<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-840</title><description>Every new CWE-840 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116461: Omega Solution Restro POS sale-invoice logic error</title><link>https://agentprime.io/advisories/CVE-2026-116461/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116461/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 17:45:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-106070: node: A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong…</title><link>https://agentprime.io/advisories/CVE-2026-106070/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-106070/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 16:15:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-115248: subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-115248/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115248/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 13:30:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-112028: light0011 cms Vote VoteController.class.php logic error</title><link>https://agentprime.io/advisories/CVE-2026-112028/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112028/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Oct 2026 22:45:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-109406: macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error</title><link>https://agentprime.io/advisories/CVE-2026-109406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-109406/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 12:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108789: deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-108789/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108789/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Oct 2026 02:15:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108784: macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error</title><link>https://agentprime.io/advisories/CVE-2026-108784/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108784/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Oct 2026 01:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105573: newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error</title><link>https://agentprime.io/advisories/CVE-2026-105573/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105573/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 02:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77166: The emoji field in the page emoji update endpoint does not properly validate user input.</title><link>https://agentprime.io/advisories/CVE-2026-77166/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77166/</guid><description>CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Sep 2026 15:25:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82982: Nextcloud Approval: The Approval app&apos;s approve/reject endpoint is meant to require the file&apos;s current etag as…</title><link>https://agentprime.io/advisories/CVE-2026-82982/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82982/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 01:26:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85030: HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error</title><link>https://agentprime.io/advisories/CVE-2026-85030/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85030/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Sep 2026 01:30:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82423: macrozheng mall Payment Status Endpoint paySuccess behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-82423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82423/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Aug 2026 22:15:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79406: macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error</title><link>https://agentprime.io/advisories/CVE-2026-79406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79406/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Aug 2026 13:00:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75081: Webkul Bagisto store behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-75081/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75081/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 23:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19993: Webkul Bagisto RMA State Validation update-status behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-19993/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19993/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 06:00:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19213: WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-19213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19213/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 17:30:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19208: WonderTrader TraderDD.cpp queryTrades behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-19208/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19208/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 15:00:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19037: WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2026-19037/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19037/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 12:30:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58558: Permission control vulnerability in the file system.</title><link>https://agentprime.io/advisories/CVE-2026-58558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58558/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jul 2026 12:40:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13571: SourceCodester Simple Food Ordering System cart.php logic error</title><link>https://agentprime.io/advisories/CVE-2026-13571/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13571/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 13:30:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41973: Permission control vulnerability in calls.</title><link>https://agentprime.io/advisories/CVE-2026-41973/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41973/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 06:56:02 GMT</pubDate><category>CVE</category></item><item><title>songquanpeng one-api has an issue that results in business logic errors</title><link>https://agentprime.io/advisories/GHSA-7v3v-cp44-vc8m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7v3v-cp44-vc8m/</guid><description>github.com/songquanpeng/one-api &gt;=0.1.6-alpha, &lt;=0.6.11-preview.7, no fixed version yet. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Jun 2026 00:30:25 GMT</pubDate><category>Go</category><category>github.com/songquanpeng/one-api</category></item><item><title>CVE-2026-8738: Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error</title><link>https://agentprime.io/advisories/CVE-2026-8738/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8738/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 17 May 2026 07:30:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41968: Permission control vulnerability in the manufacturability design module.</title><link>https://agentprime.io/advisories/CVE-2026-41968/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41968/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 09:29:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41967: Permission control vulnerability in the manufacturability design module.</title><link>https://agentprime.io/advisories/CVE-2026-41967/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41967/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 09:27:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41966: Permission control vulnerability in the smart sensing service.</title><link>https://agentprime.io/advisories/CVE-2026-41966/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41966/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 09:26:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41961: Permission control vulnerability in contacts.</title><link>https://agentprime.io/advisories/CVE-2026-41961/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41961/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 09:22:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41971: Permission control vulnerability in the security control module.</title><link>https://agentprime.io/advisories/CVE-2026-41971/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41971/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 09:18:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41965: Use-After-Free (UAF) vulnerability in the web.</title><link>https://agentprime.io/advisories/CVE-2026-41965/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41965/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 09:06:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1322: Business Logic Errors in GitLab</title><link>https://agentprime.io/advisories/CVE-2026-1322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1322/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 May 2026 05:36:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1274: IBM Guardium Data Protection is affected by multiple vulnerabilities</title><link>https://agentprime.io/advisories/CVE-2026-1274/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1274/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 23:30:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5812: SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error</title><link>https://agentprime.io/advisories/CVE-2026-5812/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5812/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 22:30:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5811: SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error</title><link>https://agentprime.io/advisories/CVE-2026-5811/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5811/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 22:15:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-4547: mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error</title><link>https://agentprime.io/advisories/CVE-2026-4547/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4547/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 22 Mar 2026 13:02:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28550: Race condition vulnerability in the security control module.</title><link>https://agentprime.io/advisories/CVE-2026-28550/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28550/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Mar 2026 07:41:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1600: Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error</title><link>https://agentprime.io/advisories/CVE-2026-1600/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1600/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Jan 2026 18:02:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1599: Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error</title><link>https://agentprime.io/advisories/CVE-2026-1599/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1599/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Jan 2026 17:32:06 GMT</pubDate><category>CVE</category></item><item><title>Keycloak services allows the issuance of access and refresh tokens for disabled users</title><link>https://agentprime.io/advisories/GHSA-wv3h-x6c4-r867/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wv3h-x6c4-r867/</guid><description>org.keycloak:keycloak-services &gt;=26.5.0, &lt;26.5.2 || &lt;26.4.9, fixed in 26.5.2, 26.4.9. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Jan 2026 09:31:30 GMT</pubDate><category>Maven</category><category>org.keycloak:keycloak-services</category></item><item><title>CVE-2025-13239: Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2025-13239/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13239/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 16 Nov 2025 06:02:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6601: Business Logic Errors in GitLab</title><link>https://agentprime.io/advisories/CVE-2025-6601/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6601/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Oct 2025 00:06:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-58289: Vulnerability of improper exception handling in the print module.</title><link>https://agentprime.io/advisories/CVE-2025-58289/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58289/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Oct 2025 09:18:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10868: Business Logic Errors in GitLab</title><link>https://agentprime.io/advisories/CVE-2025-10868/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10868/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Sep 2025 09:10:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-8991: linlinjava litemall Business Logic express logic error</title><link>https://agentprime.io/advisories/CVE-2025-8991/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8991/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 Aug 2025 00:32:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54611: EXTRA_REFERRER resource read vulnerability in the Gallery module.</title><link>https://agentprime.io/advisories/CVE-2025-54611/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54611/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Aug 2025 01:18:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54606: Status verification vulnerability in the lock screen module.</title><link>https://agentprime.io/advisories/CVE-2025-54606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54606/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Aug 2025 01:09:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2938: Business Logic Errors in GitLab</title><link>https://agentprime.io/advisories/CVE-2025-2938/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2938/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Jun 2025 05:31:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4037: code-projects ATM Banking moneyWithdraw logic error</title><link>https://agentprime.io/advisories/CVE-2025-4037/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4037/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Apr 2025 20:31:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-1908: Business Logic Errors in GitLab</title><link>https://agentprime.io/advisories/CVE-2025-1908/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-1908/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Apr 2025 07:30:51 GMT</pubDate><category>CVE</category></item><item><title>TorchServe script references S3 bucket without ensuring ownership or confirming accessibility</title><link>https://agentprime.io/advisories/GHSA-xx7c-j7h3-vjcq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xx7c-j7h3-vjcq/</guid><description>torchserve &lt;=0.11.0, no fixed version yet. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 12:32:45 GMT</pubDate><category>PyPI</category><category>torchserve</category></item><item><title>CVE-2025-2323: 274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow</title><link>https://agentprime.io/advisories/CVE-2025-2323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2323/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Mar 2025 17:00:39 GMT</pubDate><category>CVE</category></item></channel></rss>