Update Sat Mar 7 11:22:44 UTC 2026

2026-11-07 12:38:17 -10:00 · 2026-03-07 11:22:45 +00:00
1 parent 72a1e3f46f
commit 3ab2a2245f
@@ -0,0 +1,17 @@
+### [CVE-2008-7173](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7173)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request.  NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-10784_3-9970757-7.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2008-7174](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7174)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to improper use of the gets and sprintf functions.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-10784_3-9970757-7.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -10,6 +10,7 @@ Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attac
 ### POC

 #### Reference
+- http://news.cnet.com/8301-1009_3-10199652-83.html
 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889

 #### Github
@@ -10,6 +10,7 @@ Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows r
 ### POC

 #### Reference
+- http://news.cnet.com/8301-1009_3-10199652-83.html
 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889

 #### Github
@@ -10,6 +10,7 @@ Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary
 ### POC

 #### Reference
+- http://news.cnet.com/8301-1009_3-10199652-83.html
 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889
 - https://bugzilla.mozilla.org/show_bug.cgi?id=484320

@@ -10,6 +10,7 @@ Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attac
 ### POC

 #### Reference
+- http://news.cnet.com/8301-1009_3-10199652-83.html
 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978

 #### Github
@@ -11,6 +11,7 @@ Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Ado

 #### Reference
 - http://isc.sans.org/diary.html?storyid=6847
+- http://news.cnet.com/8301-27080_3-10293389-245.html
 - http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability

 #### Github
@@ -10,6 +10,7 @@ Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS befo
 ### POC

 #### Reference
+- http://news.cnet.com/8301-1009_3-10278472-83.html
 - http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf

 #### Github
@@ -11,6 +11,7 @@ The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 a

 #### Reference
 - http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html
+- http://news.cnet.com/8301-27080_3-10395891-245.html
 - http://seclists.org/fulldisclosure/2009/Nov/134
 - http://secunia.com/blog/66/

@@ -10,6 +10,7 @@ Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 o
 ### POC

 #### Reference
+- http://news.cnet.com/8301-27080_3-10435232-245.html
 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

 #### Github
@@ -0,0 +1,17 @@
+### [CVE-2010-1117](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1117)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20001126-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2010-1118](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1118)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20001126-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -10,6 +10,7 @@ Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10
 ### POC

 #### Reference
+- http://news.cnet.com/8301-27080_3-20001126-245.html
 - http://www.vupen.com/english/advisories/2010/1373

 #### Github
@@ -0,0 +1,17 @@
+### [CVE-2010-1120](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1120)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at CanSecWest 2010.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20001126-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -10,6 +10,7 @@ Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM no
 ### POC

 #### Reference
+- http://news.cnet.com/8301-27080_3-20001126-245.html
 - http://www.ubuntu.com/usn/usn-930-2
 - http://www.vupen.com/english/advisories/2010/1557
 - https://bugzilla.mozilla.org/show_bug.cgi?id=555109
@@ -0,0 +1,17 @@
+### [CVE-2010-2913](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2913)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the mobile device or (2) a synchronized computer.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20011664-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2010-4211](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4211)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20021730-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2010-4212](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4212)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20021874-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2010-4213](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4213)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20021874-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2010-4214](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4214)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.
+
+### POC
+
+#### Reference
+- http://news.cnet.com/8301-27080_3-20021874-245.html
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2013-1853](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1853)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
+
+### POC
+
+#### Reference
+- https://bugzilla.gnome.org/show_bug.cgi?id=695117
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -12,6 +12,7 @@ parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even
 #### Reference
 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
+- https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.html

 #### Github
 - https://github.com/hackerhouse-opensource/exploits
@@ -10,6 +10,7 @@ Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack
 ### POC

 #### Reference
+- https://invisionpower.com/release-notes/419-r37/
 - https://medium.com/@iancarroll/bypassing-authentication-in-invision-power-board-with-cve-2016-2564-9a24ea3655f9

 #### Github
@@ -12,6 +12,7 @@ Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Sy
 #### Reference
 - http://packetstormsecurity.com/files/137970/Objective-Systems-Inc.-ASN1C-For-C-C-Heap-Memory-Corruption.html
 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
+- https://www.ncsc.nl/dienstverlening/response-op-dreigingen-en-incidenten/beveiligingsadviezen/NCSC-2016-0650+1.00+Kwetsbaarheid+verholpen+in+ASN1C.html

 #### Github
 - https://github.com/ARPSyndicate/cvemon
@@ -0,0 +1,17 @@
+### [CVE-2018-25189](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25189)
+![](https://img.shields.io/static/v1?label=Product&message=Data%20Center%20Audit&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.6.2%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')&color=brightgreen)
+
+### Description
+
+Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive database information including usernames, database names, and version details.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/45807
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2018-25197](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25197)
+![](https://img.shields.io/static/v1?label=Product&message=PlayJoom&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0.10.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')&color=brightgreen)
+
+### Description
+
+PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter. Attackers can send GET requests to index.php with option=com_playjoom&view=genre&catid=[SQL] to extract sensitive database information including usernames, databases, and version details.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/45803
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -19,7 +19,7 @@ Es wurde eine kritische Schwachstelle in openBI bis 1.0.8 gefunden. Betroffen hi
 ### POC

 #### Reference
-No PoCs from references.
+- https://vuldb.com/?ctiid.252309

 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds
@@ -12,6 +12,7 @@ A vulnerability was found in SourceCodester Company Website CMS 1.0. This affect

 #### Reference
 - https://github.com/miwangdemaoxianzhe/CVE/issues/1
+- https://vuldb.com/?id.333325
 - https://www.sourcecodester.com/

 #### Github
@@ -1,5 +1,5 @@
 ### [CVE-2025-15033](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15033)
-![](https://img.shields.io/static/v1?label=Product&message=WoooCommerce&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=WooCommerce&color=blue)
 ![](https://img.shields.io/static/v1?label=Version&message=10.0.0%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Version&message=10.1.0%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Version&message=10.2.0%20&color=brightgreen)
@@ -0,0 +1,19 @@
+### [CVE-2025-5177](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5177)
+![](https://img.shields.io/static/v1?label=Product&message=Queue%20Ticket%20Kiosk&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=20250517%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Code%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20Site%20Scripting&color=brightgreen)
+
+### Description
+
+A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some unknown processing of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to cross site scripting. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
+Eine Schwachstelle wurde in Realce Tecnologia Queue Ticket Kiosk bis 20250517 ausgemacht. Sie wurde als problematisch eingestuft. Davon betroffen ist unbekannter Code der Datei /adm/index.php der Komponente Admin Login Page. Durch Beeinflussen des Arguments Usuário mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen.
+
+### POC
+
+#### Reference
+- https://vuldb.com/?ctiid.310265
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,21 @@
+### [CVE-2025-5421](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5421)
+![](https://img.shields.io/static/v1?label=Product&message=CMS&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=3.4.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=3.4.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=3.4.2%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Access%20Controls&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Incorrect%20Privilege%20Assignment&color=brightgreen)
+
+### Description
+
+A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2. Affected by this issue is some unknown functionality of the file /admin-cp/plugin/editor of the component Plugin Editor Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
+Eine kritische Schwachstelle wurde in juzaweb CMS bis 3.4.2 entdeckt. Hierbei geht es um eine nicht exakt ausgemachte Funktion der Datei /admin-cp/plugin/editor der Komponente Plugin Editor Page. Durch Manipulation mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
+
+### POC
+
+#### Reference
+- https://vuldb.com/?submit.584049
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-66945](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66945)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files may be written outside the intended directory, leading to arbitrary file overwrite and potentially remote code execution
+
+### POC
+
+#### Reference
+- https://zeroday.endlessparadox.com/posts/cve-2025-66945/
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -14,6 +14,7 @@ Eine Schwachstelle wurde in wong2 mcp-cli 1.13.0 gefunden. Betroffen davon ist d
 #### Reference
 - https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e
 - https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e#proof-of-concept
+- https://vuldb.com/?id.320804

 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds
@@ -0,0 +1,17 @@
+### [CVE-2026-29178](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29178)
+![](https://img.shields.io/static/v1?label=Product&message=lemmy&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=%3C%200.19.16%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%3A%20Server-Side%20Request%20Forgery%20(SSRF)&color=brightgreen)
+
+### Description
+
+Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federation in Rust. Prior to version 0.19.16, the GET /api/v4/image/{filename} endpoint is vulnerable to unauthenticated SSRF through parameter injection in the file_type query parameter. An attacker can inject arbitrary query parameters into the internal request to pict-rs, including the proxy parameter which causes pict-rs to fetch arbitrary URLs. This issue has been patched in version 0.19.16.
+
+### POC
+
+#### Reference
+- https://github.com/LemmyNet/lemmy/security/advisories/GHSA-jvxv-2jjp-jxc3
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-2952](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2952)
+![](https://img.shields.io/static/v1?label=Product&message=Vaelsys&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.1.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Command%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=OS%20Command%20Injection&color=brightgreen)
+
+### Description
+
+A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxargs causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://vuldb.com/?id.347318
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-30223](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-30223)
+![](https://img.shields.io/static/v1?label=Product&message=OliveTin&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=%3C%203000.11.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%3A%20Improper%20Authentication&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-345%3A%20Insufficient%20Verification%20of%20Data%20Authenticity&color=brightgreen)
+
+### Description
+
+OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either "authJwtPubKeyPath" (local RSA public key) or "authJwtHmacSecret" (HMAC secret), the configured audience value (authJwtAud) is not enforced during token parsing. As a result, validly signed JWT tokens with an incorrect aud claim are accepted for authentication. This allows authentication using tokens intended for a different audience/service. This issue has been patched in version 3000.11.1.
+
+### POC
+
+#### Reference
+- https://github.com/OliveTin/OliveTin/security/advisories/GHSA-g962-2j28-3cg9
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -16359,6 +16359,8 @@ CVE-2008-7167 - https://www.exploit-db.com/exploits/5936
 CVE-2008-7169 - https://www.exploit-db.com/exploits/5963
 CVE-2008-7171 - https://www.exploit-db.com/exploits/5873
 CVE-2008-7172 - https://www.exploit-db.com/exploits/5873
+CVE-2008-7173 - http://news.cnet.com/8301-10784_3-9970757-7.html
+CVE-2008-7174 - http://news.cnet.com/8301-10784_3-9970757-7.html
 CVE-2008-7176 - https://www.exploit-db.com/exploits/5792
 CVE-2008-7178 - https://www.exploit-db.com/exploits/5756
 CVE-2008-7179 - https://www.exploit-db.com/exploits/5959
@@ -16963,8 +16965,11 @@ CVE-2009-1038 - https://www.exploit-db.com/exploits/8217
 CVE-2009-1039 - https://www.exploit-db.com/exploits/8231
 CVE-2009-1040 - https://www.exploit-db.com/exploits/8224
 CVE-2009-1041 - https://www.exploit-db.com/exploits/8261
+CVE-2009-1042 - http://news.cnet.com/8301-1009_3-10199652-83.html
 CVE-2009-1042 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889
+CVE-2009-1043 - http://news.cnet.com/8301-1009_3-10199652-83.html
 CVE-2009-1043 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889
+CVE-2009-1044 - http://news.cnet.com/8301-1009_3-10199652-83.html
 CVE-2009-1044 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889
 CVE-2009-1044 - https://bugzilla.mozilla.org/show_bug.cgi?id=484320
 CVE-2009-1045 - https://www.exploit-db.com/exploits/8213
@@ -16979,6 +16984,7 @@ CVE-2009-1053 - http://e-rdc.org/v1/news.php?readmore=129
 CVE-2009-1057 - https://www.exploit-db.com/exploits/8180
 CVE-2009-1058 - https://www.exploit-db.com/exploits/8180
 CVE-2009-1059 - https://www.exploit-db.com/exploits/8180
+CVE-2009-1060 - http://news.cnet.com/8301-1009_3-10199652-83.html
 CVE-2009-1060 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978
 CVE-2009-1063 - https://www.exploit-db.com/exploits/8270
 CVE-2009-1064 - http://www.waraxe.us/advisory-73.html
@@ -17520,6 +17526,7 @@ CVE-2009-1853 - https://www.exploit-db.com/exploits/8802
 CVE-2009-1854 - https://www.exploit-db.com/exploits/8813
 CVE-2009-1861 - http://www.kb.cert.org/vuls/id/568153
 CVE-2009-1862 - http://isc.sans.org/diary.html?storyid=6847
+CVE-2009-1862 - http://news.cnet.com/8301-27080_3-10293389-245.html
 CVE-2009-1862 - http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability
 CVE-2009-1869 - http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html
 CVE-2009-1873 - https://www.exploit-db.com/exploits/9443
@@ -17709,6 +17716,7 @@ CVE-2009-2181 - https://www.exploit-db.com/exploits/8995
 CVE-2009-2182 - https://www.exploit-db.com/exploits/8995
 CVE-2009-2183 - https://www.exploit-db.com/exploits/8995
 CVE-2009-2184 - https://www.exploit-db.com/exploits/8996
+CVE-2009-2204 - http://news.cnet.com/8301-1009_3-10278472-83.html
 CVE-2009-2204 - http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf
 CVE-2009-2209 - https://www.exploit-db.com/exploits/9000
 CVE-2009-2210 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994
@@ -18321,6 +18329,7 @@ CVE-2009-3673 - https://docs.microsoft.com/en-us/security-updates/securitybullet
 CVE-2009-3674 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072
 CVE-2009-3675 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-069
 CVE-2009-3676 - http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html
+CVE-2009-3676 - http://news.cnet.com/8301-27080_3-10395891-245.html
 CVE-2009-3676 - http://seclists.org/fulldisclosure/2009/Nov/134
 CVE-2009-3676 - http://secunia.com/blog/66/
 CVE-2009-3678 - http://isc.sans.org/diary.html?storyid=8809
@@ -18966,6 +18975,7 @@ CVE-2010-0245 - https://docs.microsoft.com/en-us/security-updates/securitybullet
 CVE-2010-0246 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
 CVE-2010-0247 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
 CVE-2010-0248 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
+CVE-2010-0249 - http://news.cnet.com/8301-27080_3-10435232-245.html
 CVE-2010-0249 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
 CVE-2010-0252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008
 CVE-2010-0252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-034
@@ -19471,7 +19481,12 @@ CVE-2010-1113 - http://www.packetstormsecurity.com/1001-exploits/webservercreato
 CVE-2010-1114 - http://www.packetstormsecurity.com/1001-exploits/webservercreator-traversalxssrfi.txt
 CVE-2010-1115 - http://www.packetstormsecurity.com/1001-exploits/webservercreator-traversalxssrfi.txt
 CVE-2010-1116 - http://www.packetstormsecurity.com/1001-exploits/lookmer-disclose.txt
+CVE-2010-1117 - http://news.cnet.com/8301-27080_3-20001126-245.html
+CVE-2010-1118 - http://news.cnet.com/8301-27080_3-20001126-245.html
+CVE-2010-1119 - http://news.cnet.com/8301-27080_3-20001126-245.html
 CVE-2010-1119 - http://www.vupen.com/english/advisories/2010/1373
+CVE-2010-1120 - http://news.cnet.com/8301-27080_3-20001126-245.html
+CVE-2010-1121 - http://news.cnet.com/8301-27080_3-20001126-245.html
 CVE-2010-1121 - http://www.ubuntu.com/usn/usn-930-2
 CVE-2010-1121 - http://www.vupen.com/english/advisories/2010/1557
 CVE-2010-1121 - https://bugzilla.mozilla.org/show_bug.cgi?id=555109
@@ -20490,6 +20505,7 @@ CVE-2010-2908 - http://packetstormsecurity.org/1007-exploits/joomlajoomdle-sql.t
 CVE-2010-2910 - http://packetstormsecurity.org/1007-exploits/joomlaoziogallery-sql.txt
 CVE-2010-2911 - http://packetstormsecurity.org/1007-exploits/kayakoesupport37002-sql.txt
 CVE-2010-2912 - http://packetstormsecurity.org/1007-exploits/kayakoesupport-sql.txt
+CVE-2010-2913 - http://news.cnet.com/8301-27080_3-20011664-245.html
 CVE-2010-2915 - http://packetstormsecurity.org/0907-exploits/ajhypeprime-sql.txt
 CVE-2010-2915 - http://www.exploit-db.com/exploits/14435
 CVE-2010-2916 - http://packetstormsecurity.org/1007-exploits/ajhyipmeridian-sql.txt
@@ -21191,6 +21207,10 @@ CVE-2010-4194 - http://www.kb.cert.org/vuls/id/189929
 CVE-2010-4195 - http://www.kb.cert.org/vuls/id/189929
 CVE-2010-4196 - http://www.kb.cert.org/vuls/id/189929
 CVE-2010-4210 - https://www.exploit-db.com/exploits/15206/
+CVE-2010-4211 - http://news.cnet.com/8301-27080_3-20021730-245.html
+CVE-2010-4212 - http://news.cnet.com/8301-27080_3-20021874-245.html
+CVE-2010-4213 - http://news.cnet.com/8301-27080_3-20021874-245.html
+CVE-2010-4214 - http://news.cnet.com/8301-27080_3-20021874-245.html
 CVE-2010-4215 - http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk
 CVE-2010-4228 - http://securityreason.com/securityalert/8149
 CVE-2010-4230 - http://www.exploit-db.com/exploits/15504
@@ -27203,6 +27223,7 @@ CVE-2013-1848 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176
 CVE-2013-1848 - http://www.ubuntu.com/usn/USN-1811-1
 CVE-2013-1848 - http://www.ubuntu.com/usn/USN-1814-1
 CVE-2013-1852 - http://packetstormsecurity.com/files/120817/WordPress-LeagueManager-3.8-SQL-Injection.html
+CVE-2013-1853 - https://bugzilla.gnome.org/show_bug.cgi?id=695117
 CVE-2013-1858 - http://stealth.openwall.net/xSports/clown-newuser.c
 CVE-2013-1859 - http://packetstormsecurity.com/files/120788/Drupal-Node-Parameter-Control-6.x-Access-Bypass.html
 CVE-2013-1860 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176
@@ -31159,6 +31180,7 @@ CVE-2014-3647 - http://www.ubuntu.com/usn/USN-2394-1
 CVE-2014-3647 - https://bugzilla.redhat.com/show_bug.cgi?id=1144897
 CVE-2014-3660 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
 CVE-2014-3660 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
+CVE-2014-3660 - https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.html
 CVE-2014-3665 - https://www.cloudbees.com/jenkins-security-advisory-2014-10-30
 CVE-2014-3668 - http://linux.oracle.com/errata/ELSA-2014-1767.html
 CVE-2014-3668 - http://linux.oracle.com/errata/ELSA-2014-1768.html
@@ -44500,6 +44522,7 @@ CVE-2016-2560 - https://github.com/phpmyadmin/phpmyadmin/commit/ab1283e8366c97a1
 CVE-2016-2561 - https://github.com/phpmyadmin/phpmyadmin/commit/f33a42f1da9db943a67bda7d29f7dd91957a8e7e
 CVE-2016-2563 - http://seclists.org/fulldisclosure/2016/Mar/22
 CVE-2016-2563 - https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563
+CVE-2016-2564 - https://invisionpower.com/release-notes/419-r37/
 CVE-2016-2564 - https://medium.com/@iancarroll/bypassing-authentication-in-invision-power-board-with-cve-2016-2564-9a24ea3655f9
 CVE-2016-2568 - https://ubuntu.com/security/CVE-2016-2568
 CVE-2016-2569 - http://www.openwall.com/lists/oss-security/2016/02/26/2
@@ -45844,6 +45867,7 @@ CVE-2016-5063 - https://www.exploit-db.com/exploits/43902/
 CVE-2016-5063 - https://www.exploit-db.com/exploits/43934/
 CVE-2016-5080 - http://packetstormsecurity.com/files/137970/Objective-Systems-Inc.-ASN1C-For-C-C-Heap-Memory-Corruption.html
 CVE-2016-5080 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
+CVE-2016-5080 - https://www.ncsc.nl/dienstverlening/response-op-dreigingen-en-incidenten/beveiligingsadviezen/NCSC-2016-0650+1.00+Kwetsbaarheid+verholpen+in+ASN1C.html
 CVE-2016-5081 - http://www.kb.cert.org/vuls/id/301735
 CVE-2016-5084 - http://www.kb.cert.org/vuls/id/884840
 CVE-2016-5084 - http://www.kb.cert.org/vuls/id/BLUU-A9SQRS
@@ -61415,6 +61439,8 @@ CVE-2018-25156 - https://www.exploit-db.com/exploits/44675
 CVE-2018-25156 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5464.php
 CVE-2018-25157 - https://www.exploit-db.com/exploits/46935
 CVE-2018-25158 - https://www.exploit-db.com/exploits/47423
+CVE-2018-25189 - https://www.exploit-db.com/exploits/45807
+CVE-2018-25197 - https://www.exploit-db.com/exploits/45803
 CVE-2018-2560 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
 CVE-2018-2561 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
 CVE-2018-2562 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
@@ -114560,6 +114586,7 @@ CVE-2024-10315 - https://portal.perforce.com/s/detail/a91PA000001SZVJYA4
 CVE-2024-10327 - https://help.okta.com/en-us/content/topics/releasenotes/okta-verify-release-notes.htm#panel2
 CVE-2024-10335 - https://www.sourcecodester.com/
 CVE-2024-10336 - https://vuldb.com/?id.281681
+CVE-2024-1034 - https://vuldb.com/?ctiid.252309
 CVE-2024-10344 - https://portal.perforce.com/s/detail/a91PA000001SZOrYAO
 CVE-2024-10345 - https://portal.perforce.com/s/detail/a91PA000001SZQTYA4
 CVE-2024-10348 - https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/house-rental-management-system.md
@@ -126492,6 +126519,7 @@ CVE-2025-13555 - https://github.com/arpcyber070/CVE/issues/4
 CVE-2025-13556 - https://github.com/ProgramShowMaker/CVE/issues/2
 CVE-2025-13557 - https://github.com/ProgramShowMaker/CVE/issues/3
 CVE-2025-13560 - https://github.com/miwangdemaoxianzhe/CVE/issues/1
+CVE-2025-13560 - https://vuldb.com/?id.333325
 CVE-2025-13560 - https://www.sourcecodester.com/
 CVE-2025-13561 - https://github.com/miwangdemaoxianzhe/CVE/issues/2
 CVE-2025-13561 - https://www.sourcecodester.com/
@@ -131543,6 +131571,7 @@ CVE-2025-51726 - https://github.com/meisterlos/CVE-2025-51726
 CVE-2025-5175 - https://github.com/erdogant/pypickle/issues/3
 CVE-2025-5175 - https://github.com/erdogant/pypickle/issues/3#issue-3070689116
 CVE-2025-5175 - https://github.com/erdogant/pypickle/issues/3#issuecomment-2888589652
+CVE-2025-5177 - https://vuldb.com/?ctiid.310265
 CVE-2025-5180 - https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80
 CVE-2025-51825 - https://github.com/jeecgboot/JeecgBoot/issues/8335
 CVE-2025-51858 - https://github.com/Secsys-FDU/CVE-2025-51858
@@ -131991,6 +132020,7 @@ CVE-2025-54134 - https://github.com/haxtheweb/issues/security/advisories/GHSA-pj
 CVE-2025-54139 - https://github.com/haxtheweb/issues/security/advisories/GHSA-54vw-f4xf-f92j
 CVE-2025-54140 - https://github.com/pyload/pyload/security/advisories/GHSA-xqpg-92fq-grfg
 CVE-2025-5419 - https://issues.chromium.org/issues/420636529
+CVE-2025-5421 - https://vuldb.com/?submit.584049
 CVE-2025-54236 - https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento
 CVE-2025-54257 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2222
 CVE-2025-5427 - https://vuldb.com/?id.310760
@@ -134219,6 +134249,7 @@ CVE-2025-66723 - https://github.com/audiopump/cve-2025-66723
 CVE-2025-66843 - https://github.com/Yohane-Mashiro/grav_cve/issues/1
 CVE-2025-66845 - https://gist.github.com/MuratSevri/d78efed86ca5f82e8a6683ace5061319
 CVE-2025-6694 - https://github.com/RaulPazemecxas/PoCVulDb
+CVE-2025-66945 - https://zeroday.endlessparadox.com/posts/cve-2025-66945/
 CVE-2025-6695 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README2.md
 CVE-2025-6695 - https://vuldb.com/?submit.597071
 CVE-2025-66959 - https://zero.shotlearni.ng/blog/cve-2025-66959panic-dos-via-unchecked-length-in-gguf-decoder-copy/
@@ -135622,6 +135653,7 @@ CVE-2025-9253 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_22/22.
 CVE-2025-9253 - https://www.linksys.com/
 CVE-2025-9262 - https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e
 CVE-2025-9262 - https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e#proof-of-concept
+CVE-2025-9262 - https://vuldb.com/?id.320804
 CVE-2025-9267 - https://github.com/Tiger3080/CVE-2025-9267
 CVE-2025-9287 - https://github.com/browserify/cipher-base/security/advisories/GHSA-cpq7-6gpm-g9rc
 CVE-2025-9288 - https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5
@@ -136713,12 +136745,14 @@ CVE-2026-29073 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-
 CVE-2026-2908 - https://github.com/QIU-DIE/cve-nneeww/issues/10
 CVE-2026-2909 - https://github.com/QIU-DIE/cve-nneeww/issues/11
 CVE-2026-2911 - https://vuln.ricky.place/Tenda/FH451/
+CVE-2026-29178 - https://github.com/LemmyNet/lemmy/security/advisories/GHSA-jvxv-2jjp-jxc3
 CVE-2026-2925 - https://github.com/LX-66-LX/cve-new/issues/20
 CVE-2026-2926 - https://github.com/LX-66-LX/cve-new/issues/21
 CVE-2026-2927 - https://github.com/LX-66-LX/cve-new/issues/22
 CVE-2026-2928 - https://github.com/LX-66-LX/cve-new/issues/23
 CVE-2026-2929 - https://github.com/LX-66-LX/cve-new/issues/24
 CVE-2026-2938 - https://www.sourcecodester.com/
+CVE-2026-2952 - https://vuldb.com/?id.347318
 CVE-2026-2958 - https://github.com/LX-66-LX/cve-new/issues/25
 CVE-2026-2959 - https://github.com/LX-66-LX/cve-new/issues/26
 CVE-2026-2960 - https://github.com/LX-66-LX/cve-new/issues/27
@@ -136733,6 +136767,7 @@ CVE-2026-2984 - https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hij
 CVE-2026-2984 - https://www.sourcecodester.com/
 CVE-2026-3015 - https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md
 CVE-2026-3015 - https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md#poc
+CVE-2026-30223 - https://github.com/OliveTin/OliveTin/security/advisories/GHSA-g962-2j28-3cg9
 CVE-2026-3040 - https://vuldb.com/?id.347394
 CVE-2026-3046 - https://vuldb.com/?id.347406
 CVE-2026-3070 - https://www.sourcecodester.com/