Update Thu May 21 11:52:37 UTC 2026

2026-11-07 12:38:17 -10:00 · 2026-05-21 11:52:38 +00:00
1 parent ca861457d0
commit e38cdc4e6d
@@ -11,6 +11,7 @@ Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers t

 #### Reference
 - http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html
 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686

 #### Github
@@ -11,6 +11,7 @@ Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox be

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html

 #### Github
 No PoCs found on GitHub currently.
@@ -11,6 +11,7 @@ Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox be

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html

 #### Github
 No PoCs found on GitHub currently.
@@ -11,6 +11,7 @@ Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox be

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html
 - https://bugzilla.mozilla.org/show_bug.cgi?id=501900

 #### Github
@@ -11,6 +11,7 @@ Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html
 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9444

 #### Github
@@ -11,6 +11,7 @@ Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html

 #### Github
 No PoCs found on GitHub currently.
@@ -11,6 +11,7 @@ Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associ

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html
 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306

 #### Github
@@ -11,6 +11,7 @@ Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html

 #### Github
 No PoCs found on GitHub currently.
@@ -11,6 +11,7 @@ Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x befo

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html

 #### Github
 No PoCs found on GitHub currently.
@@ -11,6 +11,7 @@ Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5

 #### Reference
 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+- http://www.redhat.com/support/errata/RHSA-2009-1430.html

 #### Github
 No PoCs found on GitHub currently.
@@ -11,6 +11,7 @@ Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in

 #### Reference
 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
+- https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018

 #### Github
 No PoCs found on GitHub currently.
@@ -12,6 +12,7 @@ The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial
 #### Reference
 - http://forums.winamp.com/showthread.php?t=324322
 - http://forums.winamp.com/showthread.php?threadid=159785
+- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12332

 #### Github
 No PoCs found on GitHub currently.
@@ -10,6 +10,7 @@ JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a
 ### POC

 #### Reference
+- https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46270%3A+Artifactory+Project+Admin+Repository+Name+Disclosure
 - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories

 #### Github
@@ -1,12 +1,13 @@
 ### [CVE-2023-46136](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46136)
 ![](https://img.shields.io/static/v1?label=Product&message=werkzeug&color=blue)
-![](https://img.shields.io/static/v1?label=Version&message=%3C%203.0.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%202.0.0rc1%2C%20%3C%202.3.8%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%203.0.0%2C%20%3C%203.0.1%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%3A%20Uncontrolled%20Resource%20Consumption&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-407%3A%20Inefficient%20Algorithmic%20Complexity&color=brightgreen)

 ### Description

-Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.
+Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

 ### POC

@@ -1,6 +1,7 @@
 ### [CVE-2023-52355](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52355)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20AI%20Inference%20Server%203.2&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Discovery%202&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
@@ -1,5 +1,5 @@
 ### [CVE-2023-6437](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6437)
-![](https://img.shields.io/static/v1?label=Product&message=TP-Link%20EX20v%20AX1800%2C%20Tp-Link%20Archer%20C5v%20AC1200%2C%20Tp-Link%20TD-W9970%2C%20Tp-Link%20TD-W9970v3%2C%20TP-Link%20VX220-G2u%2C%20TP-Link%20VN020-G2u%20&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=TP-Link%20EX20v%20AX1800%2C%20Tp-Link%20Archer%20C5v%20AC1200%2C%20Tp-Link%20TD-W9970%2C%20Tp-Link%20TD-W9970v3%2C%20TP-Link%20VX220-G2u%2C%20TP-Link%20VN020-G2u&color=blue)
 ![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-78%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')&color=brightgreen)

@@ -1,6 +1,8 @@
 ### [CVE-2024-49767](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49767)
+![](https://img.shields.io/static/v1?label=Product&message=Quart&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=werkzeug&color=blue)
-![](https://img.shields.io/static/v1?label=Version&message=%3C%203.0.6%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3C%200.20.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%202.0.0rc1%2C%20%3C%203.0.6%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%3A%20Uncontrolled%20Resource%20Consumption&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-770%3A%20Allocation%20of%20Resources%20Without%20Limits%20or%20Throttling&color=brightgreen)
@@ -0,0 +1,18 @@
+### [CVE-2024-53412](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53412)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field
+
+### POC
+
+#### Reference
+- https://github.com/Buckdray/vulnerability-research/blob/main/CVE-2024-53412/README.md
+- https://github.com/NietThijmen/ShoppingCart/issues/1
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -13,6 +13,7 @@ In code-projects Inventory Management System 1.0 wurde eine Schwachstelle ausgem

 #### Reference
 - https://github.com/Dav1d-safe/cve/issues/2
+- https://vuldb.com/?ctiid.314260

 #### Github
 No PoCs found on GitHub currently.
@@ -0,0 +1,19 @@
+### [CVE-2025-9208](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9208)
+![](https://img.shields.io/static/v1?label=Product&message=Web%20Site%20Management%20Server&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=16.7.x%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=16.8%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=16.8.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20(XSS%20or%20'Cross-site%20Scripting')&color=brightgreen)
+
+### Description
+
+Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerability could execute malicious scripts on the client side when the download query parameter is removed from the file URL, allowing attackers to compromise user sessions and data.This issue affects Web Site Management Server: 16.7.X, 16.8, 16.8.1.
+
+### POC
+
+#### Reference
+- https://github.com/MarioTesoro/vulnerability-research/blob/main/CVE-2025-9208/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,19 @@
+### [CVE-2026-0723](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0723)
+![](https://img.shields.io/static/v1?label=Product&message=GitLab&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=18.6%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=18.7%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=18.8%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-252%3A%20Unchecked%20Return%20Value&color=brightgreen)
+
+### Description
+
+GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses.
+
+### POC
+
+#### Reference
+- https://gitlab.com/gitlab-org/gitlab/-/issues/585333
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2026-3537](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3537)
+![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=145.0.7632.159%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Object%20lifecycle%20issue&color=brightgreen)
+
+### Description
+
+Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/474266014
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -1,5 +1,6 @@
 ### [CVE-2026-4424](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4424)
 ![](https://img.shields.io/static/v1?label=Product&message=RHEL-8%20based%20Middleware%20Containers&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20AI%20Inference%20Server%203.2&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20AI%20Inference%20Server%203.3&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Discovery%202&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
@@ -26,6 +27,7 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.17&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.18&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Update%20Infrastructure%205&color=blue)
 ![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
@@ -1,6 +1,8 @@
 ### [CVE-2026-44919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44919)
 ![](https://img.shields.io/static/v1?label=Product&message=Ironic&color=blue)
-![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=23.0.4%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=30.0.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=33.0.0%20&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-696%20Incorrect%20Behavior%20Order&color=brightgreen)

 ### Description
@@ -0,0 +1,23 @@
+### [CVE-2026-46333](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46333)
+![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=03eed7afbc09e061f66b448daf7863174c3dc3f3%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.10%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=694a95fa6dae4991f16cda333d897ea063021fed%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=bfedb589252c01fa505ac9f6f2a3d5d68d707ef4%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=d5b3e840dbf6dd2c0f30b5982b6f5ecd49e46b12%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=e45692fa1aea06676449b63ef3c2b6e1e72b7578%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=blue)
+
+### Description
+
+In the Linux kernel, the following vulnerability has been resolved:ptrace: slightly saner 'get_dumpable()' logicThe 'dumpability' of a task is fundamentally about the memory image ofthe task - the concept comes from whether it can core dump or not - andmakes no sense when you don't have an associated mm.And almost all users do in fact use it only for the case where the taskhas a mm pointer.But we have one odd special case: ptrace_may_access() uses 'dumpable' tocheck various other things entirely independently of the MM (typicallyexplicitly using flags like PTRACE_MODE_READ_FSCREDS).  Including forthreads that no longer have a VM (and maybe never did, like most kernelthreads).It's not what this flag was designed for, but it is what it is.The ptrace code does check that the uid/gid matches, so you do have tobe uid-0 to see kernel thread details, but this means that thetraditional "drop capabilities" model doesn't make any difference forthis all.Make it all make a *bit* more sense by saying that if you don't have aMM pointer, we'll use a cached "last dumpability" flag if the threadever had a MM (it will be zero for kernel threads since it is neverset), and require a proper CAP_SYS_PTRACE capability to override.
+
+### POC
+
+#### Reference
+- http://www.openwall.com/lists/oss-security/2026/05/20/16
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -13,6 +13,7 @@ A flaw was found in Cockpit. This vulnerability allows a remote attacker to achi
 ### POC

 #### Reference
+- http://www.openwall.com/lists/oss-security/2026/05/20/19
 - https://bugzilla.redhat.com/show_bug.cgi?id=2451155

 #### Github
@@ -0,0 +1,19 @@
+### [CVE-2026-5344](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5344)
+![](https://img.shields.io/static/v1?label=Product&message=Textpattern&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.9.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.9.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Path%20Traversal&color=brightgreen)
+
+### Description
+
+A security vulnerability has been detected in Textpattern up to 4.9.1. Affected by this vulnerability is the function mt_uploadImage of the file rpc/TXP_RPCServer.php of the component XML-RPC Handler. The manipulation of the argument file.name leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor confirmed the issue and will provide a fix in the upcoming release.
+
+### POC
+
+#### Reference
+- https://vuldb.com/vuln/354696
+- https://vuldb.com/vuln/354696/cti
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2026-5902](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5902)
+![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=147.0.7727.55%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Race&color=brightgreen)
+
+### Description
+
+Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/483109205
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -5,7 +5,7 @@

 ### Description

-NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or unexpected behavior.
+NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

 ### POC

@@ -0,0 +1,18 @@
+### [CVE-2026-6157](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6157)
+![](https://img.shields.io/static/v1?label=Product&message=A800R&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.1.2cu.5137_B20200730%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Overflow&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+
+### Description
+
+A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. The manipulation of the argument apcliSsid results in buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A800R/01_Buffer_Overflow_setAppEasyWizardConfig.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-6158](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6158)
+![](https://img.shields.io/static/v1?label=Product&message=N300RH&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=6.1c.1353_B20190305%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Command%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=OS%20Command%20Injection&color=brightgreen)
+
+### Description
+
+A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/xyh4ck/iot_poc/tree/main/TOTOLINK/N300RHv4/02_setUpgradeUboot_RCE
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-6988](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6988)
+![](https://img.shields.io/static/v1?label=Product&message=HG10&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=HG7_HG9_HG10re_300001138_en_xpon%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Overflow&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+
+### Description
+
+A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/xyh4ck/iot_poc/blob/main/Tenda/HG10/01_Buffer_Overflow_nextHop/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7080)
+![](https://img.shields.io/static/v1?label=Product&message=F456&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.0.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Overflow&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+
+### Description
+
+A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. Such manipulation of the argument delno leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_132/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7099)
+![](https://img.shields.io/static/v1?label=Product&message=F456&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.0.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Overflow&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+
+### Description
+
+A vulnerability was detected in Tenda F456 1.0.0.5. The affected element is the function formQuickIndex of the file /goform/QuickIndex of the component httpd. Performing a manipulation of the argument mit_linktype results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_137/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7115](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7115)
+![](https://img.shields.io/static/v1?label=Product&message=Employee%20Management%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
+
+### POC
+
+#### Reference
+- https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul5.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7122](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7122)
+![](https://img.shields.io/static/v1?label=Product&message=A8000RU&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=7.1cu.643_b20200521%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Command%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=OS%20Command%20Injection&color=brightgreen)
+
+### Description
+
+A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_307/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7152](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7152)
+![](https://img.shields.io/static/v1?label=Product&message=A8000RU&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=7.1cu.643_b20200521%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Command%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=OS%20Command%20Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument telnet_enabled leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
+
+### POC
+
+#### Reference
+- https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_316/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7225](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7225)
+![](https://img.shields.io/static/v1?label=Product&message=Pizzafy%20Ecommerce%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+
+### Description
+
+A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function delete_menu of the file /admin/ajax.php?action=delete_menu. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
+
+### POC
+
+#### Reference
+- https://github.com/fernando-mengali/vulndb-submissions/blob/main/02-vul-SQLI.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,18 @@
+### [CVE-2026-7242](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7242)
+![](https://img.shields.io/static/v1?label=Product&message=A8000RU&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=7.1cu.643_b20200521%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Command%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=OS%20Command%20Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnClientCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enabled can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
+
+### POC
+
+#### Reference
+- https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_326/README.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,17 @@
+### [CVE-2026-7385](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7385)
+![](https://img.shields.io/static/v1?label=Product&message=Decent%20Comments&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
+
+### Description
+
+The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/1c5949d0-cf50-45d3-a7e2-2f94cdb42405/
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -0,0 +1,19 @@
+### [CVE-2026-7716](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7716)
+![](https://img.shields.io/static/v1?label=Product&message=Gym%20Management%20System%20In%20PHP&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Windows%20NT&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
+
+### POC
+
+#### Reference
+- https://github.com/QAp89/CVE/blob/main/SQL1.md
+
+#### Github
+No PoCs found on GitHub currently.
+
@@ -18080,6 +18080,7 @@ CVE-2009-2648 - http://packetstormsecurity.org/0907-exploits/flashden-disclose.t
 CVE-2009-2649 - https://www.exploit-db.com/exploits/9134
 CVE-2009-2650 - http://www.exploit-db.com/exploits/9173
 CVE-2009-2654 - http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/
+CVE-2009-2654 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-2654 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686
 CVE-2009-2655 - http://www.exploit-db.com/exploits/9253
 CVE-2009-2656 - http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf
@@ -18225,18 +18226,27 @@ CVE-2009-3066 - http://packetstormsecurity.org/0909-exploits/propertywatch-xss.t
 CVE-2009-3067 - http://packetstormsecurity.org/0909-exploits/resvman-xss.txt
 CVE-2009-3069 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
 CVE-2009-3070 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3070 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3071 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3071 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3072 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3072 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3072 - https://bugzilla.mozilla.org/show_bug.cgi?id=501900
 CVE-2009-3073 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
 CVE-2009-3074 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3074 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3074 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9444
 CVE-2009-3075 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3075 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3076 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3076 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3076 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306
 CVE-2009-3077 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3077 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3078 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3078 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3079 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html
+CVE-2009-3079 - http://www.redhat.com/support/errata/RHSA-2009-1430.html
 CVE-2009-3085 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434
 CVE-2009-3095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9363
 CVE-2009-3103 - http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html
@@ -19374,6 +19384,7 @@ CVE-2010-0803 - http://www.exploit-db.com/exploits/11280
 CVE-2010-0804 - http://packetstormsecurity.org/1001-exploits/iboutique-xss.txt
 CVE-2010-0805 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
 CVE-2010-0806 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
+CVE-2010-0806 - https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
 CVE-2010-0807 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
 CVE-2010-0808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071
 CVE-2010-0811 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-034
@@ -21508,6 +21519,7 @@ CVE-2010-4373 - http://forums.winamp.com/showthread.php?t=324322
 CVE-2010-4373 - http://forums.winamp.com/showthread.php?threadid=159785
 CVE-2010-4374 - http://forums.winamp.com/showthread.php?t=324322
 CVE-2010-4374 - http://forums.winamp.com/showthread.php?threadid=159785
+CVE-2010-4374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12332
 CVE-2010-4398 - http://isc.sans.edu/diary.html?storyid=9988
 CVE-2010-4398 - http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac/
 CVE-2010-4398 - http://www.exploit-db.com/exploits/15609/
@@ -93799,6 +93811,7 @@ CVE-2021-46262 - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/7
 CVE-2021-46263 - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/11
 CVE-2021-46264 - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/9
 CVE-2021-46265 - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/13
+CVE-2021-46270 - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46270%3A+Artifactory+Project+Admin+Repository+Name+Disclosure
 CVE-2021-46270 - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories
 CVE-2021-46283 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13
 CVE-2021-46283 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad9f151e560b016b6ad3280b48e42fa11e1a5440
@@ -124421,6 +124434,8 @@ CVE-2024-53388 - https://gist.github.com/jackfromeast/a61a5429a97985e7ff4c1d39e3
 CVE-2024-5340 - https://vuldb.com/?ctiid.266246
 CVE-2024-53406 - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Esp/sk_reuse.md
 CVE-2024-53408 - https://cosmosofcyberspace.github.io/ave-system-cve.html
+CVE-2024-53412 - https://github.com/Buckdray/vulnerability-research/blob/main/CVE-2024-53412/README.md
+CVE-2024-53412 - https://github.com/NietThijmen/ShoppingCart/issues/1
 CVE-2024-53425 - https://github.com/assimp/assimp/issues/5860
 CVE-2024-53426 - https://github.com/ntop/ntopng/issues/8793
 CVE-2024-53427 - https://github.com/jqlang/jq/issues/3196
@@ -137118,6 +137133,7 @@ CVE-2025-6819 - https://github.com/AlbaDove/cve/issues/2
 CVE-2025-6820 - https://github.com/AlbaDove/cve/issues/3
 CVE-2025-6821 - https://github.com/Dav1d-safe/cve/issues/3
 CVE-2025-6822 - https://github.com/Dav1d-safe/cve/issues/2
+CVE-2025-6822 - https://vuldb.com/?ctiid.314260
 CVE-2025-6823 - https://github.com/Dav1d-safe/cve/issues/1
 CVE-2025-6824 - https://github.com/awindog/cve/blob/main/688/28.md
 CVE-2025-6824 - https://github.com/awindog/cve/blob/main/688/28.md#poc
@@ -138571,6 +138587,7 @@ CVE-2025-9176 - https://magnificent-dill-351.notion.site/Command-Execution-of-en
 CVE-2025-9190 - https://afine.com/threat-of-tcc-bypasses-on-macos/#cooking-cursor-app
 CVE-2025-9191 - https://favethemes.zendesk.com/hc/en-us/articles/360041639432-Changelog
 CVE-2025-9202 - https://research.cleantalk.org/CVE-2025-9202
+CVE-2025-9208 - https://github.com/MarioTesoro/vulnerability-research/blob/main/CVE-2025-9208/README.md
 CVE-2025-9215 - https://github.com/d0n601/CVE-2025-9215
 CVE-2025-9215 - https://ryankozak.com/posts/cve-2025-9215/
 CVE-2025-9216 - https://github.com/d0n601/CVE-2025-9216
@@ -139225,6 +139242,7 @@ CVE-2026-0699 - https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membershi
 CVE-2026-0700 - https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20check_admin.php%20sql%20injection.md
 CVE-2026-0710 - https://bugzilla.redhat.com/show_bug.cgi?id=2427788
 CVE-2026-0722 - https://research.cleantalk.org/cve-2026-0722/
+CVE-2026-0723 - https://gitlab.com/gitlab-org/gitlab/-/issues/585333
 CVE-2026-0728 - https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20delete_admin.php%20sql%20injection.md
 CVE-2026-0729 - https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20add_activity.php%20sql%20injection.md
 CVE-2026-0731 - https://github.com/JackWesleyy/CVE/blob/main/WA1200/TOTOLINK%20WA1200%20NULL%20Pointer%20Dereference%20Vulnerability.md
@@ -141335,6 +141353,7 @@ CVE-2026-35214 - https://github.com/Budibase/budibase/security/advisories/GHSA-2
 CVE-2026-35216 - https://github.com/Budibase/budibase/security/advisories/GHSA-fcm4-4pj2-m5hf
 CVE-2026-35218 - https://github.com/Budibase/budibase/security/advisories/GHSA-gp5x-2v54-v2q5
 CVE-2026-3524 - https://mattermost.com/security-updates
+CVE-2026-3537 - https://issues.chromium.org/issues/474266014
 CVE-2026-35399 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fmwv-62wf-2hgx
 CVE-2026-35535 - https://www.qualys.com/2026/03/10/crack-armor.txt
 CVE-2026-35548 - https://servicedesk.guardsix.com/hc/en-us/articles/35555683205021-SSRF-in-ODBC-Enrichment-Source
@@ -141857,6 +141876,8 @@ CVE-2026-4600 - https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940
 CVE-2026-4601 - https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941
 CVE-2026-4602 - https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175
 CVE-2026-4603 - https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371176
+CVE-2026-46333 - http://www.openwall.com/lists/oss-security/2026/05/20/16
+CVE-2026-4802 - http://www.openwall.com/lists/oss-security/2026/05/20/19
 CVE-2026-4802 - https://bugzilla.redhat.com/show_bug.cgi?id=2451155
 CVE-2026-4828 - https://devolutions.net/security/advisories/DEVO-2026-0010
 CVE-2026-4829 - https://devolutions.net/security/advisories/DEVO-2026-0010
@@ -141893,6 +141914,8 @@ CVE-2026-5252 - https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527
 CVE-2026-5306 - https://wpscan.com/vulnerability/97908c15-6e7a-4242-8c6f-66c8b804364c/
 CVE-2026-5335 - https://wpscan.com/vulnerability/ed6f00de-bbae-4e89-9d0e-ded0d70e781c/
 CVE-2026-5337 - https://wpscan.com/vulnerability/3e28aa78-3227-474a-b1db-1f5ea2c42d14/
+CVE-2026-5344 - https://vuldb.com/vuln/354696
+CVE-2026-5344 - https://vuldb.com/vuln/354696/cti
 CVE-2026-5362 - https://fluidattacks.com/es/advisories/mago
 CVE-2026-5368 - https://vuldb.com/submit/781665
 CVE-2026-5394 - https://fluidattacks.com/es/advisories/dragons
@@ -141930,6 +141953,7 @@ CVE-2026-5758 - https://morielharush.github.io/2026/04/12/cve-2026-5758-protocol
 CVE-2026-5776 - https://wpscan.com/vulnerability/00c0b9f7-c559-463e-80ae-97d99e0ef99f/
 CVE-2026-5823 - https://github.com/ltranquility/cve_submit/issues/14
 CVE-2026-5844 - https://files.catbox.moe/ei31k1.zip
+CVE-2026-5902 - https://issues.chromium.org/issues/483109205
 CVE-2026-5936 - https://www.foxit.com/support/security-bulletins.html
 CVE-2026-5944 - https://www.nutanix.com/support
 CVE-2026-5987 - https://github.com/sanluan/PublicCMS/issues/113
@@ -141944,6 +141968,8 @@ CVE-2026-6124 - https://vuldb.com/vuln/356987
 CVE-2026-6124 - https://vuldb.com/vuln/356987/cti
 CVE-2026-6125 - https://vuldb.com/vuln/356989/cti
 CVE-2026-6135 - https://vuldb.com/submit/792877
+CVE-2026-6157 - https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A800R/01_Buffer_Overflow_setAppEasyWizardConfig.md
+CVE-2026-6158 - https://github.com/xyh4ck/iot_poc/tree/main/TOTOLINK/N300RHv4/02_setUpgradeUboot_RCE
 CVE-2026-6190 - https://github.com/ltranquility/cve_submit/issues/15
 CVE-2026-6191 - https://github.com/ltranquility/cve_submit/issues/16
 CVE-2026-6204 - https://projectblack.io/blog/librenms-authenticated-rce-and-xss/#binary-path-rce-poc
@@ -141980,6 +142006,7 @@ CVE-2026-6868 - https://gitlab.com/wireshark/wireshark/-/work_items/21185
 CVE-2026-6869 - https://gitlab.com/wireshark/wireshark/-/work_items/21190
 CVE-2026-6902 - https://portal.perforce.com/s/cve/a91Qi000002zJB3IAM/code-injection-in-perforce-helix-core
 CVE-2026-6951 - https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-15456078
+CVE-2026-6988 - https://github.com/xyh4ck/iot_poc/blob/main/Tenda/HG10/01_Buffer_Overflow_nextHop/README.md
 CVE-2026-7021 - https://gist.github.com/YLChen-007/3d35e0ce8197989ee4de4a93def30d47
 CVE-2026-7022 - https://gist.github.com/YLChen-007/c6a4a6a5f4c8b9e758f72c07ca0cd30d
 CVE-2026-7024 - https://github.com/yingxiujie/cve/issues/2
@@ -141998,6 +142025,7 @@ CVE-2026-7057 - https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_128/
 CVE-2026-7064 - https://github.com/AgentDeskAI/browser-tools-mcp/issues/232
 CVE-2026-7065 - https://github.com/BidingCC/BuildingAI/issues/110
 CVE-2026-7066 - https://github.com/choieastsea/simple-openstack-mcp/issues/3
+CVE-2026-7080 - https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_132/README.md
 CVE-2026-7089 - https://github.com/Xmyronn/home-service-system-unauth-stored-xss-admin-takeover-code-project.org-.git
 CVE-2026-7090 - https://gist.github.com/higordiego/4683bee16b197643744159b76d0c1ea6
 CVE-2026-7093 - https://gist.github.com/higordiego/1d1a2b84768e4f80c673bd27be32c256
@@ -142005,11 +142033,14 @@ CVE-2026-7094 - https://github.com/BruceJqs/public_exp/issues/7
 CVE-2026-7094 - https://github.com/ShadowCloneLabs/GlutamateMCPServers/issues/8
 CVE-2026-7097 - https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_135/README.md
 CVE-2026-7098 - https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_136/README.md
+CVE-2026-7099 - https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_137/README.md
 CVE-2026-7100 - https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_138/README.md
 CVE-2026-7103 - https://gist.github.com/higordiego/84ae7f08f5c23debebf309de3920bda2
 CVE-2026-7107 - https://gist.github.com/higordiego/ea5944bd29cffee1162491d60ed5785a
 CVE-2026-7109 - https://gist.github.com/higordiego/579622f7596354ade69e235b8e1cb88b
 CVE-2026-7113 - https://github.com/NousResearch/hermes-agent/issues/6440
+CVE-2026-7115 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul5.md
+CVE-2026-7122 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_307/README.md
 CVE-2026-7124 - https://github.com/Litengzheng/vuldb_new2/tree/main/A8000RU/vul_309/README.md
 CVE-2026-7126 - https://github.com/y1shiny1shin/vuldb-project/issues/2
 CVE-2026-7127 - https://github.com/y1shiny1shin/vuldb-project/issues/1
@@ -142022,6 +142053,7 @@ CVE-2026-7142 - https://github.com/wooey/Wooey/issues/408
 CVE-2026-7146 - https://github.com/AlejandroArciniegas/mcp-data-vis/issues/1
 CVE-2026-7148 - https://github.com/wangchaoxing/CVE/issues/7
 CVE-2026-7149 - https://github.com/dexhunter/kaggle-mcp/issues/1
+CVE-2026-7152 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_316/README.md
 CVE-2026-7153 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_317/README.md
 CVE-2026-7177 - https://gist.github.com/YLChen-007/da6b00024f5b7e1d4fa0658c19b77fbf
 CVE-2026-7177 - https://github.com/ChatGPTNextWeb/NextChat/issues/6742
@@ -142041,6 +142073,7 @@ CVE-2026-7220 - https://github.com/jackwrichards/FastlyMCP/issues/3
 CVE-2026-7221 - https://github.com/TencentCloudBase/CloudBase-MCP/issues/509
 CVE-2026-7222 - https://github.com/Xmyronn/Stored-Cross-Site-Scripting-XSS-in-Coaching-Management-System.git
 CVE-2026-7223 - https://github.com/BigSweetPotatoStudio/HyperChat/issues/142
+CVE-2026-7225 - https://github.com/fernando-mengali/vulndb-submissions/blob/main/02-vul-SQLI.md
 CVE-2026-7226 - https://github.com/fernando-mengali/vulndb-submissions/blob/main/03-vul-SQLI.md
 CVE-2026-7229 - https://github.com/Xmyronn/Authenticated-SQL-Injection-in-Coaching-Management-System.git
 CVE-2026-7233 - https://github.com/biniamf/pocs/tree/main/mupdf-cff-indexload-oobread
@@ -142050,6 +142083,7 @@ CVE-2026-7237 - https://github.com/AgiFlow/aicode-toolkit/commit/c4d23592ae5fb59
 CVE-2026-7237 - https://github.com/AgiFlow/aicode-toolkit/issues/88
 CVE-2026-7238 - https://github.com/gtxy114514/CVE/issues/4
 CVE-2026-7241 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_325/README.md
+CVE-2026-7242 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_326/README.md
 CVE-2026-7244 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_328/README.md
 CVE-2026-7246 - https://github.com/tsigouris007/security-advisories/security/advisories/GHSA-47fr-3ffg-hgmw
 CVE-2026-7247 - https://github.com/draw-ctf/report/blob/main/DI-8100/file_exten_asp_overflow.md
@@ -142075,6 +142109,7 @@ CVE-2026-7375 - https://gitlab.com/wireshark/wireshark/-/work_items/21225
 CVE-2026-7376 - https://gitlab.com/wireshark/wireshark/-/work_items/21206
 CVE-2026-7378 - https://gitlab.com/wireshark/wireshark/-/work_items/21207
 CVE-2026-7379 - https://gitlab.com/wireshark/wireshark/-/work_items/21214
+CVE-2026-7385 - https://wpscan.com/vulnerability/1c5949d0-cf50-45d3-a7e2-2f94cdb42405/
 CVE-2026-7386 - https://github.com/fatbobman/mail-mcp-bridge/issues/2
 CVE-2026-7391 - https://github.com/microwaveabi/vul/issues/3
 CVE-2026-7392 - https://github.com/microwaveabi/vul/issues/2
@@ -142131,6 +142166,7 @@ CVE-2026-7704 - https://gist.github.com/TrebledJ/585a20525e45549f299d28223363260
 CVE-2026-7710 - https://github.com/9str0IL/CVE/issues/5
 CVE-2026-7712 - https://github.com/nn0nkey/JD-Security-SHENYI-Team/blob/main/MindsDB_Pickle_RCE.md
 CVE-2026-7714 - https://gist.github.com/menelausx/1b45c952d352a2ebdc01cd8d5aa88e87
+CVE-2026-7716 - https://github.com/QAp89/CVE/blob/main/SQL1.md
 CVE-2026-7722 - https://gist.github.com/nedlir/f576abbb0e491dc9bb7e106c140dda04
 CVE-2026-7724 - https://gist.github.com/nedlir/fa99777e8989414585d08c3625bf044a
 CVE-2026-7725 - https://gist.github.com/nedlir/c37d90dda5f715790eafc970b2ef0c8a