Skip to content
OpenAdvisories

Archive

11 January 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.7

    code-projects Intern Membership Management System delete_activity.php sql injection

    A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/delete_activity.php. Executing a manipulation of the argument activity_id can lead to sql injection. The attack may be …

  • Medium 6.3

    jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food index sql injection

    A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 20260103. This vulnerability affects unknown code of the file /index.php/api/product.category/index. Such manipulation of the argument latitude leads to sql injecti…

  • Medium 6.3
    CVE-2026-0842 Public exploit

    Flycatcher Toys smART Sketcher Bluetooth Low Energy missing authentication

    A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0. This affects an unknown part of the component Bluetooth Low Energy Interface. This manipulation causes missing authentication. The attack can only be done within the local network. The exploit…