mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Sun Oct 4 12:33:41 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
de57b3a5c1
commit
4a2278d3f3
89 files changed
+1142
-5
No files matched your search
@@ -10,6 +10,7 @@ shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://sourceforge.net/forum/forum.php?forum_id=690912
|
||||
- https://www.exploit-db.com/exploits/3816
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCE
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://sourceforge.net/forum/forum.php?forum_id=690912
|
||||
- https://www.exploit-db.com/exploits/3816
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2007-4631](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4631)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://sourceforge.net/project/shownotes.php?release_id=538002&group_id=139897
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attacker
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/36334
|
||||
- http://www.exploit-db.com/exploits/36335
|
||||
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-23
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attack
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/131685/Foxit-Reader-7.1.3.320-Memory-Corruption.html
|
||||
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-27
|
||||
- https://www.exploit-db.com/exploits/36859/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -24,6 +24,7 @@ SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html
|
||||
- http://seclists.org/fulldisclosure/2022/May/42
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,26 @@
|
||||
### [CVE-2021-21490](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21490)
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not sufficiently encode input and output parameters which results in reflected cross site scripting vulnerability, through which a malicious user can access data relating to the current session and use it to impersonate a user and access all information with the same rights as the target user.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -25,6 +25,7 @@ SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KR
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP-Gateway-Memory-Corruption.html
|
||||
- https://launchpad.support.sap.com/#/notes/3020209
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -20,6 +20,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32N
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -25,6 +25,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC -
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164591/SAP-NetWeaver-ABAP-Dispatcher-Service-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -0,0 +1,28 @@
|
||||
### [CVE-2021-27610](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27610)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,7 +13,7 @@ SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/n0-traces/cve_monitor
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allow
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -15,7 +15,7 @@ Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver A
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/n0-traces/cve_monitor
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allow
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2021-27623](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27623)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CXmlUtility::CheckLength() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allow
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/0xInfection/PewSWITCH
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allow
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allow
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allow
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -25,6 +25,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC -
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164591/SAP-NetWeaver-ABAP-Dispatcher-Service-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -20,6 +20,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32N
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -20,6 +20,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32N
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -20,6 +20,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32N
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -20,6 +20,7 @@ SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32N
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -25,6 +25,7 @@ SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KR
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP-Gateway-Memory-Corruption.html
|
||||
- https://launchpad.support.sap.com/#/notes/3020209
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -25,6 +25,7 @@ SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KR
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP-Gateway-Memory-Corruption.html
|
||||
- https://launchpad.support.sap.com/#/notes/3020209
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/Onapsis/vulnerability_advisories
|
||||
|
||||
@@ -15,6 +15,7 @@ SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an at
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/164592/SAP-JAVA-NetWeaver-System-Connections-XML-Injection.html
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cvemon
|
||||
|
||||
@@ -11,7 +11,7 @@ Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Man
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/n0-traces/cve_monitor
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-27638](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27638)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-27639](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27639)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-27640](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27640)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-27641](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27641)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-27642](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27642)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-27643](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27643)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-33659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33659)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-33660](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33660)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-33661](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33661)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-33662](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33662)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,32 @@
|
||||
### [CVE-2021-33663](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33663)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper restriction of I/O buffering into encrypted SMTP sessions over the network which can partially impact the integrity of the application.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -16,7 +16,7 @@ SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), v
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/n0-traces/cve_monitor
|
||||
|
||||
@@ -16,7 +16,7 @@ SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML),
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
- https://github.com/n0-traces/cve_monitor
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-33666](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33666)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lea
|
||||
#### Reference
|
||||
- https://blog.ostorlab.co/zip-packages-exploitation.html
|
||||
- https://github.com/brendan-duncan/archive/issues/266
|
||||
- https://ostorlab.co/vulndb/advisory/OVE-2023-3
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Es wurde eine kritische Schwachstelle in Totolink N200RE 9.3.5u.6139_B20201216 e
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/?ctiid.252270
|
||||
- https://vuldb.com/?id.252270
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-45480](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-45480)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/floodlight/floodlight/issues/873
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-52598](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52598)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-52599](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52599)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission management for camera guest account. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-52600](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52600)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the user's host PC.The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-52601](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52601)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sensitive information. An attacker can use key to decrypt sensitive information. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-8075](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8075)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-103041](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103041)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ModelTC/LightLLM/issues/1596
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-103227](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103227)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_url of the file src/media_tools/dash_client.c of the component DASH Client. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. Upgrading to version abi-16.26 can resolve this issue. Patch name: 4c8e26f278ff63eec57968f7bc696f604bb0cffd. It is recommended to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/gpac/gpac/issues/3876
|
||||
- https://github.com/gpac/gpac/pull/3879
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-103270](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103270)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pause_generation, /abort_request, /flush_cache, and /init_weights_update_group to disrupt inference operations and wedge workers on deployments started with --enable_rl.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ModelTC/LightLLM/issues/1609
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-103760](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103760)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single listener thread in writeFully(), breaking all subsequent handshakes, metadata fetches, notify and probe requests.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/kvcache-ai/Mooncake/issues/4443
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-104118](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-104118)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated attackers to modify the shipping information stored on arbitrary orders.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d94ebc87-c404-4b30-8291-26c4bc2eb63b/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-104119](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-104119)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite installations where administrators do not have the unfiltered_html capability.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d6ee7720-9c2d-48b3-b238-0da4fed398a3/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-16389](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16389)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=2043887
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-17005](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17005)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page (Contributor and above, once permitted) to perform Stored Cross-Site Scripting attacks that execute in the browser of anyone viewing the announcement.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/e3973475-18c4-46a0-b0ca-24e4d2cd58ca/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56226](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56226)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowing unauthenticated access. Because the function accepts a caller-supplied user UUID without verifying it matches the authenticated user, an attacker using only the public publishable API key can query POST /rest/v1/rpc/get_orgs_v6 with an arbitrary user UUID to retrieve that user's organization membership, roles, subscription/trial metadata, and management_email (PII).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-m7mm-35v3-82f4
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56245](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56245)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time RPC function that allows unauthenticated attackers to insert arbitrary build-time records. Attackers can exploit this by calling POST /rest/v1/rpc/record_build_time with a public API key to poison billing and quota data for any organization, enabling resource exhaustion and cross-tenant billing manipulation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-42f8-v563-5763
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56302](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56302)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icons. Remote attackers can exploit this misconfiguration to delete all icons and leak sensitive app IDs and user IDs.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-8hq3-gg3m-vwvr
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56309](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56309)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attachments endpoint, allowing plan-blocked apps to create publicly readable R2 objects. Attackers can upload arbitrary attachments using upload-scoped API keys that bypass plan checks, persist outside normal bundle metadata, and survive app deletion, enabling storage and bandwidth abuse.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-q52j-ggvx-cr4v
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56325](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56325)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as SQL wildcards. Attackers can create apps with app_ids differing by one character at underscore positions to cause unintended pattern matches, breaking preview functionality for legitimate apps or causing app-id confusion.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-cw88-ch2j-8vqj
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56330](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56330)
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept unvalidated callbackUrl, successUrl, and cancelUrl parameters. Authenticated attackers can craft malicious billing URLs to redirect users to attacker-controlled domains for phishing and credential harvesting.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-grc7-98pf-h8hq
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56333](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56333)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization security settings that allows authenticated org admins to persist invalid security policy state. Attackers can bypass backend validation by directly updating the public.orgs table from the browser, circumventing field-level validation checks for max_apikey_expiration_days and other security-sensitive configuration parameters.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Cap-go/capgo/security/advisories/GHSA-964v-j58v-2q3h
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56380](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56380)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter. Attackers can enumerate all creator email addresses by iterating through public channel names and extract them from the itunes:email and itunes:author RSS elements, enabling account takeover attempts and phishing campaigns.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/WWBN/AVideo/security/advisories/GHSA-w44x-v4c8-86f6
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56654](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56654)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Privilege Escalation via Access Token Scope Escalation in API
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/go-gitea/gitea/security/advisories/GHSA-683j-3ff6-hh2x
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56662](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56662)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF token, and the POST handler performed no token or request-origin verification. A remote attacker can host a page that auto-submits a forged POST to the update endpoint; when an authenticated administrator visits it, the server performs an attacker-directed download-and-deploy operation in the administrator's session — with no further interaction. Because the deployed content is executed (see the related ZIP-extraction advisory), this yields remote code execution. The url field is additionally written into the form unescaped, providing a secondary HTML-injection sink via a malicious upgrade.json. This issue has been patched in version 1.5.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-2rxv-4g4m-573w
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56677](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56677)
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js without restricting private or loopback destinations, allowing unauthenticated attackers when dashboard login is disabled to scan internal services and reflect OIDC discovery fields including token_endpoint and jwks_uri.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56679](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56679)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
9Router is an AI router & token saver. Prior to 0.5.4, the PATCH /api/settings endpoint writes the entire request body to persistent settings without a field whitelist, allowing an authenticated user to set security-critical fields such as requireLogin and disable authentication for the whole application, exposing protected routes such as /api/keys and /api/providers to unauthenticated access. This issue is reported as fixed in version 0.5.4.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/decolua/9router/security/advisories/GHSA-vmjq-hvgq-2wv4
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56706](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56706)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (format (rand XOR secret):rand), allowing anyone who observes a single CSRF token (e.g., via network sniffing, log files, Referrer header, or XSS) to recover the session secret with a single XOR operation and forge unlimited valid tokens. The implementation is further weakened by a low-entropy session token (rand(1,1e6), ~20 bits) that permits blind brute-force, and by use of loose comparison (==) in token verification, enabling PHP type juggling. Exploitation enables cross-site request forgery against authenticated sessions, including execution of arbitrary SQL queries.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/vrana/adminer/security/advisories/GHSA-33j4-hc95-pggg
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-56709](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56709)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail() function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the require_trusted_host protection which only covers password reset flows.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/getgrav/grav/security/advisories/GHSA-69vf-mjxw-x79j
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56736)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user (or low-privileged registered user) to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a user-submitted FAQ entry. This leads to admin account takeover via session theft. The vulnerability exists because `html_entity_decode()` converts HTML entities into executable HTML after `strip_tags()` has already passed them through, and the admin template renders the content with Twig's `|raw` filter without any output sanitization. Version 4.2.0-alpha fixes the issue.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pgwp-vc7q-cvj3
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56737](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56737)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID and a valid or brute-forced six-digit TOTP code without first authenticating with the account password, allowing takeover of any 2FA-enabled account, including administrator accounts. Version 4.1.6 is patched by binding TOTP verification to a session established after successful password authentication and limiting failed TOTP attempts. No official workaround is documented; affected installations should upgrade to 4.1.6 or later.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56770](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56770)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote attackers can crash services or vessel systems by sending crafted AIVDM sentences over VHF marine radio or IP feeds, causing out-of-bounds memory access and potential corruption.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/schwehr/libais/issues/263
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Allocation of Resources Without Limits or Throttling vulnerability in elixir-min
|
||||
|
||||
#### Reference
|
||||
- https://cna.erlef.org/cves/CVE-2026-56810.html
|
||||
- https://github.com/elixir-mint/mint/security/advisories/GHSA-c59h-fq4p-r36r
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56825](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56825)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/CollectionProducts.php exposes Action::make('delete') and DeleteBulkAction::make() without delete_collections authorization, while public Collection $collection remains client mutable because it lacks the Livewire Locked attribute. An authenticated staff user with only browse_collections can invoke a Livewire removal action, substitute an arbitrary collection identifier, and detach selected products or empty the collection. This can disrupt catalog landing pages and promotions associated with the targeted collection. This issue is fixed in version 2.9.2.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/shopperlabs/shopper/security/advisories/GHSA-2cg9-97gq-9mqp
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-56829](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56829)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction() without edit_product_variants authorization and leaves public $variant client mutable because it lacks the Livewire Locked attribute. Any authenticated admin-panel user, including staff with only browse_products, can select an arbitrary product variant and inventory location through component state, then submit a positive or negative quantity adjustment. This permits browse-only staff to inflate stock, reduce stock, or force out-of-stock states for variants outside the current page. This issue is fixed in version 2.9.2.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/shopperlabs/shopper/security/advisories/GHSA-g3f9-g5vj-p62f
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -14,6 +14,7 @@ A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/AgentDeskAI/browser-tools-mcp/issues/224
|
||||
- https://github.com/AgentDeskAI/browser-tools-mcp/issues/232
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-86817](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86817)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' password hashes and arbitrary site option values, in public output readable by unauthenticated visitors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/2a400958-7ed8-4358-a46a-2b8e0716a771/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-87536](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87536)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/554421904
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-91722](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91722)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/554953456
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-91724](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91724)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/552283275
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-91734](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91734)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/516780835
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-93549](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93549)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce protection for every route, allowing an attacker to perform a cross-site request forgery attack that creates a new administrator account using a logged-in administrator's session.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/77f413f6-8753-4c83-8623-00ad7a1dcaff/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-95293](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95293)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/550953039
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-97332](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97332)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private files directly.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d6a144b3-84e3-43eb-92d3-fd4505dd0e1c/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -8755,7 +8755,9 @@ CVE-2007-2424 - https://www.exploit-db.com/exploits/3818
|
||||
CVE-2007-2425 - https://www.exploit-db.com/exploits/3817
|
||||
CVE-2007-2426 - https://www.exploit-db.com/exploits/3814
|
||||
CVE-2007-2427 - https://www.exploit-db.com/exploits/3813
|
||||
CVE-2007-2430 - http://sourceforge.net/forum/forum.php?forum_id=690912
|
||||
CVE-2007-2430 - https://www.exploit-db.com/exploits/3816
|
||||
CVE-2007-2431 - http://sourceforge.net/forum/forum.php?forum_id=690912
|
||||
CVE-2007-2431 - https://www.exploit-db.com/exploits/3816
|
||||
CVE-2007-2438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9876
|
||||
CVE-2007-2442 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt
|
||||
@@ -10027,6 +10029,7 @@ CVE-2007-4620 - http://community.ca.com/blogs/casecurityresponseblog/archive/200
|
||||
CVE-2007-4627 - https://www.exploit-db.com/exploits/4338
|
||||
CVE-2007-4628 - https://www.exploit-db.com/exploits/4339
|
||||
CVE-2007-4630 - http://securityreason.com/securityalert/3080
|
||||
CVE-2007-4631 - http://sourceforge.net/project/shownotes.php?release_id=538002&group_id=139897
|
||||
CVE-2007-4636 - https://www.exploit-db.com/exploits/4340
|
||||
CVE-2007-4637 - https://www.exploit-db.com/exploits/4336
|
||||
CVE-2007-4638 - http://securityreason.com/securityalert/3086
|
||||
@@ -41590,6 +41593,7 @@ CVE-2015-2789 - http://www.exploit-db.com/exploits/36390
|
||||
CVE-2015-2789 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php
|
||||
CVE-2015-2790 - http://www.exploit-db.com/exploits/36334
|
||||
CVE-2015-2790 - http://www.exploit-db.com/exploits/36335
|
||||
CVE-2015-2790 - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-23
|
||||
CVE-2015-2791 - http://klikki.fi/adv/wpml.html
|
||||
CVE-2015-2791 - http://packetstormsecurity.com/files/130810/WordPress-WPML-XSS-Deletion-SQL-Injection.html
|
||||
CVE-2015-2792 - http://klikki.fi/adv/wpml.html
|
||||
@@ -42062,6 +42066,7 @@ CVE-2015-3629 - http://packetstormsecurity.com/files/131835/Docker-Privilege-Esc
|
||||
CVE-2015-3630 - http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html
|
||||
CVE-2015-3631 - http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html
|
||||
CVE-2015-3632 - http://packetstormsecurity.com/files/131685/Foxit-Reader-7.1.3.320-Memory-Corruption.html
|
||||
CVE-2015-3632 - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-27
|
||||
CVE-2015-3632 - https://www.exploit-db.com/exploits/36859/
|
||||
CVE-2015-3636 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
|
||||
CVE-2015-3636 - http://www.ubuntu.com/usn/USN-2632-1
|
||||
@@ -88595,10 +88600,12 @@ CVE-2021-21468 - http://seclists.org/fulldisclosure/2022/May/42
|
||||
CVE-2021-2147 - https://www.oracle.com/security-alerts/cpuapr2021.html
|
||||
CVE-2021-21473 - http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html
|
||||
CVE-2021-21473 - http://seclists.org/fulldisclosure/2022/May/42
|
||||
CVE-2021-21473 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-21480 - http://packetstormsecurity.com/files/163164/SAP-XMII-Remote-Code-Execution.html
|
||||
CVE-2021-21480 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
|
||||
CVE-2021-21489 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
|
||||
CVE-2021-2149 - https://www.oracle.com/security-alerts/cpuapr2021.html
|
||||
CVE-2021-21490 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-21495 - https://gist.github.com/alacerda/98853283be6009e75b7d94968d50b88e
|
||||
CVE-2021-2150 - https://www.oracle.com/security-alerts/cpuapr2021.html
|
||||
CVE-2021-21503 - https://www.dell.com/support/kbdoc/000183717
|
||||
@@ -91804,24 +91811,52 @@ CVE-2021-27595 - https://launchpad.support.sap.com/#/notes/3035472
|
||||
CVE-2021-27596 - https://launchpad.support.sap.com/#/notes/3035472
|
||||
CVE-2021-27597 - http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP-Gateway-Memory-Corruption.html
|
||||
CVE-2021-27597 - https://launchpad.support.sap.com/#/notes/3020209
|
||||
CVE-2021-27597 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27606 - http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
CVE-2021-27606 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27607 - http://packetstormsecurity.com/files/164591/SAP-NetWeaver-ABAP-Dispatcher-Service-Memory-Corruption.html
|
||||
CVE-2021-27607 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27610 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27615 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27620 - http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
CVE-2021-27620 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27621 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27622 - http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
CVE-2021-27622 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27623 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27624 - http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
CVE-2021-27624 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27625 - http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
CVE-2021-27625 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27626 - http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
CVE-2021-27626 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27627 - http://packetstormsecurity.com/files/164598/SAP-NetWeaver-ABAP-IGS-Memory-Corruption.html
|
||||
CVE-2021-27627 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27628 - http://packetstormsecurity.com/files/164591/SAP-NetWeaver-ABAP-Dispatcher-Service-Memory-Corruption.html
|
||||
CVE-2021-27628 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27629 - http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
CVE-2021-27629 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27630 - http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
CVE-2021-27630 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27631 - http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
CVE-2021-27631 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27632 - http://packetstormsecurity.com/files/164595/SAP-NetWeaver-ABAP-Enqueue-Memory-Corruption.html
|
||||
CVE-2021-27632 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27633 - http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP-Gateway-Memory-Corruption.html
|
||||
CVE-2021-27633 - https://launchpad.support.sap.com/#/notes/3020209
|
||||
CVE-2021-27633 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27634 - http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP-Gateway-Memory-Corruption.html
|
||||
CVE-2021-27634 - https://launchpad.support.sap.com/#/notes/3020209
|
||||
CVE-2021-27634 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27635 - http://packetstormsecurity.com/files/164592/SAP-JAVA-NetWeaver-System-Connections-XML-Injection.html
|
||||
CVE-2021-27635 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27637 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27638 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27639 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27640 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27641 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27642 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27643 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-27656 - https://www.johnsoncontrols.com/cyber-solutions/security-advisories
|
||||
CVE-2021-27657 - https://www.johnsoncontrols.com/cyber-solutions/security-advisories
|
||||
CVE-2021-27658 - https://www.johnsoncontrols.com/cyber-solutions/security-advisories
|
||||
@@ -93585,6 +93620,14 @@ CVE-2021-33618 - https://trovent.io/security-advisory-2105-02
|
||||
CVE-2021-33622 - https://medium.com/sylabs
|
||||
CVE-2021-33624 - https://github.com/benschlueter/CVE-2021-33624
|
||||
CVE-2021-33655 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4
|
||||
CVE-2021-33659 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33660 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33661 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33662 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33663 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33664 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33665 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33666 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
|
||||
CVE-2021-33670 - http://packetstormsecurity.com/files/166965/SAP-NetWeaver-Java-Denial-Of-Service.html
|
||||
CVE-2021-33672 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
|
||||
CVE-2021-33673 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
|
||||
@@ -115810,6 +115853,7 @@ CVE-2023-39136 - https://github.com/ZipArchive/ZipArchive/issues/680
|
||||
CVE-2023-39136 - https://ostorlab.co/vulndb/advisory/OVE-2023-2
|
||||
CVE-2023-39137 - https://blog.ostorlab.co/zip-packages-exploitation.html
|
||||
CVE-2023-39137 - https://github.com/brendan-duncan/archive/issues/266
|
||||
CVE-2023-39137 - https://ostorlab.co/vulndb/advisory/OVE-2023-3
|
||||
CVE-2023-39138 - https://blog.ostorlab.co/zip-packages-exploitation.html
|
||||
CVE-2023-39139 - https://blog.ostorlab.co/zip-packages-exploitation.html
|
||||
CVE-2023-39139 - https://ostorlab.co/vulndb/advisory/OVE-2023-5
|
||||
@@ -120285,6 +120329,7 @@ CVE-2024-0989 - https://vuldb.com/?id.252254
|
||||
CVE-2024-0998 - https://vuldb.com/?id.252267
|
||||
CVE-2024-10004 - https://bugzilla.mozilla.org/show_bug.cgi?id=1904885
|
||||
CVE-2024-10009 - https://wpscan.com/vulnerability/c2b1f9f4-d5f3-4975-afd1-50eaf193e2ab/
|
||||
CVE-2024-1001 - https://vuldb.com/?ctiid.252270
|
||||
CVE-2024-1001 - https://vuldb.com/?id.252270
|
||||
CVE-2024-10010 - https://wpscan.com/vulnerability/8a258d33-a354-4cbb-bfcb-31b7f1b1a036/
|
||||
CVE-2024-10021 - https://gist.github.com/higordiego/439f2af836c2c7d6075ba9de2e1169da
|
||||
@@ -138513,6 +138558,7 @@ CVE-2025-45467 - https://github.com/zgsnj123/CVE-2025-45467/tree/main
|
||||
CVE-2025-4547 - https://github.com/csehacademy/CVEs/blob/main/Web-based%20Pharmacy%20Product%20Management%20System%20-%20Stored%20XSS.md
|
||||
CVE-2025-4547 - https://www.sourcecodester.com/
|
||||
CVE-2025-4548 - https://github.com/jhs1121/cve/issues/1
|
||||
CVE-2025-45480 - https://github.com/floodlight/floodlight/issues/873
|
||||
CVE-2025-4549 - https://github.com/jhs1121/cve/issues/3
|
||||
CVE-2025-4550 - https://github.com/y77-88/myCVE/issues/7
|
||||
CVE-2025-4551 - https://github.com/uglory-gll/javasec/blob/main/continew-admin.md#1stored-cross-site-scripting
|
||||
@@ -139729,6 +139775,10 @@ CVE-2025-52572 - https://github.com/hikariatama/Hikka/security/advisories/GHSA-7
|
||||
CVE-2025-52575 - https://github.com/espocrm/espocrm/security/advisories/GHSA-rjm8-77fr-4f3v
|
||||
CVE-2025-52576 - https://github.com/kanboard/kanboard/security/advisories/GHSA-qw57-7cx6-wvp7
|
||||
CVE-2025-52586 - https://eg4electronics.com/contact/
|
||||
CVE-2025-52598 - https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
CVE-2025-52599 - https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
CVE-2025-52600 - https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
CVE-2025-52601 - https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
CVE-2025-5264 - https://bugzilla.mozilla.org/show_bug.cgi?id=1950001
|
||||
CVE-2025-5265 - https://bugzilla.mozilla.org/show_bug.cgi?id=1962301
|
||||
CVE-2025-52664 - http://seclists.org/fulldisclosure/2025/Oct/21
|
||||
@@ -144124,6 +144174,7 @@ CVE-2025-8046 - https://wpscan.com/vulnerability/14a53525-8c08-472d-bae4-b3f1436
|
||||
CVE-2025-8047 - https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/
|
||||
CVE-2025-8066 - https://fluidattacks.com/advisories/cypress
|
||||
CVE-2025-8067 - http://www.openwall.com/lists/oss-security/2025/08/28/1
|
||||
CVE-2025-8075 - https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
|
||||
CVE-2025-8082 - https://www.herodevs.com/vulnerability-directory/cve-2025-8082
|
||||
CVE-2025-8083 - https://www.herodevs.com/vulnerability-directory/cve-2025-8083
|
||||
CVE-2025-8085 - https://wpscan.com/vulnerability/f42c37bb-1ae0-49ab-bd81-7864dff0fcff/
|
||||
@@ -145818,6 +145869,7 @@ CVE-2026-103001 - https://github.com/jpadilla/pyjwt/security/advisories/GHSA-gvp
|
||||
CVE-2026-10302 - https://github.com/ltranquility/vuln_submit/issues/10
|
||||
CVE-2026-10303 - https://remyhax.xyz/posts/reproducing-lawful-tls-wiretapping/
|
||||
CVE-2026-103040 - https://github.com/ModelTC/LightLLM/issues/1597
|
||||
CVE-2026-103041 - https://github.com/ModelTC/LightLLM/issues/1596
|
||||
CVE-2026-103042 - https://github.com/ModelTC/LightLLM/issues/1595
|
||||
CVE-2026-103043 - https://gist.github.com/mmadersbacher/46050b4224eb979431986cdef1dd2ad3
|
||||
CVE-2026-103053 - https://github.com/beenuar/AiSOC/commit/dac39723404130312daba15d42d19114f09f75b2
|
||||
@@ -145835,11 +145887,14 @@ CVE-2026-103115 - https://github.com/OS4ED/openSIS-Classic/issues/475
|
||||
CVE-2026-103116 - https://github.com/OS4ED/openSIS-Classic/issues/476
|
||||
CVE-2026-103117 - https://github.com/OS4ED/openSIS-Classic/issues/477
|
||||
CVE-2026-103222 - https://github.com/Blosc/c-blosc2/commit/fe2964d114d97847f56570a0ab2be2c57ccbeedc
|
||||
CVE-2026-103227 - https://github.com/gpac/gpac/issues/3876
|
||||
CVE-2026-103227 - https://github.com/gpac/gpac/pull/3879
|
||||
CVE-2026-103241 - https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e
|
||||
CVE-2026-103242 - https://access.redhat.com/security/cve/CVE-2026-103242
|
||||
CVE-2026-103243 - https://github.com/ModelTC/LightLLM/issues/1608
|
||||
CVE-2026-103244 - https://github.com/sgoudelis/ground-station/security/advisories/GHSA-3mqj-q84c-crjq
|
||||
CVE-2026-103263 - https://github.com/tornadoweb/tornado/security/advisories/GHSA-c2m8-h5v5-343r
|
||||
CVE-2026-103270 - https://github.com/ModelTC/LightLLM/issues/1609
|
||||
CVE-2026-103293 - https://wpscan.com/vulnerability/810447c9-4a8b-4d80-af7c-2f5fa8b13609/
|
||||
CVE-2026-103395 - https://github.com/ModelTC/LightLLM/issues/1610
|
||||
CVE-2026-103396 - https://github.com/mlogclub/bbs-go/issues/303
|
||||
@@ -145870,12 +145925,15 @@ CVE-2026-103686 - https://github.com/rhukster/dom-sanitizer/security/advisories/
|
||||
CVE-2026-103687 - https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-cjfg-j8jp-5xvc
|
||||
CVE-2026-103690 - https://github.com/ltranquility/submit_repository/issues/18
|
||||
CVE-2026-103757 - https://github.com/Budibase/budibase/security/advisories/GHSA-3c52-v5v2-3r56
|
||||
CVE-2026-103760 - https://github.com/kvcache-ai/Mooncake/issues/4443
|
||||
CVE-2026-103761 - https://github.com/kvcache-ai/Mooncake/issues/4445
|
||||
CVE-2026-103762 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2mrf-mx66-vv6g
|
||||
CVE-2026-103763 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-ccxp-q3vg-jvgj
|
||||
CVE-2026-103764 - https://github.com/kvcache-ai/Mooncake/issues/4441
|
||||
CVE-2026-103765 - https://github.com/kvcache-ai/Mooncake/issues/4444
|
||||
CVE-2026-103766 - https://hackmd.io/@leediay/sqli-via-delete-ads-clipbucketv5
|
||||
CVE-2026-104118 - https://wpscan.com/vulnerability/d94ebc87-c404-4b30-8291-26c4bc2eb63b/
|
||||
CVE-2026-104119 - https://wpscan.com/vulnerability/d6ee7720-9c2d-48b3-b238-0da4fed398a3/
|
||||
CVE-2026-1046 - https://mattermost.com/security-updates
|
||||
CVE-2026-104733 - https://www.nsideattacklogic.de/advisories/NSIDE-SA-2026-004/
|
||||
CVE-2026-1050 - https://github.com/risesoft-y9/Digital-Infrastructure/issues/2
|
||||
@@ -147877,6 +147935,7 @@ CVE-2026-16360 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=2022635%2C20280
|
||||
CVE-2026-1637 - https://github.com/LX-LX88/cve/issues/25
|
||||
CVE-2026-16373 - https://bugzilla.mozilla.org/show_bug.cgi?id=2021964
|
||||
CVE-2026-1638 - https://github.com/LX-LX88/cve/issues/26
|
||||
CVE-2026-16389 - https://bugzilla.mozilla.org/show_bug.cgi?id=2043887
|
||||
CVE-2026-16394 - https://bugzilla.mozilla.org/show_bug.cgi?id=2046748
|
||||
CVE-2026-16415 - https://issues.chromium.org/issues/519244446
|
||||
CVE-2026-16417 - https://issues.chromium.org/issues/521491024
|
||||
@@ -148050,6 +148109,7 @@ CVE-2026-16992 - https://wpscan.com/vulnerability/d85653f7-8556-4bac-8860-fbacc6
|
||||
CVE-2026-16993 - https://wpscan.com/vulnerability/efcf57b5-f35e-4943-8a49-350aa8bf1b8a/
|
||||
CVE-2026-1700 - https://github.com/jiahao412/CVE/issues/3
|
||||
CVE-2026-17004 - https://www.ibm.com/support/pages/node/7283578
|
||||
CVE-2026-17005 - https://wpscan.com/vulnerability/e3973475-18c4-46a0-b0ca-24e4d2cd58ca/
|
||||
CVE-2026-17008 - https://wpscan.com/vulnerability/605c0c65-6258-411a-a028-f3de25613bdf/
|
||||
CVE-2026-1701 - https://github.com/ltranquility/CVE/issues/34
|
||||
CVE-2026-17010 - https://wpscan.com/vulnerability/1e760dbf-7efc-4511-9a05-2d1476eb3dfb/
|
||||
@@ -155976,6 +156036,7 @@ CVE-2026-56222 - https://github.com/Cap-go/capgo/security/advisories/GHSA-5r52-m
|
||||
CVE-2026-56223 - https://github.com/Cap-go/capgo/security/advisories/GHSA-jhjh-vp9p-54fg
|
||||
CVE-2026-56224 - https://github.com/Cap-go/capgo/security/advisories/GHSA-83f5-439g-pwmj
|
||||
CVE-2026-56225 - https://github.com/Cap-go/capgo/security/advisories/GHSA-hwc7-j2p6-43xp
|
||||
CVE-2026-56226 - https://github.com/Cap-go/capgo/security/advisories/GHSA-m7mm-35v3-82f4
|
||||
CVE-2026-56227 - https://github.com/Cap-go/capgo/security/advisories/GHSA-48hc-53hv-6x3f
|
||||
CVE-2026-56229 - https://github.com/Cap-go/capgo/security/advisories/GHSA-2fw5-mcrx-wcqw
|
||||
CVE-2026-56230 - https://github.com/Cap-go/capgo/security/advisories/GHSA-cppm-733w-hg86
|
||||
@@ -155991,6 +156052,7 @@ CVE-2026-56240 - https://github.com/Cap-go/capgo/security/advisories/GHSA-g9fc-8
|
||||
CVE-2026-56241 - https://github.com/Cap-go/capgo/security/advisories/GHSA-rvvc-rvxv-qcrh
|
||||
CVE-2026-56243 - https://github.com/Cap-go/capgo/security/advisories/GHSA-6g74-8cpq-g2c8
|
||||
CVE-2026-56244 - https://github.com/Cap-go/capgo/security/advisories/GHSA-qrrx-x3qf-x87v
|
||||
CVE-2026-56245 - https://github.com/Cap-go/capgo/security/advisories/GHSA-42f8-v563-5763
|
||||
CVE-2026-56247 - https://github.com/Cap-go/capgo/security/advisories/GHSA-55q2-p3m2-x66x
|
||||
CVE-2026-56248 - https://github.com/Cap-go/capgo/security/advisories/GHSA-5vgv-rqj5-5748
|
||||
CVE-2026-56249 - https://github.com/Cap-go/capgo/security/advisories/GHSA-vj24-j594-3wv3
|
||||
@@ -156024,10 +156086,12 @@ CVE-2026-56296 - https://github.com/Cap-go/capgo/security/advisories/GHSA-fmm3-3
|
||||
CVE-2026-56297 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mv2-5q57-2v8h
|
||||
CVE-2026-56299 - https://github.com/Cap-go/capgo/security/advisories/GHSA-6c7m-4223-446j
|
||||
CVE-2026-56300 - https://github.com/Cap-go/capgo/security/advisories/GHSA-7r6g-whg3-5mm4
|
||||
CVE-2026-56302 - https://github.com/Cap-go/capgo/security/advisories/GHSA-8hq3-gg3m-vwvr
|
||||
CVE-2026-56303 - https://github.com/Cap-go/capgo/security/advisories/GHSA-2xjq-h43m-592f
|
||||
CVE-2026-56304 - https://github.com/mmaitre314/picklescan/security/advisories/GHSA-m7j5-r2p5-c39r
|
||||
CVE-2026-56306 - https://github.com/Cap-go/capgo/security/advisories/GHSA-42vv-8j94-24wj
|
||||
CVE-2026-56307 - https://github.com/Cap-go/capgo/security/advisories/GHSA-8p6w-x7jg-v4xq
|
||||
CVE-2026-56309 - https://github.com/Cap-go/capgo/security/advisories/GHSA-q52j-ggvx-cr4v
|
||||
CVE-2026-5631 - https://github.com/assafelovic/gpt-researcher/issues/1694
|
||||
CVE-2026-56310 - https://github.com/Cap-go/capgo/security/advisories/GHSA-q7xv-p34q-v365
|
||||
CVE-2026-56311 - https://github.com/Cap-go/capgo/security/advisories/GHSA-v3jp-r95g-x4mm
|
||||
@@ -156042,10 +156106,13 @@ CVE-2026-56320 - https://github.com/Cap-go/capgo/security/advisories/GHSA-mhrc-q
|
||||
CVE-2026-56321 - https://github.com/Cap-go/capgo/security/advisories/GHSA-6c9f-9v99-26ww
|
||||
CVE-2026-56322 - https://github.com/Cap-go/capgo/security/advisories/GHSA-pgmr-gw53-7f77
|
||||
CVE-2026-56323 - https://github.com/Cap-go/capgo/security/advisories/GHSA-469v-6vw5-hxpq
|
||||
CVE-2026-56325 - https://github.com/Cap-go/capgo/security/advisories/GHSA-cw88-ch2j-8vqj
|
||||
CVE-2026-56327 - https://github.com/Cap-go/capgo/security/advisories/GHSA-35q8-ghfg-vp6m
|
||||
CVE-2026-56328 - https://github.com/Cap-go/capgo/security/advisories/GHSA-3cmp-pm5x-8464
|
||||
CVE-2026-56329 - https://github.com/Cap-go/capgo/security/advisories/GHSA-76qq-gg2p-pwwj
|
||||
CVE-2026-56330 - https://github.com/Cap-go/capgo/security/advisories/GHSA-grc7-98pf-h8hq
|
||||
CVE-2026-56331 - https://github.com/Cap-go/capgo/security/advisories/GHSA-34p8-fh3m-376x
|
||||
CVE-2026-56333 - https://github.com/Cap-go/capgo/security/advisories/GHSA-964v-j58v-2q3h
|
||||
CVE-2026-56334 - https://github.com/Cap-go/capgo/security/advisories/GHSA-gc46-h5j6-qp6q
|
||||
CVE-2026-56335 - https://github.com/Cap-go/capgo/security/advisories/GHSA-ph9c-vwjq-pqhj
|
||||
CVE-2026-56337 - https://github.com/Cap-go/capgo/security/advisories/GHSA-wjqr-gmx8-jj56
|
||||
@@ -156065,6 +156132,7 @@ CVE-2026-56364 - https://github.com/ImageMagick/ImageMagick/security/advisories/
|
||||
CVE-2026-5637 - https://github.com/eqiya17/collection-of-vulnerabilities/issues/13
|
||||
CVE-2026-5638 - https://github.com/HerikLyma/CPPWebFramework/issues/40
|
||||
CVE-2026-5638 - https://github.com/HerikLyma/CPPWebFramework/issues/40#issue-4118436068
|
||||
CVE-2026-56380 - https://github.com/WWBN/AVideo/security/advisories/GHSA-w44x-v4c8-86f6
|
||||
CVE-2026-56381 - https://github.com/craftcms/cms/security/advisories/GHSA-g3hp-vvqf-8vw6
|
||||
CVE-2026-56382 - https://github.com/craftcms/cms/security/advisories/GHSA-86vw-x4ww-x467
|
||||
CVE-2026-5639 - https://github.com/f1rstb100d/CVE/issues/17
|
||||
@@ -156096,13 +156164,17 @@ CVE-2026-5663 - https://github.com/DCMTK/dcmtk/commit/edbb085e45788dccaf0e64d715
|
||||
CVE-2026-5663 - https://machinespirits.com/advisory/2e1627/
|
||||
CVE-2026-5663 - https://vuldb.com/vuln/355486/cti
|
||||
CVE-2026-5665 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20in%20Online%20FIR%20System%20PHP%20email%20Parameter.md
|
||||
CVE-2026-56654 - https://github.com/go-gitea/gitea/security/advisories/GHSA-683j-3ff6-hh2x
|
||||
CVE-2026-56657 - https://github.com/go-gitea/gitea/security/advisories/GHSA-4xjf-493q-98p3
|
||||
CVE-2026-5666 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20FIR%20System%20PHP%20Exposed%20Database%20Backup.md
|
||||
CVE-2026-56662 - https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-2rxv-4g4m-573w
|
||||
CVE-2026-56669 - https://gist.github.com/jviide/ea040eabe7bac058326174e2cd42dfd9
|
||||
CVE-2026-56669 - https://github.com/elysiajs/elysia/security/advisories/GHSA-9643-4qgh-g8mx
|
||||
CVE-2026-56675 - https://github.com/decolua/9router/security/advisories/GHSA-x5c9-v98j-722r
|
||||
CVE-2026-56676 - https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx
|
||||
CVE-2026-56677 - https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx
|
||||
CVE-2026-56678 - https://github.com/decolua/9router/security/advisories/GHSA-6mwv-4mrm-5p3m
|
||||
CVE-2026-56679 - https://github.com/decolua/9router/security/advisories/GHSA-vmjq-hvgq-2wv4
|
||||
CVE-2026-5668 - https://vuldb.com/vuln/355490
|
||||
CVE-2026-5668 - https://vuldb.com/vuln/355490/cti
|
||||
CVE-2026-56681 - https://github.com/decolua/9router/security/advisories/GHSA-5mj8-gf6m-fhw8
|
||||
@@ -156113,11 +156185,15 @@ CVE-2026-5670 - https://github.com/Cyber-III/Student-Management-System/issues/24
|
||||
CVE-2026-56701 - https://github.com/getgrav/grav/security/advisories/GHSA-3446-6mgw-f79p
|
||||
CVE-2026-56702 - https://github.com/vrana/adminer/security/advisories/GHSA-vcvj-rwwm-x6g5
|
||||
CVE-2026-56705 - https://github.com/vrana/adminer/security/advisories/GHSA-r4x9-5m63-3vxw
|
||||
CVE-2026-56706 - https://github.com/vrana/adminer/security/advisories/GHSA-33j4-hc95-pggg
|
||||
CVE-2026-56709 - https://github.com/getgrav/grav/security/advisories/GHSA-69vf-mjxw-x79j
|
||||
CVE-2026-5671 - https://github.com/Cyber-III/Student-Management-System/issues/242
|
||||
CVE-2026-5671 - https://vuldb.com/submit/786028
|
||||
CVE-2026-5672 - https://github.com/Czhan1156/Czhan/issues/1
|
||||
CVE-2026-56722 - https://github.com/dompdf/dompdf/security/advisories/GHSA-cx96-42px-69fm
|
||||
CVE-2026-5673 - https://github.com/xiph/theora/issues/24
|
||||
CVE-2026-56736 - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pgwp-vc7q-cvj3
|
||||
CVE-2026-56737 - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5
|
||||
CVE-2026-56738 - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-rw77-vq4g-x3hp
|
||||
CVE-2026-56740 - https://github.com/jline/jline3/security/advisories/GHSA-47qp-hqvx-6r3f
|
||||
CVE-2026-56741 - https://github.com/jline/jline3/security/advisories/GHSA-2r2c-cx56-8933
|
||||
@@ -156127,6 +156203,7 @@ CVE-2026-5676 - https://github.com/skeetabc/CVE-TOTOLINK-A800R/blob/main/vuln1_a
|
||||
CVE-2026-56765 - https://github.com/go-vikunja/vikunja/security/advisories/GHSA-2pv8-4c52-mf8j
|
||||
CVE-2026-56769 - https://github.com/hcengineering/platform/issues/10892
|
||||
CVE-2026-5677 - https://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_184/README.md
|
||||
CVE-2026-56770 - https://github.com/schwehr/libais/issues/263
|
||||
CVE-2026-56779 - https://github.com/1Panel-dev/MaxKB/issues/6272
|
||||
CVE-2026-5678 - https://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_185/README.md
|
||||
CVE-2026-56781 - https://github.com/teableio/teable/issues/3335
|
||||
@@ -156145,6 +156222,7 @@ CVE-2026-5680 - https://bugzilla.redhat.com/show_bug.cgi?id=2455350
|
||||
CVE-2026-5681 - https://github.com/ltranquility/submit/issues/6
|
||||
CVE-2026-5681 - https://vuldb.com/vuln/355508/cti
|
||||
CVE-2026-56810 - https://cna.erlef.org/cves/CVE-2026-56810.html
|
||||
CVE-2026-56810 - https://github.com/elixir-mint/mint/security/advisories/GHSA-c59h-fq4p-r36r
|
||||
CVE-2026-56811 - https://cna.erlef.org/cves/CVE-2026-56811.html
|
||||
CVE-2026-56812 - https://cna.erlef.org/cves/CVE-2026-56812.html
|
||||
CVE-2026-56812 - https://github.com/phoenixframework/phoenix/security/advisories/GHSA-63mc-hw7g-86rr
|
||||
@@ -156158,7 +156236,9 @@ CVE-2026-56820 - https://github.com/netty/netty/security/advisories/GHSA-272m-gc
|
||||
CVE-2026-56821 - https://github.com/netty/netty/security/advisories/GHSA-g7hg-vrcf-mvmr
|
||||
CVE-2026-56822 - https://github.com/netty/netty/security/advisories/GHSA-wc96-39fc-566f
|
||||
CVE-2026-56823 - https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-rq9m-xvc7-v9h6
|
||||
CVE-2026-56825 - https://github.com/shopperlabs/shopper/security/advisories/GHSA-2cg9-97gq-9mqp
|
||||
CVE-2026-56827 - https://github.com/shopperlabs/shopper/security/advisories/GHSA-243p-f3cv-c5wh
|
||||
CVE-2026-56829 - https://github.com/shopperlabs/shopper/security/advisories/GHSA-g3f9-g5vj-p62f
|
||||
CVE-2026-5683 - https://github.com/cve-a/lvdan/issues/1
|
||||
CVE-2026-5684 - https://github.com/cve-a/lvdan/issues/2
|
||||
CVE-2026-5685 - https://github.com/cve-a/lvdan/issues/3
|
||||
@@ -158626,6 +158706,7 @@ CVE-2026-70622 - https://gist.github.com/thesmartshadow/e7dac0bb690ee17b9cc14215
|
||||
CVE-2026-70626 - https://github.com/nltk/nltk/security/advisories/GHSA-r6gq-whwq-mvg9
|
||||
CVE-2026-7063 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20in%20Employee%20Management%20System%20PHP%20mailuid%20Parameter.md
|
||||
CVE-2026-70637 - https://github.com/hfiref0x/LightFTP/issues/75
|
||||
CVE-2026-7064 - https://github.com/AgentDeskAI/browser-tools-mcp/issues/224
|
||||
CVE-2026-7064 - https://github.com/AgentDeskAI/browser-tools-mcp/issues/232
|
||||
CVE-2026-7065 - https://github.com/BidingCC/BuildingAI/issues/110
|
||||
CVE-2026-70656 - https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-4c6j-p2cv-wf56
|
||||
@@ -161741,6 +161822,7 @@ CVE-2026-86812 - https://wpscan.com/vulnerability/fe8d76b2-6d57-49cc-9927-5231e1
|
||||
CVE-2026-86813 - https://wpscan.com/vulnerability/afda2a26-b965-42cb-85a8-4a4d83ec026e/
|
||||
CVE-2026-86814 - https://wpscan.com/vulnerability/f606cf7b-cef8-4b2c-819a-6d3e6adeacee/
|
||||
CVE-2026-86815 - https://wpscan.com/vulnerability/fa66c458-f14f-47bc-87e6-b603200ef8e9/
|
||||
CVE-2026-86817 - https://wpscan.com/vulnerability/2a400958-7ed8-4358-a46a-2b8e0716a771/
|
||||
CVE-2026-86823 - https://wpscan.com/vulnerability/2db98679-24ca-494e-a8fd-f6417a0f1ea8/
|
||||
CVE-2026-86824 - https://wpscan.com/vulnerability/62ee25d9-ec38-402c-9959-37fd89708aca/
|
||||
CVE-2026-8683 - https://mattermost.com/security-updates
|
||||
@@ -161965,6 +162047,7 @@ CVE-2026-87531 - https://issues.chromium.org/issues/533597592
|
||||
CVE-2026-87532 - https://issues.chromium.org/issues/517369256
|
||||
CVE-2026-87533 - https://issues.chromium.org/issues/521620916
|
||||
CVE-2026-87534 - https://issues.chromium.org/issues/513134173
|
||||
CVE-2026-87536 - https://issues.chromium.org/issues/554421904
|
||||
CVE-2026-87540 - https://issues.chromium.org/issues/517721914
|
||||
CVE-2026-87541 - https://issues.chromium.org/issues/517156678
|
||||
CVE-2026-87542 - https://issues.chromium.org/issues/542756749
|
||||
@@ -162485,8 +162568,11 @@ CVE-2026-9122 - https://issues.chromium.org/issues/489579953
|
||||
CVE-2026-9125 - https://research.cleantalk.org/cve-2026-9125/
|
||||
CVE-2026-9126 - https://issues.chromium.org/issues/496280532
|
||||
CVE-2026-9162 - https://mattermost.com/security-updates
|
||||
CVE-2026-91722 - https://issues.chromium.org/issues/554953456
|
||||
CVE-2026-91724 - https://issues.chromium.org/issues/552283275
|
||||
CVE-2026-91731 - https://issues.chromium.org/issues/523554372
|
||||
CVE-2026-91732 - https://issues.chromium.org/issues/511062248
|
||||
CVE-2026-91734 - https://issues.chromium.org/issues/516780835
|
||||
CVE-2026-91735 - https://issues.chromium.org/issues/552416113
|
||||
CVE-2026-91752 - http://www.openwall.com/lists/oss-security/2026/09/16/16
|
||||
CVE-2026-91775 - https://fluidattacks.com/advisories/alone
|
||||
@@ -162652,6 +162738,7 @@ CVE-2026-93528 - https://wpscan.com/vulnerability/f691b9cc-7d17-4308-9646-db842d
|
||||
CVE-2026-9353 - https://gist.github.com/YLChen-007/82a3539d6358842e69dfaef0a9fcf14a
|
||||
CVE-2026-93531 - https://github.com/gedelumbung/HospitalManagement/issues/6
|
||||
CVE-2026-9354 - https://gist.github.com/YLChen-007/e90fb38ac03284176bae49898a3a46a4
|
||||
CVE-2026-93549 - https://wpscan.com/vulnerability/77f413f6-8753-4c83-8623-00ad7a1dcaff/
|
||||
CVE-2026-9355 - https://github.com/yan-124/yan/issues/3
|
||||
CVE-2026-93558 - https://bugzilla.redhat.com/show_bug.cgi?id=2536932
|
||||
CVE-2026-93562 - https://bugzilla.redhat.com/show_bug.cgi?id=2536951
|
||||
@@ -162814,6 +162901,7 @@ CVE-2026-95289 - https://issues.chromium.org/issues/549911100
|
||||
CVE-2026-9529 - https://github.com/LibreDWG/libredwg/issues/1247
|
||||
CVE-2026-95290 - https://issues.chromium.org/issues/536161355
|
||||
CVE-2026-95291 - https://issues.chromium.org/issues/543471693
|
||||
CVE-2026-95293 - https://issues.chromium.org/issues/550953039
|
||||
CVE-2026-95295 - https://issues.chromium.org/issues/517596255
|
||||
CVE-2026-95298 - https://issues.chromium.org/issues/520516206
|
||||
CVE-2026-9530 - https://github.com/LibreDWG/libredwg/issues/1248
|
||||
@@ -162966,6 +163054,7 @@ CVE-2026-97316 - https://wpscan.com/vulnerability/d9497ddd-c39c-4928-8660-f1c94e
|
||||
CVE-2026-97317 - https://wpscan.com/vulnerability/f8779fd4-f362-40c4-8df1-145620c69103/
|
||||
CVE-2026-97318 - https://wpscan.com/vulnerability/a171b0f1-b2d2-4482-b44f-bd4a1f3b223b/
|
||||
CVE-2026-97319 - https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/
|
||||
CVE-2026-97332 - https://wpscan.com/vulnerability/d6a144b3-84e3-43eb-92d3-fd4505dd0e1c/
|
||||
CVE-2026-97368 - https://aibot88.github.io/CVERequest/SpringBlade/issue2.html
|
||||
CVE-2026-97404 - https://launchpad.net/bugs/2164987
|
||||
CVE-2026-9759 - https://gitlab.com/wireshark/wireshark/-/work_items/21243
|
||||
|
||||
Reference in new issue
Block a user