Update Sun May 17 11:36:52 UTC 2026

2026-11-07 12:38:17 -10:00 · 2026-05-17 11:36:53 +00:00
1 parent 227e48b3bc
commit 8d443de240
@@ -0,0 +1,17 @@
+### [CVE-2020-37228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-37228)
+![](https://img.shields.io/static/v1?label=Product&message=iDS6%20DSSPro%20Digital%20Signage%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=6.2%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Restriction%20of%20Excessive%20Authentication%20Attempts&color=brightgreen)
+
+### Description
+
+iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retrieve valid CAPTCHA codes via the login endpoint and use them to perform brute-force attacks against user accounts.
+
+### POC
+
+#### Reference
+- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5607.php
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2020-37233](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-37233)
+![](https://img.shields.io/static/v1?label=Product&message=Buddypress&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=6.2.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')&color=brightgreen)
+
+### Description
+
+WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious script code through the figure parameter in wp:html blocks. Attackers can inject iframe elements with event handlers like onload that execute when administrators or privileged users preview or view the affected page content, enabling session hijacking and persistent phishing attacks.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/49061
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2020-37242](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-37242)
+![](https://img.shields.io/static/v1?label=Product&message=Ultimate%20Maps&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.1.12%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')&color=brightgreen)
+
+### Description
+
+Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or time-based blind SQL injection payloads to extract sensitive database information.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/49532
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -12,6 +12,7 @@ JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to

 #### Reference
 - http://packetstormsecurity.com/files/177162/JFrog-Artifactory-SQL-Injection.html
+- https://www.jfrog.com/confluence/display/JFROG/CVE-2021-3860%3A+Artifactory+Low+Privileged+Blind+SQL+Injection

 #### Github
 - https://github.com/4rdr/proofs
@@ -0,0 +1,17 @@
+### [CVE-2021-47952](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47952)
+![](https://img.shields.io/static/v1?label=Product&message=python%20jsonpickle&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.0.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')&color=brightgreen)
+
+### Description
+
+python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives that invoke the eval function during deserialization to execute system commands and arbitrary code.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/49585
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2021-47957](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47957)
+![](https://img.shields.io/static/v1?label=Product&message=Cookie%20Law%20Bar&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.2.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')&color=brightgreen)
+
+### Description
+
+Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized input to the Bar Message field. Attackers can inject script payloads through the plugin settings page that execute in the browsers of all WordPress users viewing the site, enabling cookie theft and sensitive data exfiltration.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/49905
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2021-47974](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47974)
+![](https://img.shields.io/static/v1?label=Product&message=VX%20Search&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=13.5.28%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Unquoted%20Search%20Path%20or%20Element&color=brightgreen)
+
+### Description
+
+VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search to execute arbitrary code with LocalSystem privileges when services restart.
+
+### POC
+
+#### Reference
+- https://www.exploit-db.com/exploits/50026
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -12,6 +12,7 @@ MASA CMS is an Enterprise Content Management platform based on open source techn
 ### POC

 #### Reference
+- https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-24rr-gwx3-jhqc
 - https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS
 - https://projectdiscovery.io/blog/hacking-apple-with-sql-injection?ref=projectdiscovery-io-blog-newsletter

@@ -0,0 +1,19 @@
+### [CVE-2024-32643](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32643)
+![](https://img.shields.io/static/v1?label=Product&message=MasaCMS&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=%3C%207.2.8%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%207.3.0%2C%20%3C%207.3.13%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%207.4.0%2C%20%3C%207.4.6%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-863%3A%20Incorrect%20Authorization&color=brightgreen)
+
+### Description
+
+Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, if the URL to the page is modified to include a /tag/ declaration, the CMS will render the page regardless of group restrictions. This vulnerability is fixed in 7.2.8, 7.3.13, and 7.4.6.
+
+### POC
+
+#### Reference
+- https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-f469-jh82-97fv
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2024-54192](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54192)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpedit_dlt_getplugin function at src/tcpedit/plugins/dlt_utils.c.
+
+### POC
+
+#### Reference
+- https://github.com/appneta/tcpreplay/issues/902
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -10,6 +10,7 @@ An API endpoint that should be limited to web application administrators is hidd
 ### POC

 #### Reference
+- http://seclists.org/fulldisclosure/2025/Jul/15
 - https://korelogic.com/Resources/Advisories/KL-001-2025-012.txt

 #### Github
@@ -10,6 +10,7 @@ An API endpoint that should be limited to web application administrators is hidd
 ### POC

 #### Reference
+- http://seclists.org/fulldisclosure/2025/Jul/18
 - https://korelogic.com/Resources/Advisories/KL-001-2025-015.txt

 #### Github
@@ -0,0 +1,17 @@
+### [CVE-2025-69690](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69690)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execute PHP code.
+
+### POC
+
+#### Reference
+- https://seclists.org/fulldisclosure/2026/Feb/16
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-69691](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69691)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code.
+
+### POC
+
+#### Reference
+- https://seclists.org/fulldisclosure/2026/Feb/16
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70094](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70094)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter.
+
+### POC
+
+#### Reference
+- https://github.com/hungnqdz/cve-research/blob/main/CVE-2025-70094.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70220](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70220)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70220
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70222)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70222
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70223](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70223)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70223
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70226](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70226)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70226
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70232](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70232)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70232
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70234](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70234)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70234
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70237](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70237)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70237
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70238](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70238)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard52.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70238
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70241](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70241)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70241
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70244](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70244)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70244
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70249)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard2.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70249
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70251](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70251)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70251
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70252](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70252)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.
+
+### POC
+
+#### Reference
+- https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70252
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70299](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70299)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.
+
+### POC
+
+#### Reference
+- https://github.com/zakkanijia/POC/blob/main/gpac_avi/GPAC_AVI_indx_heap_overflow.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70307](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70307)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
+
+### POC
+
+#### Reference
+- https://github.com/zakkanijia/POC/blob/main/gpac_boxDump/GPAC_tx3g.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70330](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70330)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled access violation and application crash, leading to a local denial-of-service condition when the crafted file is opened by a user.
+
+### POC
+
+#### Reference
+- https://github.com/TheMalwareGuardian/CVE-2025-70330
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2025-70342](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70342)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. This allows an unauthenticated attacker to intercept admin credentials entered during reinstall/erase operations via creating a named pipe.
+
+### POC
+
+#### Reference
+- https://github.com/grahampugh/erase-install/pull/574
+- https://github.com/malvector/CVE-2025-70342
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70347](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70347)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+An issue in mquickjs before commit 74b7e (2026-01-15) allows a local attacker to cause a denial of service via a crafted file to the get_mblock_size function at mquickjs.c.
+
+### POC
+
+#### Reference
+- https://github.com/bellard/mquickjs/issues/56
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -10,6 +10,7 @@ A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Imag
 ### POC

 #### Reference
+- https://github.com/ismaildawoodjee/vulnerability-research/security/advisories/GHSA-8xq6-hjhw-4983
 - https://www.sourcecodester.com/php/18572/modern-image-gallery-app-using-php-and-mysql-source-code.html

 #### Github
@@ -10,6 +10,7 @@ A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainChecker
 ### POC

 #### Reference
+- https://github.com/ismaildawoodjee/vulnerability-research/security/advisories/GHSA-chm7-vgf7-6f9p
 - https://www.sourcecodester.com/php/18500/domain-availability-checker-using-php-and-javascript-source-code.html

 #### Github
@@ -0,0 +1,18 @@
+### [CVE-2025-70559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70559)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. The library uses Python pickle to deserialize CMap cache files without validation. An attacker with the ability to place a malicious pickle file in a location accessible to the application can trigger arbitrary code execution or privilege escalation when the file is loaded by a trusted process. This is caused by an incomplete patch to CVE-2025-64512.
+
+### POC
+
+#### Reference
+- https://github.com/advisories/GHSA-f83h-ghpp-7wcc
+- https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-f83h-ghpp-7wcc
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70646](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70646)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
+
+### POC
+
+#### Reference
+- https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1803/5/1.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70651](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70651)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
+
+### POC
+
+#### Reference
+- https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1803/4/1.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70744](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70744)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
+
+### POC
+
+#### Reference
+- https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1806/10/1.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70753](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70753)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
+
+### POC
+
+#### Reference
+- https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1806/8/1.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70792](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70792)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "rel_id" parameter in a crafted URL and lure a user with admin privileges into visiting it, achieving JavaScript code execution in the victim's browser. The issue was reported to the developers and fixed in version 2.0.20.
+
+### POC
+
+#### Reference
+- https://gist.github.com/TimRecktenwald/f4b0d1edbb87e75c17c639ca0bacba57
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2025-70795](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70795)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabling unauthorized processes to perform those actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical third-party services or applications. Unauthorized processes load the driver and send a crafted IOCTL request (0xB822200C) to terminate processes protected by a third-party implementation. This action exploits insufficient caller validation in the driver's IOCTL handler, allowing unauthorized processes to perform termination operations in kernel space. Successful exploitation can lead to denial of service by disrupting critical third-party services or applications.
+
+### POC
+
+#### Reference
+- https://github.com/magicsword-io/LOLDrivers/commit/eea8326bf891d810902203e9ac5cfdeaf5a17a1c
+- https://github.com/magicsword-io/LOLDrivers/issues/268
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70797](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70797)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.
+
+### POC
+
+#### Reference
+- https://gist.github.com/masquerad3r/772ddbfbd9fd95754f4873bcb202146d
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70802](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70802)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.
+
+### POC
+
+#### Reference
+- https://github.com/vuln-1/vuln/blob/main/Tenda/G1V3.1si_V16.01.7.8/report-1.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70810](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70810)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanism
+
+### POC
+
+#### Reference
+- https://gist.github.com/ariefibis/80e306765c23d6fac1584dbb76822e30
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70821](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70821)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component
+
+### POC
+
+#### Reference
+- https://gist.github.com/sorzs/40dbc60504ab6cb0b592d9010d5ae8af
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70831](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70831)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface. The application fails to properly sanitize user-supplied input in the mediaId parameter before using it in a system shell command. This allows an unauthenticated attacker to inject arbitrary operating system commands, leading to complete server compromise.
+
+### POC
+
+#### Reference
+- https://github.com/LX-66-LX/cve/issues/5
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70886](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70886)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint
+
+### POC
+
+#### Reference
+- https://github.com/HowieHz/CVE-2025-70886
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70890)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A stored cross-site scripting (XSS) vulnerability exists in Cyber Cafe Management System v1.0. An authenticated attacker can inject arbitrary JavaScript code into the username parameter via the add-users.php endpoint. The injected payload is stored and executed in the victim s browser when the affected page is accessed.
+
+### POC
+
+#### Reference
+- https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70890
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70892](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70892)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
+
+### POC
+
+#### Reference
+- https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70892
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70893](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70893)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.
+
+### POC
+
+#### Reference
+- https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70893
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2025-70958](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70958)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the dbuser, dbpwd, and dbname parameters.
+
+### POC
+
+#### Reference
+- https://github.com/emirhanyucell/Subrion-CMS-4.2.1/blob/main/subrion-cms-exploit.txt
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,19 @@
+### [CVE-2025-7762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7762)
+![](https://img.shields.io/static/v1?label=Product&message=DI-8100&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=16.07.26A1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Stack-based%20Buffer%20Overflow&color=brightgreen)
+
+### Description
+
+A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menu_nat_more.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
+Eine Schwachstelle wurde in D-Link DI-8100 16.07.26A1 entdeckt. Sie wurde als kritisch eingestuft. Dies betrifft einen unbekannten Teil der Datei /menu_nat_more.asp der Komponente HTTP Request Handler. Dank Manipulation mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.
+
+### POC
+
+#### Reference
+- https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_more_asp/menu_nat_more_asp.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,19 @@
+### [CVE-2025-7790](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7790)
+![](https://img.shields.io/static/v1?label=Product&message=DI-8100&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=16.07.26A1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Stack-based%20Buffer%20Overflow&color=brightgreen)
+
+### Description
+
+A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menu_nat.asp of the component HTTP Request Handler. The manipulation of the argument out_addr/in_addr/out_port/proto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
+Es wurde eine Schwachstelle in D-Link DI-8100 16.07.26A1 ausgemacht. Sie wurde als kritisch eingestuft. Hiervon betroffen ist ein unbekannter Codeblock der Datei /menu_nat.asp der Komponente HTTP Request Handler. Durch das Manipulieren des Arguments out_addr/in_addr/out_port/proto mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+### POC
+
+#### Reference
+- https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_asp/menu_nat_asp.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2026-3914](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3914)
+![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=146.0.7680.71%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Integer%20overflow&color=brightgreen)
+
+### Description
+
+Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/481776048
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2026-3919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3919)
+![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=146.0.7680.71%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Use%20after%20free&color=brightgreen)
+
+### Description
+
+Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/444176961
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,19 @@
+### [CVE-2026-42881](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42881)
+![](https://img.shields.io/static/v1?label=Product&message=STIGQter&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%200.1.2%2C%20%3C%201.2.7%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-73%3A%20External%20Control%20of%20File%20Name%20or%20Path&color=brightgreen)
+
+### Description
+
+STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user running STIGQter. This requires user interaction: the victim must open the malicious .stigqter file and explicitly run the "Export HTML" action. This vulnerability is fixed in 1.2.7.
+
+### POC
+
+#### Reference
+- https://www.bitwizemusic.com/security/advisories/bve-2026-0007
+- https://www.bitwizemusic.com/security/advisories/bve-2026-0007/
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,22 @@
+### [CVE-2026-6125](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6125)
+![](https://img.shields.io/static/v1?label=Product&message=warm-flow&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.8.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.8.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.8.2%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.8.3%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.8.4%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Code%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+
+### Description
+
+A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
+
+### POC
+
+#### Reference
+- https://vuldb.com/vuln/356989/cti
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-8737](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8737)
+![](https://img.shields.io/static/v1?label=Product&message=PublicCMS&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.202506.d%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Authentication&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Missing%20Authentication&color=brightgreen)
+
+### Description
+
+A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affects the function execute of the file publiccms-trade/src/main/java/com/publiccms/views/directive/trade/TradeAddressListDirective.java of the component Trade Address Query Handler. Executing a manipulation of the argument userId/id can lead to missing authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://vulnplus-note.wetolink.com/share/VqmGhijVKGBM
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2026-8738](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8738)
+![](https://img.shields.io/static/v1?label=Product&message=PublicCMS&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.202506.d%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Business%20Logic%20Errors&color=brightgreen)
+
+### Description
+
+A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. Impacted is the function TradeOrderController.pay/TradePaymentController.pay/AccountGatewayComponent.pay of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeOrderController.java of the component Trade Payment Flow. The manipulation leads to business logic errors. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://vulnplus-note.wetolink.com/share/ayeMf4xWK0ZZ
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-8739](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8739)
+![](https://img.shields.io/static/v1?label=Product&message=PublicCMS&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.202506.d%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Key%20Management%20Error&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Use%20of%20Hard-coded%20Cryptographic%20Key&color=brightgreen)
+
+### Description
+
+A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefile_key results in use of hard-coded cryptographic key␍ . The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://vulnplus-note.wetolink.com/share/PCVUlOncmwTC
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-8740](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8740)
+![](https://img.shields.io/static/v1?label=Product&message=PublicCMS&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.202506.d%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20Used%20in%20a%20Template%20Engine&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Incomplete%20Filtering%20of%20Special%20Elements&color=brightgreen)
+
+### Description
+
+A flaw has been found in Sanluan PublicCMS 5.202506.d. The impacted element is the function execute of the file publiccms-core/src/main/java/com/publiccms/views/directive/tools/TemplateResultDirective.java of the component templateResult API. This manipulation of the argument templateContent causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://vulnplus-note.wetolink.com/share/ILcCnOvJ1fMc
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -82130,6 +82130,9 @@ CVE-2020-37219 - https://www.exploit-db.com/exploits/48263
 CVE-2020-37220 - https://www.exploit-db.com/exploits/48310
 CVE-2020-37223 - https://www.exploit-db.com/exploits/48543
 CVE-2020-37225 - https://www.exploit-db.com/exploits/48656
+CVE-2020-37228 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5607.php
+CVE-2020-37233 - https://www.exploit-db.com/exploits/49061
+CVE-2020-37242 - https://www.exploit-db.com/exploits/49532
 CVE-2020-3811 - https://www.openwall.com/lists/oss-security/2020/05/19/8
 CVE-2020-3812 - https://www.openwall.com/lists/oss-security/2020/05/19/8
 CVE-2020-3843 - http://packetstormsecurity.com/files/162119/iOS-macOS-Radio-Proximity-Kernel-Memory-Corruption.html
@@ -91037,6 +91040,7 @@ CVE-2021-38584 - https://docs.cpanel.net/changelogs/98-change-log/
 CVE-2021-38585 - https://docs.cpanel.net/changelogs/98-change-log/
 CVE-2021-38586 - https://docs.cpanel.net/changelogs/98-change-log/
 CVE-2021-3860 - http://packetstormsecurity.com/files/177162/JFrog-Artifactory-SQL-Injection.html
+CVE-2021-3860 - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-3860%3A+Artifactory+Low+Privileged+Blind+SQL+Injection
 CVE-2021-38603 - http://packetstormsecurity.com/files/163823/PluXML-5.8.7-Cross-Site-Scripting.html
 CVE-2021-38604 - https://blog.tuxcare.com/cve/tuxcare-team-identifies-cve-2021-38604-a-new-vulnerability-in-glibc
 CVE-2021-38604 - https://www.oracle.com/security-alerts/cpujul2022.html
@@ -94343,8 +94347,11 @@ CVE-2021-47943 - https://www.exploit-db.com/exploits/50415
 CVE-2021-47944 - https://www.exploit-db.com/exploits/49977
 CVE-2021-47945 - https://www.exploit-db.com/exploits/50261
 CVE-2021-47950 - https://www.exploit-db.com/exploits/49875
+CVE-2021-47952 - https://www.exploit-db.com/exploits/49585
 CVE-2021-47953 - https://www.exploit-db.com/exploits/49970
+CVE-2021-47957 - https://www.exploit-db.com/exploits/49905
 CVE-2021-47959 - https://www.exploit-db.com/exploits/49807
+CVE-2021-47974 - https://www.exploit-db.com/exploits/50026
 CVE-2022-0001 - https://www.kb.cert.org/vuls/id/155143
 CVE-2022-0001 - https://www.oracle.com/security-alerts/cpujul2022.html
 CVE-2022-0001 - https://www.vicarius.io/vsociety/posts/cve-2022-0001-detect-specter-vulnerability?prevUrl=wizard
@@ -120059,8 +120066,10 @@ CVE-2024-3253 - https://vuldb.com/?id.259102
 CVE-2024-3254 - https://vuldb.com/?id.259103
 CVE-2024-3255 - https://vuldb.com/?id.259104
 CVE-2024-3261 - https://wpscan.com/vulnerability/5a0d5922-eefc-48e1-9681-b63e420bb8b3/
+CVE-2024-32640 - https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-24rr-gwx3-jhqc
 CVE-2024-32640 - https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS
 CVE-2024-32640 - https://projectdiscovery.io/blog/hacking-apple-with-sql-injection?ref=projectdiscovery-io-blog-newsletter
+CVE-2024-32643 - https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-f469-jh82-97fv
 CVE-2024-32645 - https://github.com/vyperlang/vyper/security/advisories/GHSA-xchq-w5r3-4wg3
 CVE-2024-32646 - https://github.com/vyperlang/vyper/security/advisories/GHSA-r56x-j438-vw5m
 CVE-2024-32647 - https://github.com/vyperlang/vyper/security/advisories/GHSA-3whq-64q2-qfj6
@@ -124381,6 +124390,7 @@ CVE-2024-54150 - https://github.com/xmidt-org/cjwt/security/advisories/GHSA-9h24
 CVE-2024-54151 - https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4
 CVE-2024-54160 - https://github.com/Jflye/CVE-2024-54160--Opensearch-HTML-Injection
 CVE-2024-5417 - https://wpscan.com/vulnerability/fb7d6839-9ccb-4a0f-9dca-d6841f666a1b/
+CVE-2024-54192 - https://github.com/appneta/tcpreplay/issues/902
 CVE-2024-5420 - http://seclists.org/fulldisclosure/2024/Jun/4
 CVE-2024-5420 - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/index.html
 CVE-2024-5420 - https://cyberdanube.com/security-research/multiple-vulnerabilities-in-seh-untserver-pro/
@@ -134493,8 +134503,10 @@ CVE-2025-5467 - https://bugs.launchpad.net/apport/+bug/2106338
 CVE-2025-5467 - https://www.stratascale.com/resource/cve-2025-32462-ubuntu-apport-vulnerability/
 CVE-2025-54764 - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep/
 CVE-2025-54765 - https://korelogic.com/Resources/Advisories/KL-001-2025-013.txt
+CVE-2025-54766 - http://seclists.org/fulldisclosure/2025/Jul/15
 CVE-2025-54766 - https://korelogic.com/Resources/Advisories/KL-001-2025-012.txt
 CVE-2025-54767 - https://korelogic.com/Resources/Advisories/KL-001-2025-014.txt
+CVE-2025-54768 - http://seclists.org/fulldisclosure/2025/Jul/18
 CVE-2025-54768 - https://korelogic.com/Resources/Advisories/KL-001-2025-015.txt
 CVE-2025-54769 - https://korelogic.com/Resources/Advisories/KL-001-2025-016.txt
 CVE-2025-54782 - https://github.com/JLLeitschuh/nestjs-devtools-integration-rce-poc
@@ -137058,6 +137070,8 @@ CVE-2025-69621 - https://secsys.fudan.edu.cn/
 CVE-2025-6963 - https://github.com/ez-lbz/poc/issues/41
 CVE-2025-69633 - https://labs.esokia.com/cve/cve-2025-69633/
 CVE-2025-69662 - https://aydinnyunus.github.io/2025/12/27/sql-injection-geopandas/
+CVE-2025-69690 - https://seclists.org/fulldisclosure/2026/Feb/16
+CVE-2025-69691 - https://seclists.org/fulldisclosure/2026/Feb/16
 CVE-2025-69783 - https://scavengersecurity.com/posts/edr-as-rootkit-2/
 CVE-2025-69784 - https://scavengersecurity.com/posts/edr-as-rootkit-2/
 CVE-2025-69875 - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-59439/
@@ -137068,6 +137082,7 @@ CVE-2025-7000 - https://gitlab.com/gitlab-org/gitlab/-/issues/553129
 CVE-2025-7007 - https://www.gendigital.com/us/en/contact-us/security-advisories/
 CVE-2025-70091 - https://github.com/hungnqdz/cve-research/blob/main/CVE-2025-70091.md
 CVE-2025-70092 - https://github.com/hungnqdz/cve-research/blob/main/CVE-2025-70092.md
+CVE-2025-70094 - https://github.com/hungnqdz/cve-research/blob/main/CVE-2025-70094.md
 CVE-2025-70095 - https://github.com/hungnqdz/cve-research/blob/main/CVE-2025-70095.md
 CVE-2025-7012 - https://support.catonetworks.com/hc/en-us/articles/28552501717405-CVE-2025-7012-Linux-Client-Local-Privilege-Escalation-via-Symbolic-Link-Handling
 CVE-2025-70129 - https://youtu.be/dD2olE4yMqY
@@ -137083,37 +137098,72 @@ CVE-2025-70152 - https://youngkevinn.github.io/posts/CVE-2025-70152-Scholars-SQL
 CVE-2025-7021 - https://github.com/google/security-research/security/advisories/GHSA-mmgx-755h-wr74
 CVE-2025-70218 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70218
 CVE-2025-7022 - https://wpscan.com/vulnerability/c1021763-075b-40c7-801d-b5519828aabe/
+CVE-2025-70220 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70220
 CVE-2025-70221 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70221
+CVE-2025-70222 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70222
+CVE-2025-70223 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70223
+CVE-2025-70226 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70226
 CVE-2025-70227 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70227
+CVE-2025-70232 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70232
 CVE-2025-70233 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70233
+CVE-2025-70234 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70234
 CVE-2025-70236 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70236
+CVE-2025-70237 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70237
+CVE-2025-70238 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70238
+CVE-2025-70241 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70241
 CVE-2025-70242 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70242
 CVE-2025-70243 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70243
+CVE-2025-70244 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70244
 CVE-2025-70245 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70245
+CVE-2025-70249 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70249
 CVE-2025-70250 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70250
+CVE-2025-70251 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70251
+CVE-2025-70252 - https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70252
+CVE-2025-70299 - https://github.com/zakkanijia/POC/blob/main/gpac_avi/GPAC_AVI_indx_heap_overflow.md
 CVE-2025-70304 - https://github.com/zakkanijia/POC/blob/main/gpac_vobsub/GPAC_vobsub.md
+CVE-2025-70307 - https://github.com/zakkanijia/POC/blob/main/gpac_boxDump/GPAC_tx3g.md
+CVE-2025-70330 - https://github.com/TheMalwareGuardian/CVE-2025-70330
+CVE-2025-70342 - https://github.com/grahampugh/erase-install/pull/574
+CVE-2025-70342 - https://github.com/malvector/CVE-2025-70342
+CVE-2025-70347 - https://github.com/bellard/mquickjs/issues/56
+CVE-2025-70457 - https://github.com/ismaildawoodjee/vulnerability-research/security/advisories/GHSA-8xq6-hjhw-4983
 CVE-2025-70457 - https://www.sourcecodester.com/php/18572/modern-image-gallery-app-using-php-and-mysql-source-code.html
+CVE-2025-70458 - https://github.com/ismaildawoodjee/vulnerability-research/security/advisories/GHSA-chm7-vgf7-6f9p
 CVE-2025-70458 - https://www.sourcecodester.com/php/18500/domain-availability-checker-using-php-and-javascript-source-code.html
 CVE-2025-7049 - https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964
 CVE-2025-7050 - https://wpcloudplugins.gitbook.io/docs/other/changelog
+CVE-2025-70559 - https://github.com/advisories/GHSA-f83h-ghpp-7wcc
+CVE-2025-70559 - https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-f83h-ghpp-7wcc
+CVE-2025-70646 - https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1803/5/1.md
+CVE-2025-70651 - https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1803/4/1.md
 CVE-2025-70656 - https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1806/11/1.md
 CVE-2025-7067 - https://github.com/HDFGroup/hdf5/issues/5577
 CVE-2025-7068 - https://github.com/HDFGroup/hdf5/issues/5578
 CVE-2025-7069 - https://github.com/HDFGroup/hdf5/issues/5550
 CVE-2025-7070 - https://github.com/geo-chen/IROAD-V?tab=readme-ov-file#finding-8---mfa-spam-to-induce-device-pairing-fatigue
 CVE-2025-7074 - https://github.com/vercel/hyper/issues/8098
+CVE-2025-70744 - https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1806/10/1.md
 CVE-2025-70746 - https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1806/4/1.md
+CVE-2025-70753 - https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1806/8/1.md
 CVE-2025-70758 - https://github.com/XavLimSG/Vulnerability-Research/tree/main/CVE-2025-70758
 CVE-2025-7078 - https://github.com/Excentique/yuxuan_mei/blob/main/07fly-crm_1.md
+CVE-2025-70792 - https://gist.github.com/TimRecktenwald/f4b0d1edbb87e75c17c639ca0bacba57
+CVE-2025-70795 - https://github.com/magicsword-io/LOLDrivers/commit/eea8326bf891d810902203e9ac5cfdeaf5a17a1c
+CVE-2025-70795 - https://github.com/magicsword-io/LOLDrivers/issues/268
+CVE-2025-70797 - https://gist.github.com/masquerad3r/772ddbfbd9fd95754f4873bcb202146d
 CVE-2025-70798 - https://github.com/vuln-1/vuln/blob/main/Tenda/i24V3.0si_V3.0.0.5/report-1.md
+CVE-2025-70802 - https://github.com/vuln-1/vuln/blob/main/Tenda/G1V3.1si_V16.01.7.8/report-1.md
 CVE-2025-7081 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_1/1.md
 CVE-2025-7081 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_1/1.md#poc
+CVE-2025-70810 - https://gist.github.com/ariefibis/80e306765c23d6fac1584dbb76822e30
 CVE-2025-7082 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_2/2.md
 CVE-2025-7082 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_2/2.md#poc
+CVE-2025-70821 - https://gist.github.com/sorzs/40dbc60504ab6cb0b592d9010d5ae8af
 CVE-2025-7083 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_3/3.md
 CVE-2025-7083 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_3/3.md#poc
 CVE-2025-70830 - https://github.com/xiaoxiaoranxxx/CVE-2025-70830
 CVE-2025-70830 - https://portswigger.net/web-security/server-side-template-injection
+CVE-2025-70831 - https://github.com/LX-66-LX/cve/issues/5
 CVE-2025-7084 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_4/4.md
 CVE-2025-7084 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_4/4.md#poc
 CVE-2025-7085 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_5/5.md
@@ -137124,9 +137174,13 @@ CVE-2025-7087 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_7/7.md
 CVE-2025-7087 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_7/7.md#poc
 CVE-2025-7088 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_8/8.md
 CVE-2025-7088 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_8/8.md#poc
+CVE-2025-70886 - https://github.com/HowieHz/CVE-2025-70886
 CVE-2025-7089 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_9/9.md
 CVE-2025-7089 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_9/9.md#poc
+CVE-2025-70890 - https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70890
 CVE-2025-70891 - https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70891
+CVE-2025-70892 - https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70892
+CVE-2025-70893 - https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70893
 CVE-2025-70899 - https://github.com/mathavamoorthi/CVE-2025-70899/blob/main/Missing_CSRF_protection_poc.md
 CVE-2025-7090 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_10/10.md
 CVE-2025-7090 - https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_10/10.md#poc
@@ -137142,6 +137196,7 @@ CVE-2025-7094 - https://vuldb.com/?ctiid.315008
 CVE-2025-7095 - https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view
 CVE-2025-7095 - https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
 CVE-2025-70954 - https://www.tonbit.xyz/blog/post/TonBit-Discovers-Critical-Vulnerability-on-TON-Virtual-Machine-for-the-Third-Time-Once-Again-Receiving-Official-Recognition-from-the-TON-Team.html
+CVE-2025-70958 - https://github.com/emirhanyucell/Subrion-CMS-4.2.1/blob/main/subrion-cms-exploit.txt
 CVE-2025-70959 - https://github.com/emirhanyucelll/tendenci/blob/main/Readme.md
 CVE-2025-7096 - https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view
 CVE-2025-7096 - https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
@@ -137486,6 +137541,7 @@ CVE-2025-7757 - https://github.com/hex31415926/cve/issues/4
 CVE-2025-7758 - https://github.com/AnduinBrian/Public/blob/main/Totolink%20T6/Vuln/3.md
 CVE-2025-7758 - https://github.com/AnduinBrian/Public/blob/main/Totolink%20T6/Vuln/3.md#poc
 CVE-2025-7759 - https://github.com/thinkgem/jeesite5/issues/27
+CVE-2025-7762 - https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_more_asp/menu_nat_more_asp.md
 CVE-2025-7763 - https://github.com/thinkgem/jeesite5/issues/28
 CVE-2025-7763 - https://github.com/thinkgem/jeesite5/issues/28#issuecomment-3045862239
 CVE-2025-7764 - https://github.com/jaynewboy/cve/issues/2
@@ -137500,6 +137556,7 @@ CVE-2025-7786 - https://github.com/gnuboard/g6/issues/645
 CVE-2025-7787 - https://github.com/xuxueli/xxl-job/issues/3749
 CVE-2025-7788 - https://github.com/xuxueli/xxl-job/issues/3750
 CVE-2025-7789 - https://github.com/xuxueli/xxl-job/issues/3751
+CVE-2025-7790 - https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_asp/menu_nat_asp.md
 CVE-2025-7791 - https://github.com/i-Corner/cve/issues/9
 CVE-2025-7792 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formSafeEmailFilter.md
 CVE-2025-7792 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formSafeEmailFilter.md#poc
@@ -141235,6 +141292,8 @@ CVE-2026-39109 - https://github.com/efekaanakkar/Apartment-Visitors-Management-S
 CVE-2026-39110 - https://github.com/efekaanakkar/Apartment-Visitors-Management-System-CVEs/
 CVE-2026-39111 - https://github.com/efekaanakkar/Apartment-Visitors-Management-System-CVEs/
 CVE-2026-39112 - https://github.com/efekaanakkar/Apartment-Visitors-Management-System-CVEs/
+CVE-2026-3914 - https://issues.chromium.org/issues/481776048
+CVE-2026-3919 - https://issues.chromium.org/issues/444176961
 CVE-2026-3925 - https://issues.chromium.org/issues/418214610
 CVE-2026-3927 - https://issues.chromium.org/issues/474948986
 CVE-2026-3930 - https://issues.chromium.org/issues/476898368
@@ -141522,6 +141581,8 @@ CVE-2026-4265 - https://mattermost.com/security-updates
 CVE-2026-4267 - https://research.cleantalk.org/cve-2026-4267/
 CVE-2026-4274 - https://mattermost.com/security-updates
 CVE-2026-42798 - https://www.openwall.com/lists/oss-security/2026/04/30/8
+CVE-2026-42881 - https://www.bitwizemusic.com/security/advisories/bve-2026-0007
+CVE-2026-42881 - https://www.bitwizemusic.com/security/advisories/bve-2026-0007/
 CVE-2026-42945 - https://depthfirst.com/nginx-rift
 CVE-2026-43002 - https://bugs.launchpad.net/horizon/+bug/2150331
 CVE-2026-4318 - https://github.com/xiaoheshang404/cve/issues/1#issue-4026284809
@@ -141651,6 +141712,7 @@ CVE-2026-6106 - https://github.com/AnalogyC0de/public_exp/issues/23
 CVE-2026-6107 - https://github.com/AnalogyC0de/public_exp/issues/24
 CVE-2026-6124 - https://vuldb.com/vuln/356987
 CVE-2026-6124 - https://vuldb.com/vuln/356987/cti
+CVE-2026-6125 - https://vuldb.com/vuln/356989/cti
 CVE-2026-6135 - https://vuldb.com/submit/792877
 CVE-2026-6190 - https://github.com/ltranquility/cve_submit/issues/15
 CVE-2026-6191 - https://github.com/ltranquility/cve_submit/issues/16
@@ -141715,3 +141777,7 @@ CVE-2026-8407 - https://devolutions.net/security/advisories/DEVO-2026-0010/
 CVE-2026-8654 - https://portal.perforce.com/s/cve/a91Qi000002z78HIAQ/authenticated-os-command-injection-in-delphix-continuous-data-connectors
 CVE-2026-8656 - https://security.snyk.io/vuln/SNYK-JS-JSONDIFFPATCH-16635946
 CVE-2026-8657 - https://security.snyk.io/vuln/SNYK-JS-JSONDIFFPATCH-16322990
+CVE-2026-8737 - https://vulnplus-note.wetolink.com/share/VqmGhijVKGBM
+CVE-2026-8738 - https://vulnplus-note.wetolink.com/share/ayeMf4xWK0ZZ
+CVE-2026-8739 - https://vulnplus-note.wetolink.com/share/PCVUlOncmwTC
+CVE-2026-8740 - https://vulnplus-note.wetolink.com/share/ILcCnOvJ1fMc