Update CVE PoCs 2026-10-02

2026-10-27 16:51:03 +00:00 · 2026-10-02 08:42:37 +00:00
1 parent 048e06b827
commit 27974ff367
@@ -1,3 +1,3 @@
 {
-  "cvelist_fetch_time": "2026-10-01T08:47:37.882Z"
+  "cvelist_fetch_time": "2026-10-02T07:55:29.613Z"
 }
@@ -1,8 +1,8 @@
 <div align="center">

-<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173203-83898-1219" alt="PoC Index" width="100%"></a>
+<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173234-83929-1219" alt="PoC Index" width="100%"></a>

-[![last sync](https://img.shields.io/badge/last%20sync-02%20Oct%202026%2008%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610020807)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C898-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C219-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610020807)](https://github.com/0xMarcio/pocindex/stargazers)
+[![last sync](https://img.shields.io/badge/last%20sync-02%20Oct%202026%2008%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610020807)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C929-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C219-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610020807)](https://github.com/0xMarcio/pocindex/stargazers)

 <a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>

@@ -54,7 +54,6 @@ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Micr
 - https://github.com/zhouat/cve-2017-11882
 - https://github.com/0x09AL/CVE-2017-11882-metasploit
 - https://github.com/MrWaifu24/vet
- https://github.com/embedi/CVE-2017-11882

 #### ExploitDB
 - https://www.exploit-db.com/exploits/43163
@@ -31,6 +31,7 @@ Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows rem
 - https://github.com/moonwayy/hindicybersec
 - https://github.com/p1ckzi/CVE-2017-9841
 - https://github.com/krisdewa/CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC
+- https://github.com/CheLover86/CVE-2017-9841

 #### Nuclei
 - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml
@@ -22,6 +22,4 @@ Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Offic
 - https://github.com/likescam/CVE-2018-0802_CVE-2017-11882
 - https://github.com/roninAPT/CVE-2018-0802
 - https://github.com/MrWaifu24/vet
- https://github.com/rxwx/CVE-2018-0802
- https://github.com/zldww2011/CVE-2018-0802_POC

@@ -2,7 +2,7 @@
 **Voyager 1.3.0 - Directory Traversal**
 ![](https://img.shields.io/static/v1?label=Vendor&message=The%20Control%20Group&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Voyager&color=blue)
-![](https://img.shields.io/static/v1?label=Version&message=%3C%3D%201.3.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.3.0&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20%28%27Path%20Traversal%27%29&color=brightgreen)

 ### Description
@@ -1,7 +1,21 @@
 ### [CVE-2023-1989](https://www.cve.org/CVERecord?id=CVE-2023-1989)
-![](https://img.shields.io/static/v1?label=Product&message=Kernel&color=blue)
-![](https://img.shields.io/static/v1?label=Version&message=Linux%20kernel%20version%20prior%20to%20Kernel%206.3%20RC4&color=brightgreen)
-![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416&color=brightgreen)
+**Kernel: use after free bug in btsdio_remove due to race condition**
+![](https://img.shields.io/static/v1?label=Vendor&message=Red%20Hat&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208.6%20Extended%20Update%20Support&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208.8%20Extended%20Update%20Support&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Virtualization%204%20for%20Red%20Hat%20Enterprise%20Linux%208&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.6.24&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.15&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=5.5&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=5.11&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=5.16&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=6.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Use%20After%20Free&color=brightgreen)

 ### Description

@@ -1,9 +1,9 @@
 ### [CVE-2023-30804](https://www.cve.org/CVERecord?id=CVE-2023-30804)
 **Sangfor Next-Gen Application Firewall Authenticated File Disclosure**
 ![](https://img.shields.io/static/v1?label=Vendor&message=Sangfor&color=blue)
-![](https://img.shields.io/static/v1?label=Product&message=Net-Gen%20Application%20Firewall&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Next-Gen%20Application%20Firewall%20%28NGAF%29&color=blue)
 ![](https://img.shields.io/static/v1?label=Version&message=8.0.17&color=brightgreen)
-![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%3A%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20%28%27Path%20Traversal%27%29&color=brightgreen)

 ### Description

@@ -8,6 +8,8 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20AI%20Inference%20Server%203.2&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Discovery%202&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.0&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.2&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.4&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
@@ -0,0 +1,19 @@
+### [CVE-2024-58388](https://www.cve.org/CVERecord?id=CVE-2024-58388)
+**Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html**
+![](https://img.shields.io/static/v1?label=Vendor&message=Sharp%20Corporation&color=blue)
+![](https://img.shields.io/static/v1?label=Vendor&message=Toshiba%20Tec%20Corporation&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Multiple%20Multifunction%20Printers&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=%2A&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20%28%27Path%20Traversal%27%29&color=brightgreen)
+
+### Description
+
+Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../<path> to access files outside the intended manual directory, including /etc/passwd, coredump files containing credentials, and system configuration files. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.
+
+### POC
+
+#### Reference
+- https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi
+
+#### Github
+No PoCs found on GitHub currently.
@@ -116,7 +116,6 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
 - https://github.com/Panche1/SSHPentest
 - https://github.com/hungln105-cell/skill-bug-app
 - https://github.com/domanhcuongkent1991-blip/security-tool
- https://github.com/zgzhang/cve-2024-6387-poc

 #### ExploitDB
 - https://www.exploit-db.com/exploits/52269
@@ -30,7 +30,6 @@ A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5,
 - https://github.com/watchtowrlabs/CVE-2025-0282
 - https://github.com/gmh5225/Blackash-CVE-2025-0282
 - https://github.com/razureink/cve-2025-0282-ivanti_rce_reproduction
- https://github.com/sfewer-r7/CVE-2025-0282

 #### Nuclei
 - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0282.yaml
@@ -16,6 +16,7 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Discovery%202&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.4&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Update%20Infrastructure%205&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
@@ -12,6 +12,10 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.0&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.2&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.3&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.4&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%203.5&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Update%20Infrastructure%205&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
@@ -18,4 +18,4 @@ A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. T
 - https://github.com/4ybrick/CVE-2026-100903

 #### Github
- https://github.com/4ybrick/CVE-2026-100903
+No PoCs found on GitHub currently.
@@ -0,0 +1,19 @@
+### [CVE-2026-101012](https://www.cve.org/CVERecord?id=CVE-2026-101012)
+**mathurvishal CloudClassroom-PHP-Project makeresult.php sql injection**
+![](https://img.shields.io/static/v1?label=Vendor&message=mathurvishal&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=CloudClassroom-PHP-Project&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5dadec098bfbbf3300d60c3494db3fb95b66e7be&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+
+### Description
+
+A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://github.com/vinniboy021-blip/Advisory/blob/main/makeresult-sqli.md
+
+#### Github
+No PoCs found on GitHub currently.
@@ -17,6 +17,7 @@ A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected

 #### Reference
 - https://github.com/OS4ED/openSIS-Classic/issues/475
+- https://github.com/OS4ED/openSIS-Classic/issues/473

 #### Github
 No PoCs found on GitHub currently.
@@ -0,0 +1,34 @@
+### [CVE-2026-103686](https://www.cve.org/CVERecord?id=CVE-2026-103686)
+**rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting**
+![](https://img.shields.io/static/v1?label=Vendor&message=rhukster&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=dom-sanitizer&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.3&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.4&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.5&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.6&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.7&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.8&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.9&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.10&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.11&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.12&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.13&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.14&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.15&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20Site%20Scripting&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Code%20Injection&color=brightgreen)
+
+### Description
+
+A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 1.0.16 is recommended to address this issue. Patch name: 4623b565d060bc02ca5a07d8c8241fe28e2edfda. It is suggested to upgrade the affected component.
+
+### POC
+
+#### Reference
+- https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-mrpv-6x26-mf6c
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,34 @@
+### [CVE-2026-103687](https://www.cve.org/CVERecord?id=CVE-2026-103687)
+**rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist**
+![](https://img.shields.io/static/v1?label=Vendor&message=rhukster&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=dom-sanitizer&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.3&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.4&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.5&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.6&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.7&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.8&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.9&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.10&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.11&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.12&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.13&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.14&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=1.0.15&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Incomplete%20Blacklist&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Permissive%20List%20of%20Allowed%20Inputs&color=brightgreen)
+
+### Description
+
+A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.16 is sufficient to fix this issue. The name of the patch is 139c46c3d7c9bc81542b7b5a58d5cde5d0e0195a. Upgrading the affected component is recommended.
+
+### POC
+
+#### Reference
+- https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-cjfg-j8jp-5xvc
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,19 @@
+### [CVE-2026-103690](https://www.cve.org/CVERecord?id=CVE-2026-103690)
+**itsourcecode Leave Management System controller.php sql injection**
+![](https://img.shields.io/static/v1?label=Vendor&message=itsourcecode&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Leave%20Management%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+
+### Description
+
+A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
+
+### POC
+
+#### Reference
+- https://github.com/ltranquility/submit_repository/issues/18
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-103766](https://www.cve.org/CVERecord?id=CVE-2026-103766)
+**ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter**
+![](https://img.shields.io/static/v1?label=Vendor&message=MacWarrior&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=clipbucket-v5&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20%28%27SQL%20Injection%27%29&color=brightgreen)
+
+### Description
+
+ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via the delete parameter in admin_area/ads_manager.php. Attackers can supply time-based blind payloads concatenated into AdsManager::DeleteAd queries to extract user credentials and emails or modify and delete arbitrary records.
+
+### POC
+
+#### Reference
+- https://hackmd.io/@leediay/sqli-via-delete-ads-clipbucketv5
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,19 @@
+### [CVE-2026-104052](https://www.cve.org/CVERecord?id=CVE-2026-104052)
+**itsourcecode Pet Shop Management System admin_reject_completed.php sql injection**
+![](https://img.shields.io/static/v1?label=Vendor&message=itsourcecode&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Pet%20Shop%20Management%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
+
+### POC
+
+#### Reference
+- https://github.com/Useless-Noob-hub/cve/issues/1
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,21 @@
+### [CVE-2026-104054](https://www.cve.org/CVERecord?id=CVE-2026-104054)
+**calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization**
+![](https://img.shields.io/static/v1?label=Vendor&message=calcom&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=cal.diy&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=6.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=6.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=6.2.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Missing%20Authorization&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Incorrect%20Authorization&color=brightgreen)
+
+### Description
+
+A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
+
+### POC
+
+#### Reference
+- https://github.com/calcom/cal.diy/issues/29802
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,23 @@
+### [CVE-2026-104120](https://www.cve.org/CVERecord?id=CVE-2026-104120)
+**modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery**
+![](https://img.shields.io/static/v1?label=Vendor&message=modelcontextprotocol&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=mcp-server-fetch&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=mcp-server-everything&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2026.6.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2026.6.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2026.6.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2026.6.3&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2026.6.4&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Server-Side%20Request%20Forgery&color=brightgreen)
+
+### Description
+
+A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_server_fetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
+
+### POC
+
+#### Reference
+- https://github.com/modelcontextprotocol/servers/issues/4492
+
+#### Github
+No PoCs found on GitHub currently.
@@ -1,7 +1,8 @@
 ### [CVE-2026-11499](https://www.cve.org/CVERecord?id=CVE-2026-11499)
-**Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow**
+**Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow**
 ![](https://img.shields.io/static/v1?label=Vendor&message=Tenda&color=blue)
-![](https://img.shields.io/static/v1?label=Product&message=HG7HG9&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=HG7&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=HG9&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=HG10&color=blue)
 ![](https://img.shields.io/static/v1?label=Version&message=300001138_en_xpon&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=Stack-based%20Buffer%20Overflow&color=brightgreen)
@@ -1,7 +1,8 @@
 ### [CVE-2026-11553](https://www.cve.org/CVERecord?id=CVE-2026-11553)
-**Tenda HG7HG9/HG10 formPPPEdit stack-based overflow**
+**Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow**
 ![](https://img.shields.io/static/v1?label=Vendor&message=Tenda&color=blue)
-![](https://img.shields.io/static/v1?label=Product&message=HG7HG9&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=HG7&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=HG9&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=HG10&color=blue)
 ![](https://img.shields.io/static/v1?label=Version&message=300001138_en_xpon&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=Stack-based%20Buffer%20Overflow&color=brightgreen)
@@ -0,0 +1,17 @@
+### [CVE-2026-13413](https://www.cve.org/CVERecord?id=CVE-2026-13413)
+**CMP - Coming Soon & Maintenance < 4.1.20 - Unauthenticated Maintenance Mode Bypass via Login URL Match**
+![](https://img.shields.io/static/v1?label=Product&message=CMP%20%E2%80%93%20Coming%20Soon%20%26%20Maintenance&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brightgreen)
+
+### Description
+
+The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while maintenance/coming-soon mode is enabled, allowing unauthenticated visitors to bypass the coming-soon page and reach the otherwise hidden site, including hidden published pages, by shaping the request so it is mistaken for a login request.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/706afdef-4935-44d9-ab09-68c80f3bfef9/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-13718](https://www.cve.org/CVERecord?id=CVE-2026-13718)
+**Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content**
+![](https://img.shields.io/static/v1?label=Product&message=Tabs%20Responsive&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Tabs Responsive  WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/ff0da7b7-f415-466e-9f6e-4c559d2699a9/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-1661](https://www.cve.org/CVERecord?id=CVE-2026-1661)
+**WP Mail Logging < 1.17.0 - Unauthenticated HTML Injection**
+![](https://img.shields.io/static/v1?label=Product&message=WP%20Mail%20Logging&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an administrator viewing the log and send their browser to an attacker-controlled page.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/dde19119-7ea8-4d02-bf89-7a6b0ca010b5/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -16,4 +16,3 @@ Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code executi

 #### Github
 - https://github.com/0xCyp1337/CVE-2026-44402
- https://github.com/Virgula0/CVE-2026-44402
@@ -126,3 +126,4 @@ No PoCs from references.
 - https://github.com/a23bc/op13-cve-2026-64560
 - https://github.com/Wangs-official/opace6-cve-2026-64560
 - https://github.com/qingle009/opace6-cve-2026-64560
+- https://github.com/Meniben/redmi14c-pond-cve-2026-64560
@@ -13,6 +13,7 @@ Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulne

 #### Reference
 - https://seclists.org/fulldisclosure/2026/Sep/0
+- https://olografix.org/acme/_poc/CVE-2026-6958.pdf

 #### Github
 No PoCs found on GitHub currently.
@@ -12,7 +12,7 @@ SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability
 ### POC

 #### Reference
-No PoCs from references.
+- https://blog.lexfo.fr/casse-spip-sqli-to-rce.html

 #### Github
 - https://github.com/ambionics/spip-exploits
@@ -12,7 +12,7 @@ SPIP before version 4.4.18 contains a missing authorization vulnerability in sen
 ### POC

 #### Reference
-No PoCs from references.
+- https://blog.lexfo.fr/casse-spip-sqli-to-rce.html

 #### Github
 - https://github.com/ambionics/spip-exploits
@@ -12,7 +12,7 @@ SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet
 ### POC

 #### Reference
-No PoCs from references.
+- https://blog.lexfo.fr/casse-spip-sqli-to-rce.html

 #### Github
 - https://github.com/ambionics/spip-exploits
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAu
 - https://github.com/BomboBombone/CVE-2026-73309

 #### Github
- https://github.com/BomboBombone/CVE-2026-73309
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoin
 - https://github.com/BomboBombone/CVE-2026-73310

 #### Github
- https://github.com/BomboBombone/CVE-2026-73310
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability
 - https://github.com/BomboBombone/CVE-2026-73311

 #### Github
- https://github.com/BomboBombone/CVE-2026-73311
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a refresh token replay vulnerability that allows
 - https://github.com/BomboBombone/CVE-2026-73312

 #### Github
- https://github.com/BomboBombone/CVE-2026-73312
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerabilit
 - https://github.com/BomboBombone/CVE-2026-73313

 #### Github
- https://github.com/BomboBombone/CVE-2026-73313
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a signature verification logic error in the PayPa
 - https://github.com/BomboBombone/CVE-2026-73314

 #### Github
- https://github.com/BomboBombone/CVE-2026-73314
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a server-side request forgery vulnerability in th
 - https://github.com/BomboBombone/CVE-2026-73315

 #### Github
- https://github.com/BomboBombone/CVE-2026-73315
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST
 - https://github.com/BomboBombone/CVE-2026-73316

 #### Github
- https://github.com/BomboBombone/CVE-2026-73316
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP
 - https://github.com/BomboBombone/CVE-2026-73317

 #### Github
- https://github.com/BomboBombone/CVE-2026-73317
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a missing authorization vulnerability in the forc
 - https://github.com/BomboBombone/CVE-2026-73318

 #### Github
- https://github.com/BomboBombone/CVE-2026-73318
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynam
 - https://github.com/BomboBombone/CVE-2026-73319

 #### Github
- https://github.com/BomboBombone/CVE-2026-73319
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an unauthenticated information disclosure vulnera
 - https://github.com/BomboBombone/CVE-2026-73320

 #### Github
- https://github.com/BomboBombone/CVE-2026-73320
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BB
 - https://github.com/BomboBombone/CVE-2026-73321

 #### Github
- https://github.com/BomboBombone/CVE-2026-73321
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a path traversal vulnerability in the style archi
 - https://github.com/BomboBombone/CVE-2026-74239

 #### Github
- https://github.com/BomboBombone/CVE-2026-74239
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-76844](https://www.cve.org/CVERecord?id=CVE-2026-76844)
+**zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write**
+![](https://img.shields.io/static/v1?label=Vendor&message=zlib&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=zlib&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.2.11&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Out-of-bounds%20Write&color=brightgreen)
+
+### Description
+
+zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.
+
+### POC
+
+#### Reference
+- https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-79618](https://www.cve.org/CVERecord?id=CVE-2026-79618)
+**WP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated Form**
+![](https://img.shields.io/static/v1?label=Product&message=WP%20User%20Frontend&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The WP User Frontend WordPress plugin before 4.3.12 does not enforce its subscription-purchase requirement in one of its post-creation handlers, allowing authenticated users with subscriber-level access and above to create and, depending on the form's configuration, immediately publish posts through forms restricted to paying subscribers.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/a11bf097-3829-4baa-878c-80b113c5a744/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-81740](https://www.cve.org/CVERecord?id=CVE-2026-81740)
+**Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback**
+![](https://img.shields.io/static/v1?label=Product&message=Paytm%20Payment%20Gateway&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brightgreen)
+
+### Description
+
+The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of arbitrary orders, including marking unpaid orders as paid and reducing stock.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/13767875-5010-494a-b3ed-133d58b8ecea/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-84740](https://www.cve.org/CVERecord?id=CVE-2026-84740)
+**The Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution via 'view_data' Parameter**
+![](https://img.shields.io/static/v1?label=Product&message=The%20Events%20Calendar&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=6.12.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-74%20Improper%20Neutralization%20of%20Special%20Elements%20in%20Output%20Used%20by%20a%20Downstream%20Component%20%28%27Injection%27%29&color=brightgreen)
+
+### Description
+
+The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an unauthenticated AJAX action before merging it into its rendering context, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/3381a51e-beaa-4420-a33b-6a68612a2e8a/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-85004](https://www.cve.org/CVERecord?id=CVE-2026-85004)
+**Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect**
+![](https://img.shields.io/static/v1?label=Product&message=Popup%20Maker&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brightgreen)
+
+### Description
+
+The Popup Maker  WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection actions, only verifying a nonce, allowing authenticated users with minimal privileges such as Subscribers to overwrite a site-wide Popup Maker  WordPress plugin through 1.4.5 option (the linked service account and API configuration) that should only be modifiable by administrators.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/38041b58-7738-4710-a1b6-4005e9ec2c01/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-85005](https://www.cve.org/CVERecord?id=CVE-2026-85005)
+**Popup Maker WP 1.2.2.1 - 1.4.5 - Subscriber+ Zero-Argument PHP Callable Invocation via Missing Authorization**
+![](https://img.shields.io/static/v1?label=Product&message=Popup%20Maker%20WP&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.2.2.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The Popup Maker WP WordPress plugin through 1.4.5 does not perform authorization checks on several of its actions and exposes its management page to any logged-in user, allowing users with a low-privileged role such as Subscriber to store display-targeting values that are later invoked as zero-argument PHP callables on public page loads, leading to sensitive information disclosure and denial of service.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/bddba59e-ab36-427f-9b21-98144bf783ff/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-85016](https://www.cve.org/CVERecord?id=CVE-2026-85016)
+**Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter**
+![](https://img.shields.io/static/v1?label=Product&message=Unlimited%20Elements%20for%20Elementor&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access (who do not hold unfiltered_html) to store a payload that executes when the page is rendered.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/1d488c84-2797-4c02-8c13-54b80e4128dc/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-90952](https://www.cve.org/CVERecord?id=CVE-2026-90952)
+**WP Edit Password Protected 2.0.0 - 2.0.6 - Unauthenticated Site-Wide Access Mode Bypass via REST API**
+![](https://img.shields.io/static/v1?label=Product&message=WP%20Edit%20Password%20Protected&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.0.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/8cc260a9-f335-4d8c-a1e0-f942f0963bcf/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-90987](https://www.cve.org/CVERecord?id=CVE-2026-90987)
+**Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price**
+![](https://img.shields.io/static/v1?label=Product&message=Easy%20PayPal%20%26%20Stripe%20Buy%20Now%20Button&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.8&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-472%20External%20Control%20of%20Assumed-Immutable%20Web%20Parameter&color=brightgreen)
+
+### Description
+
+The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/7c1faee8-628a-41dc-a5f0-afbc56480a18/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-90988](https://www.cve.org/CVERecord?id=CVE-2026-90988)
+**Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum**
+![](https://img.shields.io/static/v1?label=Product&message=Request%20a%20Quote&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
+
+### Description
+
+The Request a Quote  WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/6c02759e-b37e-43ce-a4f4-467e8af63a17/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-91020](https://www.cve.org/CVERecord?id=CVE-2026-91020)
+**WebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amount**
+![](https://img.shields.io/static/v1?label=Product&message=WebToffee%20Gift%20Cards%20for%20WooCommerce&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-472%20External%20Control%20of%20Assumed-Immutable%20Web%20Parameter&color=brightgreen)
+
+### Description
+
+The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the configured denominations and manipulating the order total to obtain products without paying.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/998db4a0-693c-4701-a37e-ec33002e1417/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-91022](https://www.cve.org/CVERecord?id=CVE-2026-91022)
+**Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color**
+![](https://img.shields.io/static/v1?label=Product&message=Motors&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Motors  WordPress plugin before 1.4.124 does not sanitise and escape a listing badge setting before outputting it inside an HTML attribute, allowing users with a custom, administrator-assigned listing-management role to inject arbitrary web scripts that execute when a listing is viewed by any visitor, including an administrator.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/72672806-e2f3-417e-83c0-854c604028e4/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-91023](https://www.cve.org/CVERecord?id=CVE-2026-91023)
+**Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured**
+![](https://img.shields.io/static/v1?label=Product&message=Motors&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The Motors  WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, allowing authenticated attackers with subscriber-level access and above to set metadata on posts they do not own, including overwriting product prices. Exploitation is possible only when WooCommerce is active and the Motors  WordPress plugin before 1.4.124's paid featured-listing option is enabled, neither of which is a default configuration.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/c2400c65-5d77-454c-9691-5e664556341b/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-91828](https://www.cve.org/CVERecord?id=CVE-2026-91828)
+**OMGF < 6.3.11 - Unauthenticated DoS via do_optimize**
+![](https://img.shields.io/static/v1?label=Product&message=OMGF%20%7C%20GDPR%2FDSGVO%20Compliant%2C%20Faster%20Google%20Fonts.%20Easy.&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%20Uncontrolled%20Resource%20Consumption&color=brightgreen)
+
+### Description
+
+The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-side loopback request, allowing unauthenticated attackers to exhaust the site's PHP worker pool and make the entire site unavailable.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/be25f7b5-5790-4db7-9056-b43b538a7183/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-92924](https://www.cve.org/CVERecord?id=CVE-2026-92924)
+**Unlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_data**
+![](https://img.shields.io/static/v1?label=Product&message=Unlimited%20Elements%20for%20Elementor&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-74%20Improper%20Neutralization%20of%20Special%20Elements%20in%20Output%20Used%20by%20a%20Downstream%20Component%20%28%27Injection%27%29&color=brightgreen)
+
+### Description
+
+The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget output comes from a user allowed to make it, allowing users with a role as low as subscriber to have arbitrary WordPress shortcodes executed on the site. Version 2.0.18 removed the subscriber-level access, so from 2.0.18 onward the issue requires a Contributor role or above.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/28be6bd7-311d-4338-8256-7378e268c0f8/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-94298](https://www.cve.org/CVERecord?id=CVE-2026-94298)
+**BuildKit < 1.0.29 - Contributor+ Stored SQLi via list_content Parameter**
+![](https://img.shields.io/static/v1?label=Product&message=BuildKit&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20SQL%20Injection&color=brightgreen)
+
+### Description
+
+The BuildKit  WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the database once the resulting content is published and viewed by any unauthenticated visitor.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/6f6c8718-7e7e-4700-a4c2-ee177c44b7ea/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-97219](https://www.cve.org/CVERecord?id=CVE-2026-97219)
+**MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter**
+![](https://img.shields.io/static/v1?label=Product&message=MStore%20API&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.21.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The MStore API WordPress plugin before 4.22.1 does not restrict which fields of an order a customer may update, allowing any authenticated user with a self-registerable account to change the status of their own unpaid order to a paid or fulfilled state and receive the goods without paying.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/0787d00b-2263-465f-8f46-906741bf6629/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-97317](https://www.cve.org/CVERecord?id=CVE-2026-97317)
+**Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page**
+![](https://img.shields.io/static/v1?label=Product&message=Giveaways%20and%20Contests%20by%20RafflePress&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
+
+### Description
+
+The Giveaways and Contests by RafflePress  WordPress plugin before 1.12.27 does not remove the reCAPTCHA secret key from the giveaway settings it embeds in public giveaway pages, allowing unauthenticated visitors to retrieve the secret key of any active giveaway that has reCAPTCHA configured.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/f8779fd4-f362-40c4-8df1-145620c69103/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-97318](https://www.cve.org/CVERecord?id=CVE-2026-97318)
+**Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter**
+![](https://img.shields.io/static/v1?label=Product&message=Giveaways%20and%20Contests%20by%20RafflePress&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-601%20URL%20Redirection%20to%20Untrusted%20Site%20%28%27Open%20Redirect%27%29&color=brightgreen)
+
+### Description
+
+The Giveaways and Contests by RafflePress  WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect visitors to an arbitrary external site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/a171b0f1-b2d2-4482-b44f-bd4a1f3b223b/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
-     role="img" aria-label="PoC Index, 83,898 CVEs with public proof-of-concept exploits">
+     role="img" aria-label="PoC Index, 83,929 CVEs with public proof-of-concept exploits">
  <clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
  <rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
  <g clip-path="url(#card)" opacity="0.6"><g>
@@ -19,10 +19,10 @@
  <text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>

  <text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">173,203</text>
+        fill="#e6edf3" letter-spacing="-0.5">173,234</text>
  <text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
        fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">83,898</text>
+        fill="#2f81f7" letter-spacing="-0.5">83,929</text>
  <text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
        fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
        fill="#f85149" letter-spacing="-0.5">1,219</text>
@@ -20,10 +20,10 @@

  <rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
  <text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">173,203</text>
+        fill="#e6edf3" letter-spacing="-0.5">173,234</text>
  <text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
        fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">83,898</text>
+        fill="#2f81f7" letter-spacing="-0.5">83,929</text>
  <text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
        fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
        fill="#f85149" letter-spacing="-0.5">1,219</text>
@@ -1,5 +1,5 @@
 {
 "kev": 1219,
- "total_cves": 173203,
- "with_pocs": 83898
+ "total_cves": 173234,
+ "with_pocs": 83929
 }
@@ -1 +1 @@
-{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
+{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
@@ -17155,7 +17155,6 @@ CVE-2025-0282 - https://github.com/almanatra/CVE-2025-0282
 CVE-2025-0282 - https://github.com/AnonStorks/CVE-2025-0282-Full-version
 CVE-2025-0282 - https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser
 CVE-2025-0282 - https://github.com/punitdarji/Ivanti-CVE-2025-0282
-CVE-2025-0282 - https://github.com/sfewer-r7/CVE-2025-0282
 CVE-2025-0282 - https://github.com/watchtowrlabs/CVE-2025-0282
 CVE-2025-0288 - https://github.com/barhen12/CVE-2025-0288
 CVE-2025-0291 - https://github.com/Petitoto/chromium-exploit-dev
@@ -26337,7 +26336,6 @@ CVE-2024-38077 - https://github.com/starscow/CVE-2024-38077-POC
 CVE-2025-33073 - https://github.com/starscow/CVE-2025-33073
 CVE-2026-30368 - https://github.com/truekas/ls-poc
 CVE-2026-31431 - https://github.com/starscow/Copy-Fail-CVE-2026-31431-Kubernetes-PoC
-CVE-2026-44402 - https://github.com/Virgula0/CVE-2026-44402
 CVE-2026-78838 - https://github.com/nabeelmkhan/CVE-2026-78838
 CVE-2026-67276 - https://github.com/4rt-Net/Mikrotrick_POC
 CVE-2026-74586 - https://github.com/TarPeg007/CVE-2026-74586
@@ -26398,20 +26396,8 @@ CVE-2012-10037 - https://github.com/kyaw-tun/red-team-capstone
 CVE-2021-29441 - https://github.com/galact-byte/dddd-next
 CVE-2022-0847 - https://github.com/vudangducminh/CVE-2022-0847
 CVE-2022-24637 - https://github.com/PrinceAikinsBaidoo/CVE-2022-24637
-CVE-2026-73312 - https://github.com/BomboBombone/CVE-2026-73312
 CVE-2025-54352 - https://github.com/mufasa-noir/XMLRPC-Pingback-vulnerability-POC
 CVE-2026-35194 - https://github.com/DexSemon/CVE-2026-35194
-CVE-2026-73309 - https://github.com/BomboBombone/CVE-2026-73309
-CVE-2026-73310 - https://github.com/BomboBombone/CVE-2026-73310
-CVE-2026-73311 - https://github.com/BomboBombone/CVE-2026-73311
-CVE-2026-73314 - https://github.com/BomboBombone/CVE-2026-73314
-CVE-2026-73315 - https://github.com/BomboBombone/CVE-2026-73315
-CVE-2026-73316 - https://github.com/BomboBombone/CVE-2026-73316
-CVE-2026-73317 - https://github.com/BomboBombone/CVE-2026-73317
-CVE-2026-73319 - https://github.com/BomboBombone/CVE-2026-73319
-CVE-2026-73320 - https://github.com/BomboBombone/CVE-2026-73320
-CVE-2026-73321 - https://github.com/BomboBombone/CVE-2026-73321
-CVE-2026-74239 - https://github.com/BomboBombone/CVE-2026-74239
 CVE-2026-78997 - https://github.com/Hunt-Benito/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss
 CVE-2026-22732 - https://github.com/dylan-chainguard/cve-2026-22732-poc
 CVE-2026-33017 - https://github.com/MaximilianoMeyer/CVE-2026-33017
@@ -26515,8 +26501,6 @@ CVE-2021-4034 - https://github.com/r00t-byte/Pwnkit-CVE-2021-4034-LPE
 CVE-2021-3156 - https://github.com/wangqian06/CVE-2021-3156
 CVE-2026-43499 - https://github.com/Bobikl/CVE-2026-43499-T807D
 CVE-2026-43783 - https://github.com/andrd3v/CVE-2026-43783
-CVE-2026-73313 - https://github.com/BomboBombone/CVE-2026-73313
-CVE-2026-73318 - https://github.com/BomboBombone/CVE-2026-73318
 CVE-2026-46331 - https://github.com/theendofabbys/pedit-cow
 CVE-2025-24813 - https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813
 CVE-2026-59550 - https://github.com/FLX-0x00/CVE-2026-59550
@@ -27090,16 +27074,11 @@ CVE-2025-8110 - https://github.com/Makis6/CVE-2025-8110
 CVE-2026-43284 - https://github.com/soumarcelino/DFRoot-S938BXXSCCZH1
 CVE-2026-53362 - https://github.com/ramondunker/ipv6_frag_escape_amzn2023_x86_64
 CVE-2026-88789 - https://github.com/oscerd/CVE-2026-88789
-CVE-2017-11882 - https://github.com/embedi/CVE-2017-11882
-CVE-2018-0802 - https://github.com/rxwx/CVE-2018-0802
-CVE-2018-0802 - https://github.com/zldww2011/CVE-2018-0802_POC
 CVE-2020-11108 - https://github.com/Frichetten/CVE-2020-11108-PoC
 CVE-2023-40931 - https://github.com/NCF0126/Nagios-XI-s-CVE-2023-40931-Exploit
-CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
 CVE-2025-14783 - https://github.com/Ngagne-Demba-Dia/CVE-2025-14783-POC
 CVE-2025-24813 - https://github.com/Si13NTTT/CVE-2025-24813
 CVE-2025-32432 - https://github.com/Si13NTTT/CVE-2025-32432
-CVE-2026-100903 - https://github.com/4ybrick/CVE-2026-100903
 CVE-2026-31431 - https://github.com/rifkyards/Copy-Fail-CVE-2026-31431-Kubernetes-PoC
 CVE-2026-32475 - https://github.com/cyeezy08/WordPress_Exploit_Directory
 CVE-2026-48611 - https://github.com/lxdwnpiper/CVE-2026-48611-phpBB
@@ -27123,3 +27102,5 @@ CVE-2026-19445 - https://github.com/abraxas/cve-2026-19445-sni-uaf
 CVE-2026-19553 - https://github.com/abraxas/cve-2026-19553-wrap-bio
 CVE-2026-14378 - https://github.com/murrez/CVE-2026-14378
 CVE-2026-19660 - https://github.com/murrez/CVE-2026-19660
+CVE-2017-9841 - https://github.com/CheLover86/CVE-2017-9841
+CVE-2026-64560 - https://github.com/Meniben/redmi14c-pond-cve-2026-64560
@@ -39202,3 +39202,38 @@ CVE-2026-92412 - https://wpscan.com/vulnerability/90713b84-9c19-46fe-a4ef-89cb9f
 CVE-2026-96173 - https://wpscan.com/vulnerability/fcaa1526-0cf4-4356-9cf8-bc2dc3ed33b8/
 CVE-2026-96200 - https://wpscan.com/vulnerability/c3ccbe90-6942-46d6-b79b-f3223121eec6/
 CVE-2026-96255 - https://wpscan.com/vulnerability/726daec6-5e18-4ee1-9b97-3931f7f81c3c/
+CVE-2024-58388 - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi
+CVE-2026-101012 - https://github.com/vinniboy021-blip/Advisory/blob/main/makeresult-sqli.md
+CVE-2026-103113 - https://github.com/OS4ED/openSIS-Classic/issues/473
+CVE-2026-103686 - https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-mrpv-6x26-mf6c
+CVE-2026-103687 - https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-cjfg-j8jp-5xvc
+CVE-2026-103690 - https://github.com/ltranquility/submit_repository/issues/18
+CVE-2026-103766 - https://hackmd.io/@leediay/sqli-via-delete-ads-clipbucketv5
+CVE-2026-104052 - https://github.com/Useless-Noob-hub/cve/issues/1
+CVE-2026-104054 - https://github.com/calcom/cal.diy/issues/29802
+CVE-2026-104120 - https://github.com/modelcontextprotocol/servers/issues/4492
+CVE-2026-13413 - https://wpscan.com/vulnerability/706afdef-4935-44d9-ab09-68c80f3bfef9/
+CVE-2026-13718 - https://wpscan.com/vulnerability/ff0da7b7-f415-466e-9f6e-4c559d2699a9/
+CVE-2026-1661 - https://wpscan.com/vulnerability/dde19119-7ea8-4d02-bf89-7a6b0ca010b5/
+CVE-2026-72708 - https://blog.lexfo.fr/casse-spip-sqli-to-rce.html
+CVE-2026-72709 - https://blog.lexfo.fr/casse-spip-sqli-to-rce.html
+CVE-2026-72710 - https://blog.lexfo.fr/casse-spip-sqli-to-rce.html
+CVE-2026-76844 - https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
+CVE-2026-79618 - https://wpscan.com/vulnerability/a11bf097-3829-4baa-878c-80b113c5a744/
+CVE-2026-81740 - https://wpscan.com/vulnerability/13767875-5010-494a-b3ed-133d58b8ecea/
+CVE-2026-84740 - https://wpscan.com/vulnerability/3381a51e-beaa-4420-a33b-6a68612a2e8a/
+CVE-2026-85004 - https://wpscan.com/vulnerability/38041b58-7738-4710-a1b6-4005e9ec2c01/
+CVE-2026-85005 - https://wpscan.com/vulnerability/bddba59e-ab36-427f-9b21-98144bf783ff/
+CVE-2026-85016 - https://wpscan.com/vulnerability/1d488c84-2797-4c02-8c13-54b80e4128dc/
+CVE-2026-90952 - https://wpscan.com/vulnerability/8cc260a9-f335-4d8c-a1e0-f942f0963bcf/
+CVE-2026-90987 - https://wpscan.com/vulnerability/7c1faee8-628a-41dc-a5f0-afbc56480a18/
+CVE-2026-90988 - https://wpscan.com/vulnerability/6c02759e-b37e-43ce-a4f4-467e8af63a17/
+CVE-2026-91020 - https://wpscan.com/vulnerability/998db4a0-693c-4701-a37e-ec33002e1417/
+CVE-2026-91022 - https://wpscan.com/vulnerability/72672806-e2f3-417e-83c0-854c604028e4/
+CVE-2026-91023 - https://wpscan.com/vulnerability/c2400c65-5d77-454c-9691-5e664556341b/
+CVE-2026-91828 - https://wpscan.com/vulnerability/be25f7b5-5790-4db7-9056-b43b538a7183/
+CVE-2026-92924 - https://wpscan.com/vulnerability/28be6bd7-311d-4338-8256-7378e268c0f8/
+CVE-2026-94298 - https://wpscan.com/vulnerability/6f6c8718-7e7e-4700-a4c2-ee177c44b7ea/
+CVE-2026-97219 - https://wpscan.com/vulnerability/0787d00b-2263-465f-8f46-906741bf6629/
+CVE-2026-97317 - https://wpscan.com/vulnerability/f8779fd4-f362-40c4-8df1-145620c69103/
+CVE-2026-97318 - https://wpscan.com/vulnerability/a171b0f1-b2d2-4482-b44f-bd4a1f3b223b/
@@ -117896,3 +117896,39 @@ CVE-2026-55107 - https://github.com/advisories/GHSA-7pwq-q9jf-539h
 CVE-2026-86250 - https://github.com/advisories/GHSA-q5pr-72pq-83v3
 CVE-2026-87817 - https://github.com/advisories/GHSA-239g-whfq-7xj9
 CVE-2026-87819 - https://github.com/advisories/GHSA-g5vv-9gxw-82hx
+CVE-2024-58388 - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi
+CVE-2026-101012 - https://github.com/vinniboy021-blip/Advisory/blob/main/makeresult-sqli.md
+CVE-2026-103113 - https://github.com/OS4ED/openSIS-Classic/issues/473
+CVE-2026-103686 - https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-mrpv-6x26-mf6c
+CVE-2026-103687 - https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-cjfg-j8jp-5xvc
+CVE-2026-103690 - https://github.com/ltranquility/submit_repository/issues/18
+CVE-2026-103766 - https://hackmd.io/@leediay/sqli-via-delete-ads-clipbucketv5
+CVE-2026-104052 - https://github.com/Useless-Noob-hub/cve/issues/1
+CVE-2026-104054 - https://github.com/calcom/cal.diy/issues/29802
+CVE-2026-104120 - https://github.com/modelcontextprotocol/servers/issues/4492
+CVE-2026-13413 - https://wpscan.com/vulnerability/706afdef-4935-44d9-ab09-68c80f3bfef9/
+CVE-2026-13718 - https://wpscan.com/vulnerability/ff0da7b7-f415-466e-9f6e-4c559d2699a9/
+CVE-2026-1661 - https://wpscan.com/vulnerability/dde19119-7ea8-4d02-bf89-7a6b0ca010b5/
+CVE-2026-6958 - https://olografix.org/acme/_poc/CVE-2026-6958.pdf
+CVE-2026-72708 - https://blog.lexfo.fr/casse-spip-sqli-to-rce.html
+CVE-2026-72709 - https://blog.lexfo.fr/casse-spip-sqli-to-rce.html
+CVE-2026-72710 - https://blog.lexfo.fr/casse-spip-sqli-to-rce.html
+CVE-2026-76844 - https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
+CVE-2026-79618 - https://wpscan.com/vulnerability/a11bf097-3829-4baa-878c-80b113c5a744/
+CVE-2026-81740 - https://wpscan.com/vulnerability/13767875-5010-494a-b3ed-133d58b8ecea/
+CVE-2026-84740 - https://wpscan.com/vulnerability/3381a51e-beaa-4420-a33b-6a68612a2e8a/
+CVE-2026-85004 - https://wpscan.com/vulnerability/38041b58-7738-4710-a1b6-4005e9ec2c01/
+CVE-2026-85005 - https://wpscan.com/vulnerability/bddba59e-ab36-427f-9b21-98144bf783ff/
+CVE-2026-85016 - https://wpscan.com/vulnerability/1d488c84-2797-4c02-8c13-54b80e4128dc/
+CVE-2026-90952 - https://wpscan.com/vulnerability/8cc260a9-f335-4d8c-a1e0-f942f0963bcf/
+CVE-2026-90987 - https://wpscan.com/vulnerability/7c1faee8-628a-41dc-a5f0-afbc56480a18/
+CVE-2026-90988 - https://wpscan.com/vulnerability/6c02759e-b37e-43ce-a4f4-467e8af63a17/
+CVE-2026-91020 - https://wpscan.com/vulnerability/998db4a0-693c-4701-a37e-ec33002e1417/
+CVE-2026-91022 - https://wpscan.com/vulnerability/72672806-e2f3-417e-83c0-854c604028e4/
+CVE-2026-91023 - https://wpscan.com/vulnerability/c2400c65-5d77-454c-9691-5e664556341b/
+CVE-2026-91828 - https://wpscan.com/vulnerability/be25f7b5-5790-4db7-9056-b43b538a7183/
+CVE-2026-92924 - https://wpscan.com/vulnerability/28be6bd7-311d-4338-8256-7378e268c0f8/
+CVE-2026-94298 - https://wpscan.com/vulnerability/6f6c8718-7e7e-4700-a4c2-ee177c44b7ea/
+CVE-2026-97219 - https://wpscan.com/vulnerability/0787d00b-2263-465f-8f46-906741bf6629/
+CVE-2026-97317 - https://wpscan.com/vulnerability/f8779fd4-f362-40c4-8df1-145620c69103/
+CVE-2026-97318 - https://wpscan.com/vulnerability/a171b0f1-b2d2-4482-b44f-bd4a1f3b223b/