CVE-2026-6150
published 2026-04-13CVE-2026-6150: A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of…
PriorityP423medium4.3CVSS 3.1
AVNACLPRNUIRSUCNILAN
EPSS
0.26%
17.8th percentile
A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument serviceId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| code-projects | simple_laundry_system | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvdv4.02.1LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8f84-x6pj-qm67: A vulnerability has been found in code-projects Simple Laundry System 1
ghsa_unreviewed·2026-04-13
CVE-2026-6150 [MEDIUM] CWE-79 GHSA-8f84-x6pj-qm67: A vulnerability has been found in code-projects Simple Laundry System 1
A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument serviceId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
VulDB
code-projects Simple Laundry System 1.0 /checkupdatestatus.php serviceId cross site scripting
vuldb·2026-04-12·CVSS 5.3
CVE-2026-6150 [MEDIUM] code-projects Simple Laundry System 1.0 /checkupdatestatus.php serviceId cross site scripting
A vulnerability, which was classified as problematic, has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument serviceId leads to cross site scripting.
This vulnerability is traded as CVE-2026-6150. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
Red Hat
kernel: bonding: annotate data-races around slave->last_rx
vendor_redhat·2026-02-18·CVSS 4.7
CVE-2026-23212 [MEDIUM] CWE-367 kernel: bonding: annotate data-races around slave->last_rx
kernel: bonding: annotate data-races around slave->last_rx
In the Linux kernel, the following vulnerability has been resolved:
bonding: annotate data-races around slave->last_rx
slave->last_rx and slave->target_last_arp_rx[...] can be read and written
locklessly. Add READ_ONCE() and WRITE_ONCE() annotations.
syzbot reported:
BUG: KCSAN: data-race in bond_rcv_validate / bond_rcv_validate
write to 0xffff888149f0d428 of 8 bytes by interrupt on cpu 1:
bond_rcv_validate+0x202/0x7a0 drivers/net/bonding/bond_main.c:3335
bond_handle_frame+0xde/0x5e0 drivers/net/bonding/bond_main.c:1533
__netif_receive_skb_core+0x5b1/0x1950 net/core/dev.c:6039
__netif_receive_skb_one_core net/core/dev.c:6150 [inline]
__netif_receive_skb+0x59/0x270 net/core/dev.c:6265
netif_receive_skb_internal net/core/dev.c:6351
No detection rules found.
No public exploits indexed.
2026-04-13
Published