mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Sun Sep 6 12:01:06 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
6fa5b4be24
commit
1f7e926b0d
61 files changed
+794
-18
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2002-0400](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0400)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2002-105.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2013-1315](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1315)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18543
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) b
|
||||
|
||||
#### Reference
|
||||
- https://github.com/libgd/libgd/issues/248
|
||||
- https://github.com/libgd/libgd/pull/251
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2022-35499](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35499)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/PN-Tester/CVE-2022-35499
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2022-48322](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48322)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2023-39959](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39959)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a DAV request which reveals whether a calendar or an address book with the given identifier exists for the victim. Nextcloud Server versions 25.0.9, 26.0.4, and 27.0.1 and Nextcloud Enterprise Server versions 25.0.9, 26.0.4, and 27.0.1 contain a patch for this issue. No known workarounds are available.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/nextcloud/server/pull/38747
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -18,6 +18,7 @@ Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and lib
|
||||
- https://news.ycombinator.com/item?id=37478403
|
||||
- https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/
|
||||
- https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/
|
||||
- https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863
|
||||
|
||||
#### Github
|
||||
- https://github.com/07m0i/07m0i.github.io
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-1244](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1244)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-23248](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23248)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-23255](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23255)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm b
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-23272](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23272)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-23273](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23273)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-23274](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23274)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-23275](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23275)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful exploit of this vulnerability may lead to denial of service and information disclosure.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -10,6 +10,7 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2169
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump wher
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2155
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm b
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2172
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-23346](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23346)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
### [CVE-2025-2842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2842)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-49794](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-49796](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2025-5278](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -24,7 +24,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
### [CVE-2025-5914](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5914)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -28,7 +28,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
### [CVE-2025-7195](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7195)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
### [CVE-2025-7425](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7425)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -30,7 +30,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-11633](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11633)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: Critical)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/516963272
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-13159](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13159)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user who can activate , those are activated as well.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/3eea9204-d9ea-474e-a299-31d1aa0385e0/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-13785](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13785)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/517021684
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-13794](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13794)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/513893425
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The aff
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/xpp3901/CVE_APPLY/blob/main/V-S003_SonicAgent_pullFile_CmdInjection_RCE/poc_pullfile_rce.py
|
||||
- https://github.com/xpp3901/CVE_APPLY/tree/main/V-S003_SonicAgent_pullFile_CmdInjection_RCE
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-1735](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1735)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This manipulation causes command injection. It is feasible to perform the attack on the physical device. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/1Uf46ihr8UmeXsFfkcvAeOtF1TkvGjozy/view?usp=sharing
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-18480](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18480)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with a subscriber-level account to change another user's email address, including an administrator's, and take over that account via a password reset. It further allows an attacker-controlled customer record to be associated with an arbitrary user, and discloses customer identifiers and email addresses to any authenticated user, which together make the takeover reachable from a subscriber-level account alone.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/88839ada-9c59-44cb-96e6-3548e5a59b9f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
### [CVE-2026-4878](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4878)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -27,7 +27,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
%20Race%20Condition&color=brightgreen)
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-5546](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5546)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Campcodes Complete Online Learning Management System 1.0. This impacts the function add_lesson of the file /application/models/Crud_model.php. This manipulation causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/submit/782291
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-5547](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5547)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/vuln/355311/cti
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-67276](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-67276)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can supply a key with exponent one, forge a valid signature, and open an SSH command channel as the target user without the private key.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-67277](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-67277)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-67278](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-67278)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use the root’s public certificate - without its private key - to forge a trusted intermediate and issue certificates for arbitrary hostnames, enabling TLS server impersonation.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-67279](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-67279)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated creation, overwrite, and reconstruction of files in the RouterOS managed file namespace, including support files containing configuration and diagnostic data.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-67281](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-67281)
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences this pointer with sufficient rights, then supply parent-directory components in an encrypted URI to escape the WebFig file namespace and disclose root-owned files, including configuration stores containing credentials.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-75793](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-75793)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d1c2ea43-2643-4cdf-8dfe-e11109266f51/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-78038](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78038)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban allows a user whose input reaches the :args option of AshOban.build_trigger/3 to retarget an update or destroy trigger at another record, including across tenants.build_trigger/3 builds the trusted job arguments with atom keys (:primary_key, :tenant, :action_arguments) and merges the caller's :args underneath so the trusted values win on collision. Because Oban job arguments round-trip through JSON, the caller's keys arrive as strings, so Map.merge sees no collision and both keys survive. When the job is persisted the JSON object is de-duplicated keeping the last (string) key, and the worker reads the caller's value. The documentation describes :args as unable to affect the action, so an application that forwards user input into it for uniqueness scoping is exposed to authorization bypass and tenant isolation breaks.This issue affects ash_oban: from 0.2.5 before 0.8.14.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ash-project/ash_oban/security/advisories/GHSA-gj9p-x393-rf9h
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-78228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78228)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memory, denying service.The generated worker's atomic handle_error/4 runs the trigger's on_error action on a job's final attempt inside a rescue that, when the action itself raises, calls handle_error/4 again with the same job. The job's attempt still equals max_attempts, so it re-enters the same clause and re-runs the failing action, with no exit. Any deterministic on_error failure (a data-layer outage, a misconfigured action, or a record the action rejects) loops forever; because the recursive call is not in tail position, each iteration retains a formatted stacktrace and the process heap grows without bound while the failing statement is re-issued against the data layer until the runtime kills the worker.This issue affects ash_oban: from 0.8.0-rc.1 before 0.8.14.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ash-project/ash_oban/security/advisories/GHSA-94p7-498r-mrhp
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-78410](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
%20Race%20Condition&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-78693](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78693)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote client to read internal field names that an application configured its error_handler to redact.In AshGraphql.Errors, each error is passed to the configured error_handler and the returned map is merged with the pre-handler path via Map.put_new(handled, :path, path). Because put_new defers to the handler only when the handler itself set :path, a sanitizing handler that returns a fresh map or deletes :path has that decision reverted. The re-injected path comes from build_error_path/5, which falls back to raw internal Ash attribute and argument names when no field_names mapping is configured. A validation failure on a non-exposed or nested field therefore returns internal names in the GraphQL error path, defeating the application's redaction.This issue affects ash_graphql: from 1.9.0 before 1.11.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ash-project/ash_graphql/security/advisories/GHSA-ppr2-g9h8-w7qp
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-78849](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78849)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions <= 26.03 pfSense CE software versions <= 2.8.1 allows a remote attacker to execute arbitrary code via the captive_portal_status.widget.php file
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://redmine.pfsense.org/issues/16773
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-78970](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78970)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints (including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds) to retrieve sensitive information of all users, including real names, phone numbers, email addresses, employee numbers, and role definitions, due to missing fine-grained permission checks and incomplete data desensitization.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/jeecgboot/JeecgBoot/issues/9670
|
||||
- https://github.com/jeecgboot/JeecgBoot/issues/9674
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-79619](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79619)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://seclists.org/fulldisclosure/2026/Aug/40
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-82728](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82728)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service.Two HTTP/1 response-parser states accumulate server data without any cap. In lib/mint/http1.ex, decode_status_line/4 stores the unconsumed data in conn.buffer when the status line is incomplete, and decode_body/5 does the same for an unterminated chunk-extension line. Both wait for a CRLF the server never has to send, and conn.buffer is prepended to every subsequent socket message. The :max_header_list_size budget is wired only into decode_headers/5 and decode_trailer_headers/4, so neither of these states is covered by it. A malicious server, or one reached through an attacker-controlled redirect or a fetched URL, streams bytes indefinitely until the BEAM node is killed by the operating system out-of-memory handler. The chunk-extension variant is reached after a valid status line and a complete, valid header section, so an intermediary inspecting only headers sees an ordinary 200 response.This issue affects mint: from 0.1.0 before 1.10.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/elixir-mint/mint/security/advisories/GHSA-g83f-2j6r-q6m4
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-82752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82752)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint should bound it.Ash measures string length with Elixir's String.length/1, which counts Unicode graphemes, in the max_length and min_length constraints of Ash.Type.String (apply_constraints/2 in lib/ash/type/string.ex), in Ash.Resource.Validation.StringLength, and in the string_length expression function. A grapheme carries an unbounded number of combining marks, so a base character followed by a million combining acute accents is one grapheme and megabytes of data, and satisfies max_length: 2. Where the data layer imposes no independent limit (ETS, Mnesia, or a Postgres text column) the whole value is persisted, so an attacker can write an entire request body into an attribute declared with a small maximum and grow storage without bound.The counting unit also disagrees with the storage layer, which counts codepoints rather than graphemes, so a value accepted by the constraint can still be rejected or truncated by the column. A Postgres varchar(n) column bounds the value itself and is not exposed.This issue affects ash: from 0.10.0 before 3.33.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ash-project/ash/security/advisories/GHSA-cwjv-574p-59f6
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84028](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84028)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribute before outputting it in an HTML attribute, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected page.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/6abd5d49-af3a-4515-ba33-57b56a9fba4e/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84219](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84219)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a page that displays it, including an administrator, and on every page of the site when its header or footer is built to show comments.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/e95bd1e3-6f61-423f-add6-519e1ca7bf66/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-85038](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85038)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to restricted B2B customer groups and to skip the manual account-approval workflow during self-registration.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a397aeaf-7629-45dd-a2ee-3e904cc19550/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-86060](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86060)
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
RouterOS contains an argument-handling flaw in the SSH loginpath involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-8969](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8969)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=2031123
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -328,6 +328,7 @@ CVE-2002-0391 - http://www.linuxsecurity.com/advisories/other_advisory-2399.html
|
||||
CVE-2002-0391 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9
|
||||
CVE-2002-0392 - http://www.linuxsecurity.com/advisories/other_advisory-2137.html
|
||||
CVE-2002-0399 - http://www.linuxsecurity.com/advisories/other_advisory-2400.html
|
||||
CVE-2002-0400 - http://www.redhat.com/support/errata/RHSA-2002-105.html
|
||||
CVE-2002-0440 - http://seclists.org/lists/bugtraq/2002/Mar/0162.html
|
||||
CVE-2002-0470 - http://seclists.org/bugtraq/2002/Mar/0263.html
|
||||
CVE-2002-0471 - http://seclists.org/bugtraq/2002/Mar/0263.html
|
||||
@@ -29409,6 +29410,7 @@ CVE-2013-1306 - http://packetstormsecurity.com/files/140092/Microsoft-Internet-E
|
||||
CVE-2013-1306 - https://www.exploit-db.com/exploits/40894/
|
||||
CVE-2013-1309 - http://packetstormsecurity.com/files/140094/Microsoft-Internet-Explorer-MSHTML-CDispNode-InsertSiblingNode-Use-After-Free.html
|
||||
CVE-2013-1309 - https://www.exploit-db.com/exploits/40893/
|
||||
CVE-2013-1315 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18543
|
||||
CVE-2013-1340 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
|
||||
CVE-2013-1345 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
|
||||
CVE-2013-1347 - http://www.exploit-db.com/exploits/25294
|
||||
@@ -50147,6 +50149,7 @@ CVE-2016-6897 - https://www.exploit-db.com/exploits/40288/
|
||||
CVE-2016-6902 - https://github.com/ghantoos/lshell/issues/147
|
||||
CVE-2016-6903 - https://github.com/ghantoos/lshell/commit/e72dfcd1f258193f9aaea3591ecbdaed207661a0
|
||||
CVE-2016-6905 - https://github.com/libgd/libgd/issues/248
|
||||
CVE-2016-6905 - https://github.com/libgd/libgd/pull/251
|
||||
CVE-2016-6906 - https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md
|
||||
CVE-2016-6909 - http://fortiguard.com/advisory/FG-IR-16-023
|
||||
CVE-2016-6909 - http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html
|
||||
@@ -104923,6 +104926,7 @@ CVE-2022-3548 - https://vuldb.com/?id.211048
|
||||
CVE-2022-3549 - https://github.com/Ramansh123454/POCs/blob/main/CSMS_RCE
|
||||
CVE-2022-3549 - https://vuldb.com/?id.211049
|
||||
CVE-2022-35493 - https://github.com/Keyvanhardani/Exploit-eShop-Multipurpose-Ecommerce-Store-Website-3.0.4-Cross-Site-Scripting-XSS/blob/main/README.md
|
||||
CVE-2022-35499 - https://github.com/PN-Tester/CVE-2022-35499
|
||||
CVE-2022-35503 - https://osm.etsi.org/
|
||||
CVE-2022-35503 - https://osm.etsi.org/news-events/blog/83-cve-2022-35503-disclosure
|
||||
CVE-2022-35505 - https://github.com/h3xduck/TripleCross/issues/40
|
||||
@@ -108962,6 +108966,7 @@ CVE-2022-48308 - https://github.com/palantir/security-bulletins/blob/main/PLTRSE
|
||||
CVE-2022-4831 - https://wpscan.com/vulnerability/872fc8e6-4035-4e5a-9f30-16c482c48c7c
|
||||
CVE-2022-48311 - https://github.com/swzhouu/CVE-2022-48311
|
||||
CVE-2022-4832 - https://wpscan.com/vulnerability/735a33e1-63fb-4f17-812c-3e68709b5c2c
|
||||
CVE-2022-48322 - https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155
|
||||
CVE-2022-48323 - https://asec.ahnlab.com/en/47088/
|
||||
CVE-2022-4833 - https://wpscan.com/vulnerability/35ba38cf-4f23-4344-8de3-cf3004ebf84c
|
||||
CVE-2022-48331 - https://cyberintel.es/cve/CVE-2022-48331_Buffer_Overflow_in_Widevine_drm_save_keys_0x69b0/
|
||||
@@ -115706,6 +115711,7 @@ CVE-2023-39948 - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x
|
||||
CVE-2023-39949 - https://github.com/eProsima/Fast-DDS/issues/3236
|
||||
CVE-2023-39949 - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cg
|
||||
CVE-2023-39951 - https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-hghr-r469-gfq6
|
||||
CVE-2023-39959 - https://github.com/nextcloud/server/pull/38747
|
||||
CVE-2023-39964 - https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-pv7q-v9mv-9mh5
|
||||
CVE-2023-39965 - https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-85cf-gj29-f555
|
||||
CVE-2023-39966 - https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-hf7j-xj3w-87g4
|
||||
@@ -117532,6 +117538,7 @@ CVE-2023-4863 - https://github.com/webmproject/libwebp/commit/902bc9190331343b20
|
||||
CVE-2023-4863 - https://news.ycombinator.com/item?id=37478403
|
||||
CVE-2023-4863 - https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/
|
||||
CVE-2023-4863 - https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/
|
||||
CVE-2023-4863 - https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863
|
||||
CVE-2023-4864 - https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/
|
||||
CVE-2023-4864 - https://vuldb.com/?id.239349
|
||||
CVE-2023-4865 - https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/
|
||||
@@ -135095,13 +135102,25 @@ CVE-2025-23220 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GH
|
||||
CVE-2025-23221 - https://github.com/dahlia/fedify/security/advisories/GHSA-c59p-wq67-24wx
|
||||
CVE-2025-2323 - https://www.cnblogs.com/aibot/p/18732309
|
||||
CVE-2025-23247 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151
|
||||
CVE-2025-23248 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23255 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23266 - https://kidbomb.github.io/posts/nvidia-container-escape-cve-2025-23266-part-2/
|
||||
CVE-2025-23266 - https://kidbomb.github.io/posts/nvidia-container-escape-cve-2025-23266/
|
||||
CVE-2025-23266 - https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape
|
||||
CVE-2025-23271 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23272 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23273 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23274 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23275 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23308 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23338 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23338 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2169
|
||||
CVE-2025-23339 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23339 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2155
|
||||
CVE-2025-2334 - https://www.cnblogs.com/aibot/p/18732182
|
||||
CVE-2025-23340 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23340 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2172
|
||||
CVE-2025-23346 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
|
||||
CVE-2025-23359 - https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html
|
||||
CVE-2025-2336 - https://www.herodevs.com/vulnerability-directory/cve-2025-2336
|
||||
CVE-2025-2336 - https://www.herodevs.com/vulnerability-directory/cve-2025-2336?angularjs-nes
|
||||
@@ -145780,6 +145799,7 @@ CVE-2026-1161 - https://github.com/TheLiao233/cve/issues/1
|
||||
CVE-2026-11611 - https://redhat.atlassian.net/browse/PSIRTSUPT-7600
|
||||
CVE-2026-1162 - https://vuldb.com/?id.341756
|
||||
CVE-2026-11624 - https://github.com/googleapis/mcp-toolbox/issues/3113
|
||||
CVE-2026-11633 - https://issues.chromium.org/issues/516963272
|
||||
CVE-2026-11635 - https://issues.chromium.org/issues/516987814
|
||||
CVE-2026-11636 - https://issues.chromium.org/issues/517023053
|
||||
CVE-2026-11637 - https://issues.chromium.org/issues/517040438
|
||||
@@ -146098,6 +146118,7 @@ CVE-2026-13154 - https://wpscan.com/vulnerability/ab60ebee-c8b5-4bba-8138-2083ca
|
||||
CVE-2026-13156 - https://wpscan.com/vulnerability/595e653d-0904-43cf-8e61-d684599de11b/
|
||||
CVE-2026-13157 - https://wpscan.com/vulnerability/5d6a6a8e-c224-4034-8ed5-2d63f37f9479/
|
||||
CVE-2026-13158 - https://wpscan.com/vulnerability/f101071f-402a-40a2-bbdb-666512cd4049/
|
||||
CVE-2026-13159 - https://wpscan.com/vulnerability/3eea9204-d9ea-474e-a299-31d1aa0385e0/
|
||||
CVE-2026-13168 - https://wpscan.com/vulnerability/2c5a4930-4676-4ae0-aeb4-1c99d5069361/
|
||||
CVE-2026-13169 - https://wpscan.com/vulnerability/cf2b1152-7190-467b-a860-1f7bd806575d/
|
||||
CVE-2026-13170 - https://wpscan.com/vulnerability/c7bdaa80-a446-4c72-be79-bfc5022a4eca/
|
||||
@@ -146264,7 +146285,9 @@ CVE-2026-13779 - https://issues.chromium.org/issues/513222854
|
||||
CVE-2026-13780 - https://issues.chromium.org/issues/514769383
|
||||
CVE-2026-13781 - https://issues.chromium.org/issues/516457532
|
||||
CVE-2026-13784 - https://issues.chromium.org/issues/516962715
|
||||
CVE-2026-13785 - https://issues.chromium.org/issues/517021684
|
||||
CVE-2026-13790 - https://issues.chromium.org/issues/457771782
|
||||
CVE-2026-13794 - https://issues.chromium.org/issues/513893425
|
||||
CVE-2026-13800 - https://issues.chromium.org/issues/500108770
|
||||
CVE-2026-13802 - https://issues.chromium.org/issues/501623322
|
||||
CVE-2026-13803 - https://issues.chromium.org/issues/501669642
|
||||
@@ -146841,6 +146864,7 @@ CVE-2026-15481 - https://github.com/glkfc/IoT-Vulnerability/blob/main/TRENDnet/T
|
||||
CVE-2026-1549 - https://github.com/jishenghua/jshERP/issues/146
|
||||
CVE-2026-1549 - https://github.com/jishenghua/jshERP/issues/146#issue-3817997461
|
||||
CVE-2026-15494 - https://github.com/MichaelZhuang521/cve/issues/4
|
||||
CVE-2026-15495 - https://github.com/xpp3901/CVE_APPLY/blob/main/V-S003_SonicAgent_pullFile_CmdInjection_RCE/poc_pullfile_rce.py
|
||||
CVE-2026-15495 - https://github.com/xpp3901/CVE_APPLY/tree/main/V-S003_SonicAgent_pullFile_CmdInjection_RCE
|
||||
CVE-2026-15496 - https://github.com/xpp3901/CVE_APPLY/tree/main/V-S002_SonicCloudPlatform_Groovy_Unsandboxed_RCE
|
||||
CVE-2026-15497 - https://github.com/xpp3901/CVE_APPLY/blob/main/V-S001_SonicCloudPlatform_Unauth_ExchangeSend
|
||||
@@ -147298,6 +147322,7 @@ CVE-2026-1734 - https://github.com/foeCat/CVE/blob/main/CRMEB/crontab_unauthoriz
|
||||
CVE-2026-1734 - https://github.com/foeCat/CVE/blob/main/CRMEB/crontab_unauthorized_access.md#proof-of-concept
|
||||
CVE-2026-17347 - https://github.com/pgadmin-org/pgadmin4/commit/e7a85767314e7b0fe0b35fe80b9c1af38f48dff6
|
||||
CVE-2026-17347 - https://github.com/pgadmin-org/pgadmin4/commit/ea7e798aac27174d2bacee1d6e136bed76a95e23
|
||||
CVE-2026-1735 - https://drive.google.com/file/d/1Uf46ihr8UmeXsFfkcvAeOtF1TkvGjozy/view?usp=sharing
|
||||
CVE-2026-17351 - https://github.com/pgadmin-org/pgadmin4/commit/bf4792444446f0e7ab721d23cbd6bfe6afaa7a8b
|
||||
CVE-2026-1736 - https://github.com/open5gs/open5gs/issues/4270
|
||||
CVE-2026-1736 - https://github.com/open5gs/open5gs/issues/4270#event-21968624624
|
||||
@@ -147407,6 +147432,7 @@ CVE-2026-18469 - https://wpscan.com/vulnerability/be74144a-b45b-469f-8631-7fdca6
|
||||
CVE-2026-18470 - https://wpscan.com/vulnerability/589b7661-4a0d-4041-8c29-2819d8b1e402/
|
||||
CVE-2026-18473 - https://wpscan.com/vulnerability/a5596bc1-5ae9-4141-b027-85a0b91ecdab/
|
||||
CVE-2026-18474 - https://wpscan.com/vulnerability/cadb99e3-bb6a-4d44-8ef0-eff524d31b29/
|
||||
CVE-2026-18480 - https://wpscan.com/vulnerability/88839ada-9c59-44cb-96e6-3548e5a59b9f/
|
||||
CVE-2026-18482 - https://novice-22.com/posts/neo-mjs/
|
||||
CVE-2026-18497 - https://github.com/nothings/stb/issues/1905
|
||||
CVE-2026-18526 - https://fluidattacks.com/advisories/greeicy
|
||||
@@ -154088,9 +154114,11 @@ CVE-2026-55439 - https://github.com/halo-dev/halo/issues/10064
|
||||
CVE-2026-55441 - https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq
|
||||
CVE-2026-55446 - https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9
|
||||
CVE-2026-55450 - https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735
|
||||
CVE-2026-5546 - https://vuldb.com/submit/782291
|
||||
CVE-2026-55460 - https://github.com/grokability/snipe-it/security/advisories/GHSA-vgx7-c78r-69w9
|
||||
CVE-2026-55462 - https://github.com/grokability/snipe-it/security/advisories/GHSA-fc33-6w3q-538h
|
||||
CVE-2026-55466 - https://github.com/grokability/snipe-it/security/advisories/GHSA-jhph-5q74-pmfx
|
||||
CVE-2026-5547 - https://vuldb.com/vuln/355311/cti
|
||||
CVE-2026-55470 - https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-fxj4-p9xp-37v5
|
||||
CVE-2026-55471 - https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-2f55-g35j-5jmf
|
||||
CVE-2026-55477 - https://github.com/MHSanaei/3x-ui/security/advisories/GHSA-jm48-m3rr-9hgg
|
||||
@@ -155435,6 +155463,11 @@ CVE-2026-67208 - https://github.com/somta/Juggle/issues/86
|
||||
CVE-2026-67215 - https://joshua.hu/cjson-json-parser-cve-vulnerabilities
|
||||
CVE-2026-67216 - https://joshua.hu/cjson-json-parser-cve-vulnerabilities
|
||||
CVE-2026-67217 - https://joshua.hu/cjson-json-parser-cve-vulnerabilities
|
||||
CVE-2026-67276 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
CVE-2026-67277 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
CVE-2026-67278 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
CVE-2026-67279 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
CVE-2026-67281 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
CVE-2026-67305 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cj9v-h4hq-29jr
|
||||
CVE-2026-67306 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3
|
||||
CVE-2026-67308 - https://github.com/wazuh/wazuh/security/advisories/GHSA-95w2-gpvr-q4jh
|
||||
@@ -156127,6 +156160,7 @@ CVE-2026-7548 - https://github.com/newym/cve/blob/main/totolink%20nr1800x%20comm
|
||||
CVE-2026-75501 - https://drkq.github.io/security-research/calix-vu756733/
|
||||
CVE-2026-7555 - https://github.com/nidieaaa/test/issues/9
|
||||
CVE-2026-75587 - https://mattermost.com/security-updates
|
||||
CVE-2026-75793 - https://wpscan.com/vulnerability/d1c2ea43-2643-4cdf-8dfe-e11109266f51/
|
||||
CVE-2026-75796 - https://wpscan.com/vulnerability/919da0c7-7643-4903-9454-2fb66353f5cb/
|
||||
CVE-2026-75797 - https://wpscan.com/vulnerability/1048b130-9263-4780-b886-656a891de85a/
|
||||
CVE-2026-75798 - https://wpscan.com/vulnerability/a77168df-61b8-40df-95f5-e19cf6540ce5/
|
||||
@@ -156323,6 +156357,7 @@ CVE-2026-7790 - https://cna.erlef.org/cves/CVE-2026-7790.html
|
||||
CVE-2026-77945 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TEW-821DAP_ssi_Arbitrary_File_Command_Injection.md
|
||||
CVE-2026-77946 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TEW-821DAP_ssi_NTP_Timezone_Config_Stack_Overflow.md
|
||||
CVE-2026-78011 - https://psirt.watchguard.com/CVE-2026-78011
|
||||
CVE-2026-78038 - https://github.com/ash-project/ash_oban/security/advisories/GHSA-gj9p-x393-rf9h
|
||||
CVE-2026-78049 - https://github.com/user-attachments/files/29702766/PoC.zip
|
||||
CVE-2026-78049 - https://gitlab.com/systerel/S2OPC/-/work_items/1787
|
||||
CVE-2026-78050 - https://github.com/AdminSafe/CVE/issues/9
|
||||
@@ -156380,6 +156415,7 @@ CVE-2026-78203 - https://github.com/geo-chen/oss/blob/main/Ghostwriter.md
|
||||
CVE-2026-78204 - https://github.com/geo-chen/oss/blob/main/Ghostwriter.md
|
||||
CVE-2026-78205 - https://github.com/bentoml/BentoML/issues/5644
|
||||
CVE-2026-7822 - https://github.com/ltranquility/submit/issues/14
|
||||
CVE-2026-78228 - https://github.com/ash-project/ash_oban/security/advisories/GHSA-94p7-498r-mrhp
|
||||
CVE-2026-7823 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_330/README.md
|
||||
CVE-2026-78244 - https://github.com/microwaveabi/vul/issues/5
|
||||
CVE-2026-78245 - https://github.com/microwaveabi/vul/issues/47
|
||||
@@ -156400,6 +156436,7 @@ CVE-2026-78367 - https://github.com/rpm-software-management/rpm/issues/4314
|
||||
CVE-2026-7838 - https://www.securin.io/zero-days/cve-2026-7838-heap-overflow-viewer-reasonlen-integer-overflow-ultravnc
|
||||
CVE-2026-7839 - https://www.securin.io/zero-days/cve-2026-7839-hardcoded-default-admin-password-adminadmi2-ultravnc-repeater
|
||||
CVE-2026-7840 - https://www.securin.io/zero-days/cve-2026-7840-pre-auth-global-buffer-overflow-repeater-http-admin-ultravnc
|
||||
CVE-2026-78410 - https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m
|
||||
CVE-2026-78417 - https://devolutions.net/security/advisories/DEVO-2026-0029/
|
||||
CVE-2026-7842 - https://wpscan.com/vulnerability/210303c4-0964-4a01-ac8e-13d7c7f424a2/
|
||||
CVE-2026-78430 - https://github.com/sworddut/mcp-ffmpeg-helper/issues/6
|
||||
@@ -156433,10 +156470,14 @@ CVE-2026-78679 - https://github.com/gitpython-developers/GitPython/security/advi
|
||||
CVE-2026-78681 - https://github.com/nltk/nltk/security/advisories/GHSA-97qj-x29f-37w7
|
||||
CVE-2026-78682 - https://github.com/nltk/nltk/security/advisories/GHSA-6ww7-3frv-cqxh
|
||||
CVE-2026-78683 - https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2
|
||||
CVE-2026-78693 - https://github.com/ash-project/ash_graphql/security/advisories/GHSA-ppr2-g9h8-w7qp
|
||||
CVE-2026-7875 - https://github.com/qwibitai/nanoclaw/pull/2001
|
||||
CVE-2026-78849 - https://redmine.pfsense.org/issues/16773
|
||||
CVE-2026-7896 - https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
|
||||
CVE-2026-7896 - https://issues.chromium.org/issues/493747582
|
||||
CVE-2026-7897 - https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
|
||||
CVE-2026-78970 - https://github.com/jeecgboot/JeecgBoot/issues/9670
|
||||
CVE-2026-78970 - https://github.com/jeecgboot/JeecgBoot/issues/9674
|
||||
CVE-2026-7898 - https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
|
||||
CVE-2026-7898 - https://issues.chromium.org/issues/504587882
|
||||
CVE-2026-7899 - https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
|
||||
@@ -156539,6 +156580,7 @@ CVE-2026-7960 - https://chromereleases.googleblog.com/2026/05/stable-channel-upd
|
||||
CVE-2026-7961 - https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
|
||||
CVE-2026-7961 - https://issues.chromium.org/issues/497008295
|
||||
CVE-2026-79615 - https://wpscan.com/vulnerability/f4c77fda-edc2-44c5-95d9-358636896b5f/
|
||||
CVE-2026-79619 - https://seclists.org/fulldisclosure/2026/Aug/40
|
||||
CVE-2026-7962 - https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
|
||||
CVE-2026-7962 - https://issues.chromium.org/issues/497081987
|
||||
CVE-2026-79621 - https://wpscan.com/vulnerability/9a4c12ff-80d8-400c-abfa-de557ead3b07/
|
||||
@@ -156927,6 +156969,7 @@ CVE-2026-82724 - https://github.com/ash-project/ash_phoenix/security/advisories/
|
||||
CVE-2026-82725 - https://github.com/ash-project/ash_phoenix/security/advisories/GHSA-7xhg-xphm-f458
|
||||
CVE-2026-82726 - https://github.com/ash-project/ash_phoenix/security/advisories/GHSA-rpf8-q9jh-qxrr
|
||||
CVE-2026-82727 - https://github.com/ash-project/ash_phoenix/security/advisories/GHSA-5xf4-hgcq-xw7v
|
||||
CVE-2026-82728 - https://github.com/elixir-mint/mint/security/advisories/GHSA-g83f-2j6r-q6m4
|
||||
CVE-2026-8273 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_mgraccount_mgrdsk_mgrapp_mgr%20Multiple%20CGI%20OS%20Command%20Injection.md
|
||||
CVE-2026-82730 - https://github.com/ash-project/ash_typescript/security/advisories/GHSA-6929-rjmh-4x62
|
||||
CVE-2026-82731 - https://github.com/ash-project/ash_typescript/security/advisories/GHSA-6g23-p936-fm2f
|
||||
@@ -156941,6 +156984,7 @@ CVE-2026-82745 - https://github.com/ash-project/ash/security/advisories/GHSA-92x
|
||||
CVE-2026-82746 - https://github.com/ash-project/ash/security/advisories/GHSA-j7c9-3fw3-jc64
|
||||
CVE-2026-82747 - https://github.com/ash-project/ash/security/advisories/GHSA-4259-gvr2-4xhq
|
||||
CVE-2026-82749 - https://github.com/ash-project/ash/security/advisories/GHSA-j8fx-ff37-4j9c
|
||||
CVE-2026-82752 - https://github.com/ash-project/ash/security/advisories/GHSA-cwjv-574p-59f6
|
||||
CVE-2026-82801 - https://github.com/natanmorette-thoropass/thoropass-vuln-research-program/tree/main/2026/Unauthenticated%20Scale%20Image%20SSRF
|
||||
CVE-2026-82807 - https://winslow1984.com/books/cve-collection/page/ultra-ramdisk-pro-182-kernel-driver-urdscsisys-local-privilege-escalation-via-arbitrary-registry-value-write
|
||||
CVE-2026-82809 - https://github.com/xryj920/chrome_extensions/blob/main/vidIQ%20Inc.%20vidIQ%20Vision%20for%20YouTube%203.199.0%20exposes%20YouTube%20video%20frame%20captures%20through%20an%20unauthenticated%20postMessage%20handler
|
||||
@@ -157009,6 +157053,7 @@ CVE-2026-8385 - https://wpscan.com/vulnerability/984cad38-6d01-4956-8bf1-2958525
|
||||
CVE-2026-8386 - https://wpscan.com/vulnerability/fa7f5cb0-abe2-4079-9290-e0e4dc89f27f/
|
||||
CVE-2026-84021 - https://wpscan.com/vulnerability/ca226eab-59a2-42d5-96f6-84dacf7c6c5a/
|
||||
CVE-2026-84022 - https://wpscan.com/vulnerability/53bbe80c-caea-4893-82a6-03e5173390de/
|
||||
CVE-2026-84028 - https://wpscan.com/vulnerability/6abd5d49-af3a-4515-ba33-57b56a9fba4e/
|
||||
CVE-2026-84043 - https://wpscan.com/vulnerability/96599654-1d7f-4ff0-a4b4-26e540375a67/
|
||||
CVE-2026-84044 - https://wpscan.com/vulnerability/861a7030-f85c-4452-8eeb-68a3407f6815/
|
||||
CVE-2026-84045 - https://wpscan.com/vulnerability/241a7890-81b3-4685-a243-e774d560f17a/
|
||||
@@ -157017,6 +157062,7 @@ CVE-2026-84066 - https://wpscan.com/vulnerability/99d990ce-aef3-404d-8ce0-803215
|
||||
CVE-2026-8407 - https://devolutions.net/security/advisories/DEVO-2026-0010/
|
||||
CVE-2026-84146 - https://wpscan.com/vulnerability/8e7cdd07-0337-4e0b-adf6-b865e13322a2/
|
||||
CVE-2026-84175 - https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/659
|
||||
CVE-2026-84219 - https://wpscan.com/vulnerability/e95bd1e3-6f61-423f-add6-519e1ca7bf66/
|
||||
CVE-2026-84221 - https://wpscan.com/vulnerability/6c34da62-46fb-4dd4-a433-bd3df4d9fcfd/
|
||||
CVE-2026-84225 - https://wpscan.com/vulnerability/9f83f0a2-7d77-49a2-a23a-03f787e2e356/
|
||||
CVE-2026-84233 - https://bugzilla.redhat.com/show_bug.cgi?id=2478409
|
||||
@@ -157048,6 +157094,7 @@ CVE-2026-84935 - https://wpscan.com/vulnerability/10aeb456-764d-4f4d-a2c9-e35747
|
||||
CVE-2026-84936 - https://wpscan.com/vulnerability/bd708c98-1657-423b-aa2b-14aa18307c03/
|
||||
CVE-2026-84937 - https://wpscan.com/vulnerability/5f81c233-8544-4a7b-a1c6-e447dc889a8d/
|
||||
CVE-2026-8497 - https://devolutions.net/security/advisories/DEVO-2026-0027/
|
||||
CVE-2026-85038 - https://wpscan.com/vulnerability/a397aeaf-7629-45dd-a2ee-3e904cc19550/
|
||||
CVE-2026-8509 - https://issues.chromium.org/issues/493310462
|
||||
CVE-2026-85091 - https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
|
||||
CVE-2026-85092 - https://www.vulncheck.com/advisories/lime-through-1.12.0-arbitrary-file-overwrite-via-symlink-following
|
||||
@@ -157093,6 +157140,7 @@ CVE-2026-8582 - https://issues.chromium.org/issues/497594413
|
||||
CVE-2026-8583 - https://issues.chromium.org/issues/497975477
|
||||
CVE-2026-8585 - https://issues.chromium.org/issues/499052720
|
||||
CVE-2026-8587 - https://issues.chromium.org/issues/507356235
|
||||
CVE-2026-86060 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
|
||||
CVE-2026-8654 - https://portal.perforce.com/s/cve/a91Qi000002z78HIAQ/authenticated-os-command-injection-in-delphix-continuous-data-connectors
|
||||
CVE-2026-8656 - https://security.snyk.io/vuln/SNYK-JS-JSONDIFFPATCH-16635946
|
||||
CVE-2026-8657 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16732792
|
||||
@@ -157131,6 +157179,7 @@ CVE-2026-8953 - https://bugzilla.mozilla.org/show_bug.cgi?id=2029511
|
||||
CVE-2026-8954 - https://bugzilla.mozilla.org/show_bug.cgi?id=2030747
|
||||
CVE-2026-8956 - https://bugzilla.mozilla.org/show_bug.cgi?id=2032427
|
||||
CVE-2026-8965 - https://bugzilla.mozilla.org/show_bug.cgi?id=2025740
|
||||
CVE-2026-8969 - https://bugzilla.mozilla.org/show_bug.cgi?id=2031123
|
||||
CVE-2026-8979 - https://cyberdanube.com/security-research/multiple-vulnerabilities-in-mennekes-amtron-series/
|
||||
CVE-2026-8980 - https://cyberdanube.com/security-research/multiple-vulnerabilities-in-mennekes-amtron-series/
|
||||
CVE-2026-8981 - https://wpscan.com/vulnerability/9815b0e6-e411-4a5c-9c63-30bad21da698/
|
||||
|
||||
Reference in new issue
Block a user