{"vulnerability": "cve-2026-1622", "sightings": [{"uuid": "b29ba3f7-8e43-45d2-bb13-1823c8cda2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1622", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mez2pjqs3k2f", "content": "", "creation_timestamp": "2026-02-16T22:06:34.868507Z"}, {"uuid": "92dae981-97c8-4bac-8dd8-e01a8fd78d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1622", "type": "seen", "source": "https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mezbdeuglo2b", "content": "", "creation_timestamp": "2026-02-17T00:05:02.908326Z"}, {"uuid": "758a882b-e28f-4b61-9805-e5ed641b8b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyewzht452i", "content": "CVE-2026-16220 - code-projects Online Examination System account.php cross site scripting\nCVE ID : CVE-2026-16220\n \n Published : July 19, 2026, 7:16 a.m. | 23\u00a0minutes ago\n \n Description : A vulnerability has been found in code-projects Online Examination System 1.0. This vulne...", "creation_timestamp": "2026-07-19T08:39:23.292205Z"}, {"uuid": "5f4a4fcb-3ccd-49b0-8fca-0467c1bcdeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116945821784754940", "content": "CVE-2026-16223: SSRF in 1Panel-dev CordysCRM 1.4.0 & 1.4.1 (MEDIUM, CVSS 5.3). Exploitable via appSecret \u2014 enables unauthorized server requests. No patch yet: restrict endpoint, monitor logs. https://radar.offseq.com/threat/cve-2026-16223-server-side-request-forgery-in-1panel-dev-cordyscrm-b282fef55db79c7d #OffSeq #SSRF #CyberSecurity #Vuln", "creation_timestamp": "2026-07-19T09:00:27.229103Z"}, {"uuid": "aac776f2-b8da-4a0c-aae4-8912c170b777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqyg4qahpk2n", "content": "1Panel-dev CordysCRM v1.4.0 & 1.4.1 affected by CVE-2026-16223 (MEDIUM): SSRF via appSecret parameter. No patch \u2014 restrict exposure, monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-16223-server-side-request-forgery-in-1panel-dev-cordyscrm-b282fef55db79c7d #OffSeq #SSRF #Vuln", "creation_timestamp": "2026-07-19T09:00:29.552002Z"}, {"uuid": "6bde4521-08f5-4ba0-a02f-a8a844c0eca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16229", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116946175546142536", "content": "CVE-2026-16229 (MEDIUM, CVSS 5.3): XSS in itsourcecode Courier Management System v1.0 via 'page' param in /index.php. Remote exploitation possible, user interaction needed. No patch yet \u2014 use WAF and input validation. https://radar.offseq.com/threat/cve-2026-16229-cross-site-scripting-in-itsourcecode-courier-management-system-ed5bf04aced8e4b0 #OffSeq #XSS #Vuln", "creation_timestamp": "2026-07-19T10:30:25.023926Z"}, {"uuid": "2c7428d9-68ff-4d7d-baba-466f19c14189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16229", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqyl5m2v2k25", "content": "Medium severity XSS (CVE-2026-16229) in itsourcecode Courier Management System v1.0 \u2014 abuse of 'page' parameter in /index.php. No patch yet. Mitigate with WAF rules & input validation. https://radar.offseq.com/threat/cve-2026-16229-cross-site-scripting-in-itsourcecode-courier-management-system-ed...", "creation_timestamp": "2026-07-19T10:30:26.793743Z"}, {"uuid": "00f93a01-fd01-4165-9241-cf4f75e4f867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16228", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116946529537967968", "content": "CVE-2026-16228: MEDIUM-severity SQL injection in SourceCodester Class and Exam Timetabling System 1.0 (/edit_schoolyr.php). Remote, unauthenticated exploitation possible. No patch \u2014 apply input validation & parameterized queries. https://radar.offseq.com/threat/cve-2026-16228-sql-injection-in-sourcecodester-class-and-exam-timetabling-system-032a2d253dffeeae #OffSeq #SQLInjection #AppSec", "creation_timestamp": "2026-07-19T12:00:26.465971Z"}, {"uuid": "686052dd-fda2-4ba3-859e-0225f581c38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16228", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r", "content": "SourceCodester Class and Exam Timetabling System 1.0 has a MEDIUM-severity SQL injection (CVE-2026-16228). No patch yet \u2014 use input validation & parameterized queries to reduce risk. https://radar.offseq.com/threat/cve-2026-16228-sql-injection-in-sourcecodester-class-and-exam-timetabling-system-0...", "creation_timestamp": "2026-07-19T12:00:28.131404Z"}, {"uuid": "86aa68c4-796b-4647-8559-a81f95b34d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyrbgxyyu2q", "content": "CVE-2026-16226 - SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload\nCVE ID : CVE-2026-16226\n \n Published : July 19, 2026, 9:17 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A weakness has been identified in SourceCodester Pizzafy E...", "creation_timestamp": "2026-07-19T12:19:57.684410Z"}, {"uuid": "839204ee-149b-4079-9cf5-ec37e21b1201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyrkfjeyx2i", "content": "CVE-2026-16229 - itsourcecode Courier Management System index.php cross site scripting\nCVE ID : CVE-2026-16229\n \n Published : July 19, 2026, 10:16 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected...", "creation_timestamp": "2026-07-19T12:24:58.427145Z"}, {"uuid": "7183a937-be19-4679-b339-fbff30754290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyrte35pl2b", "content": "CVE-2026-16224 - jxxghp MoviePilot Application API improper authorization\nCVE ID : CVE-2026-16224\n \n Published : July 19, 2026, 9:17 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unk...", "creation_timestamp": "2026-07-19T12:29:58.695049Z"}, {"uuid": "71892714-72ec-4775-a2b0-e2af622da3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqys4cjrqo2b", "content": "CVE-2026-16225 - davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write\nCVE ID : CVE-2026-16225\n \n Published : July 19, 2026, 9:17 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted...", "creation_timestamp": "2026-07-19T12:34:59.111055Z"}, {"uuid": "8cf7544a-f871-491f-91ff-e13be34ec409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqysfay3y52j", "content": "CVE-2026-16228 - SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection\nCVE ID : CVE-2026-16228\n \n Published : July 19, 2026, 10:16 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : A vulnerability was detected in SourceCodester Class and Exam Timetablin...", "creation_timestamp": "2026-07-19T12:39:59.461294Z"}, {"uuid": "e97a5bf1-55c2-4ec5-bac3-b40a6b137278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyso7g4eb2a", "content": "CVE-2026-16227 - SourceCodester Class and Exam Timetabling System edit_subject.php sql injection\nCVE ID : CVE-2026-16227\n \n Published : July 19, 2026, 10:16 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : A security vulnerability has been detected in SourceCodester Class and Ex...", "creation_timestamp": "2026-07-19T12:44:59.805195Z"}, {"uuid": "855ee2df-d41a-4c76-9569-008ed2592bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16227", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116946883494385034", "content": "CVE-2026-16227: SQL injection in SourceCodester Class and Exam Timetabling System v1.0 (/edit_subject.php, ID param). MEDIUM severity (CVSS 6.9). No patch yet \u2014 use input validation & parameterized queries. https://radar.offseq.com/threat/cve-2026-16227-sql-injection-in-sourcecodester-class-and-exam-timetabling-system-bf78ed5f513695ba #OffSeq #SQLInjection #AppSec #Vuln", "creation_timestamp": "2026-07-19T13:30:28.058509Z"}, {"uuid": "b9914378-4126-45d8-a41b-370ff84cc023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16227", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqyv7k2qzj2r", "content": "SQL injection in SourceCodester Class and Exam Timetabling System v1.0 (CVE-2026-16227). MEDIUM severity \u2014 no patch yet. Apply input validation and parameterized queries to reduce risk. https://radar.offseq.com/threat/cve-2026-16227-sql-injection-in-sourcecodester-class-and-exam-timetabling-syste...", "creation_timestamp": "2026-07-19T13:30:29.281122Z"}, {"uuid": "1b3e8205-11cc-41c4-933a-a2cfd16d104d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16221", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mqyy3s7vts2h", "content": "\ud83d\udea8 High-severity security fix in fast-uri@4.1.1 (also 3.1.4 and 2.4.3 backports) just released!\n\nPatches CVE-2026-16221, host confusion via literal backslash authority delimiter.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-19T14:22:06.453894Z"}, {"uuid": "b758f6cf-698c-495f-96c7-9797d7049ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16221", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mqz5seeo3a2p", "content": "fast-uri\u306e2.3.1\uff5e4.1.0\u3067\u3001\u30d0\u30c3\u30af\u30b9\u30e9\u30c3\u30b7\u30e5\u304c\u30db\u30b9\u30c8\u533a\u5207\u308a\u6587\u5b57\u3068\u3057\u3066\u6271\u308f\u308c\u305a\u3001Node.js\u306eURL\u30d1\u30fc\u30b5\u30fc\u3068\u7570\u306a\u308b\u30db\u30b9\u30c8\u3092\u62bd\u51fa\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u610f\u56f3\u3057\u306a\u3044\u5b9b\u5148\u306b\u8a98\u5c0e\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-16221 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-19T16:04:10.448112Z"}, {"uuid": "ccc96c76-977c-4f6d-8c5c-a4058abcd7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16221", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lio7ut2d", "content": "\ud83d\udfe0 CVE-2026-16221 - High (7.5)\n\nImpact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16221/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T16:00:20.524179Z"}]}