql injection

SourceCodester Food Order Management System Admin Endpoint authorization

SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting

SourceCodester Inventory System Product Management products_handler.php save cross site scripting

SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

A vulnerability has been found in SourceCodester Online Reviewer System 1.0

A flaw has been found in SourceCodester Online Exam System 1.0

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0

A security flaw has been discovered in SourceCodester Library Management System 1.0

A vulnerability was identified in SourceCodester E-Learning System 1.0

A vulnerability was determined in SourceCodester Contact Tracing System 1.0

A vulnerability was found in SourceCodester Human Resource Management System 1.0

A weakness has been identified in SourceCodester Performance Indicator System 1.0

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0

A vulnerability was identified in SourceCodester Performance Indicator System 1.0

A vulnerability was determined in SourceCodester Performance Indicator System 1.0

A vulnerability was found in SourceCodester Performance Indicator System 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

SourceCodester Online Food Ordering System delete_admin.php missing authentication

SourceCodester Online Food Ordering System add_food.php unrestricted upload

SourceCodester Online Food Ordering System delete.php unlink path traversal

SourceCodester Performance Indicator System deleteproduct.php sql injection

SourceCodester Performance Indicator System adddealer.php sql injection

SourceCodester Performance Indicator System edit_dealer.php sql injection

SourceCodester Performance Indicator System save_profile.php sql injection

SourceCodester Food Order Management System Admin Endpoint authorization

SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting

SourceCodester Inventory System Product Management products_handler.php save cross site scripting

SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

A vulnerability has been found in SourceCodester Online Reviewer System 1.0

A flaw has been found in SourceCodester Online Exam System 1.0

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0

A security flaw has been discovered in SourceCodester Library Management System 1.0

A vulnerability was identified in SourceCodester E-Learning System 1.0

A vulnerability was determined in SourceCodester Contact Tracing System 1.0

A vulnerability was found in SourceCodester Human Resource Management System 1.0

A weakness has been identified in SourceCodester Performance Indicator System 1.0

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0

A vulnerability was identified in SourceCodester Performance Indicator System 1.0

A vulnerability was determined in SourceCodester Performance Indicator System 1.0

A vulnerability was found in SourceCodester Performance Indicator System 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial