mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Update CVE PoCs 2026-09-28
This commit is contained in:
CVE-BOT committed
1 parent
000659ad4e
commit
698788ed53
77 files changed
+1301
-23
No files matched your search
@@ -1,3 +1,3 @@
|
||||
{
|
||||
"cvelist_fetch_time": "2026-09-27T07:24:24.021Z"
|
||||
"cvelist_fetch_time": "2026-09-28T08:38:00.658Z"
|
||||
}
|
||||
@@ -1,8 +1,8 @@
|
||||
<div align="center">
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172882-83572-1212" alt="PoC Index" width="100%"></a>
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172934-83626-1213" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
|
||||
@@ -14,7 +14,7 @@ The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earli
|
||||
- https://www.exploit-db.com/exploits/37171/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/Walnut1337/Command-Injection-DIR-868L
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/37171
|
||||
|
||||
@@ -16,5 +16,4 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor
|
||||
#### Github
|
||||
- https://github.com/FenrirSec/CVE-2018-17240_exploit
|
||||
- https://github.com/Xewdy444/Netgrave
|
||||
- https://github.com/BBge/CVE-2018-17240
|
||||
|
||||
@@ -30,4 +30,5 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/Vulnerability-Playground/CVE-2019-1068
|
||||
- https://github.com/CTIresource/Vendor-Verbiage
|
||||
|
||||
@@ -19,7 +19,6 @@ The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to
|
||||
|
||||
#### Github
|
||||
- https://github.com/tijldeneut/Security
|
||||
- https://github.com/Frichetten/CVE-2020-11108-PoC
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/48519
|
||||
|
||||
@@ -13,5 +13,5 @@ Improper permissions in the installer for the Intel(R) Data Center Manager Conso
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/tki8769-v/cve_poc_exp_in_github
|
||||
|
||||
@@ -63,4 +63,5 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/hilalibrahim/SecOps
|
||||
- https://github.com/Sudarshan2412/TaskVerifier
|
||||
|
||||
@@ -18,6 +18,7 @@ No PoCs from references.
|
||||
- https://github.com/Eap2468/CVE-2022-3699
|
||||
- https://github.com/alfarom256/CVE-2022-3699
|
||||
- https://github.com/estimated1337/lenovo_exec
|
||||
- https://github.com/vmpprotect/vulnerable-driver-boilerplate
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_3699_lenovo_diagnostics_driver.rb
|
||||
|
||||
@@ -26,6 +26,7 @@ All versions of Confluence Data Center and Server are affected by this unexploit
|
||||
- https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence
|
||||
- https://github.com/sanjai-AK47/CVE-2023-22518
|
||||
- https://github.com/d3ckkNo0b/analyze-Exploit-CVE-2023-22518-Confluence
|
||||
- https://github.com/CTIresource/Vendor-Verbiage
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22518.yaml
|
||||
|
||||
@@ -15,5 +15,5 @@ Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/CTIresource/Vendor-Verbiage
|
||||
|
||||
@@ -116,7 +116,6 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
|
||||
- https://github.com/Panche1/SSHPentest
|
||||
- https://github.com/hungln105-cell/skill-bug-app
|
||||
- https://github.com/domanhcuongkent1991-blip/security-tool
|
||||
- https://github.com/zgzhang/cve-2024-6387-poc
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52269
|
||||
@@ -19,6 +19,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -19,6 +19,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -6,6 +6,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100875](https://www.cve.org/CVERecord?id=CVE-2026-100875)
|
||||
**mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php sql injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromfaculty.php. Such manipulation of the argument myfid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/rmsbpro/Advisory/blob/main/updatedetailsfromfaculty-sqli.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100876](https://www.cve.org/CVERecord?id=CVE-2026-100876)
|
||||
**mathurvishal CloudClassroom-PHP-Project loginlinkstudent.php missing authentication**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent.php. Performing a manipulation of the argument umail results in missing authentication. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/rmsbpro/Advisory/blob/main/broken-role-segregation.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100877](https://www.cve.org/CVERecord?id=CVE-2026-100877)
|
||||
**mathurvishal CloudClassroom-PHP-Project registrationform.php cross site scripting**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file registrationform.php. Executing a manipulation of the argument FName/LName/Addrs can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/rmsbpro/Advisory/blob/main/registrationform-stored-xss.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-100878](https://www.cve.org/CVERecord?id=CVE-2026-100878)
|
||||
**zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole Endpoint. The manipulation of the argument userId/roleIds leads to authorization bypass. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-004-idor-auth-role-privesc.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-100879](https://www.cve.org/CVERecord?id=CVE-2026-100879)
|
||||
**zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-005-role-crud-missing-preauthorize.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-100880](https://www.cve.org/CVERecord?id=CVE-2026-100880)
|
||||
**zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipulation of the argument File causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-006-stored-html-upload-xss.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-100881](https://www.cve.org/CVERecord?id=CVE-2026-100881)
|
||||
**zhistaredu StarTraining application.yml cross site scripting**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. Not independently exploitable: a defense-in-depth absence that amplifies CVE-2026-100880. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-007-xss-filter-disabled.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,24 @@
|
||||
### [CVE-2026-100882](https://www.cve.org/CVERecord?id=CVE-2026-100882)
|
||||
**Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 2.2.6 is recommended to address this issue. The patch is named 6dbcf75b30dbd169ee81b7e9e00368099124efeb. You should upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/carlosalbertotuma/advisory/blob/main/advisory-04-stored-xss-via-footer.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,24 @@
|
||||
### [CVE-2026-100883](https://www.cve.org/CVERecord?id=CVE-2026-100883)
|
||||
**Krayin laravel-crm acl.php access control**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be used. Upgrading to version 2.2.6 is sufficient to fix this issue. This patch is called a399404a388d8ad2700a01349d0d98069c8e85a4. The affected component should be upgraded.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/carlosalbertotuma/advisory/blob/main/advisory-05-Missing-Function-Level%20Authorization.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,23 @@
|
||||
### [CVE-2026-100884](https://www.cve.org/CVERecord?id=CVE-2026-100884)
|
||||
**Krayin laravel-crm attachment-download Endpoint acl.php resource injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource identifiers. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.2.6 is sufficient to resolve this issue. The identifier of the patch is 13d6988cda8d69ece45ee1890effc90a7f21cdc1. It is suggested to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/carlosalbertotuma/advisory/blob/main/advisory-06-IDOR-Email-Attachment%20Download.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,23 @@
|
||||
### [CVE-2026-100885](https://www.cve.org/CVERecord?id=CVE-2026-100885)
|
||||
**Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 2.2.5 mitigates this issue. The patch is identified as 89f2916b6a46ff91bd1999ce38158fa0de8b9490. Upgrading the affected component is recommended.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-100886](https://www.cve.org/CVERecord?id=CVE-2026-100886)
|
||||
**Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/heapframe/seetong-ts81xxd3x-rce
|
||||
|
||||
#### Github
|
||||
- https://github.com/heapframe/seetong-ts81xxd3x-rce
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100887](https://www.cve.org/CVERecord?id=CVE-2026-100887)
|
||||
**amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function order_by of the file DB_query_builder.php of the component Database Query Builder. Performing a manipulation of the argument orderBy results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project maintainer confirms: "I stopped maintaining that project for a while now, so I'm not sure it's worth fixing." This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/qianqiusujiu/d1b22995e74ba21c8fb776ce3b1cddef
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,30 @@
|
||||
### [CVE-2026-100888](https://www.cve.org/CVERecord?id=CVE-2026-100888)
|
||||
**Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/opendkim-h-tag-oob-write.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,30 @@
|
||||
### [CVE-2026-100889](https://www.cve.org/CVERecord?id=CVE-2026-100889)
|
||||
**Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of the file util.c of the component Decoder. The manipulation results in off-by-one. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/opendkim-qp-off-by-one.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-100890](https://www.cve.org/CVERecord?id=CVE-2026-100890)
|
||||
**Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in the library libopendmarc/opendmarc_spf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/opendmarc-ip6-wild-pointer.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-100891](https://www.cve.org/CVERecord?id=CVE-2026-100891)
|
||||
**Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarc_policy_query_dmarc in the library libopendmarc/opendmarc_policy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/opendmarc-ulabel-not-converted.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-100892](https://www.cve.org/CVERecord?id=CVE-2026-100892)
|
||||
**aligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/centauruszzz/c69a6bd152f45d9ca8db981f7da34bed
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,54 @@
|
||||
### [CVE-2026-100893](https://www.cve.org/CVERecord?id=CVE-2026-100893)
|
||||
**Privoce VoceChat Server open_graphic_parse Endpoint resource.rs fetch server-side request forgery**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_graph::fetch of the file src/api/resource.rs of the component open_graphic_parse Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://is.yuum.me/posts/2026-08-06-ssrf-vulnerability-in-vocechat-server-v0520/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100895](https://www.cve.org/CVERecord?id=CVE-2026-100895)
|
||||
**Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.0.0.Beta0 is recommended to address this issue. Upgrading the affected component is advised.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/openarc-c-tag-null-deref.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100896](https://www.cve.org/CVERecord?id=CVE-2026-100896)
|
||||
**TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/H3rmesk1t/c071a62375f38b629f67653428a8f25a
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,23 @@
|
||||
### [CVE-2026-100898](https://www.cve.org/CVERecord?id=CVE-2026-100898)
|
||||
**DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/dddwmr/CVE/blob/main/Timesheet%20Dashboard%20Chart%20Filter%20SQL%20Injection%20(ActivitiesReport).md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,23 @@
|
||||
### [CVE-2026-100899](https://www.cve.org/CVERecord?id=CVE-2026-100899)
|
||||
**DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/dddwmr/CVE/blob/main/Timesheet%20Dashboard%20Chart%20Filter%20SQL%20Injection%20(MonthlyReport).md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-100900](https://www.cve.org/CVERecord?id=CVE-2026-100900)
|
||||
**DevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgery**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/dddwmr/CVE/blob/main/Server-Side%20Request%20Forgery%20in%20Jira%20Import%20via%20Controllable%20Host%20and%20Missing%20canAccess%20.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-100901](https://www.cve.org/CVERecord?id=CVE-2026-100901)
|
||||
**athlon1600 youtube-downloader stream.php stream server-side request forgery**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of the argument url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been made public and could be used. Commit 6ffe823 'better security for public/stream.php' only added CURLOPT_PROTOCOLS http/https restriction and MAXREDIRS cap, does not restrict destination host. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/qianqiusujiu/87a7d7d8bd7fb53cf8529e0bafbeafba
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-100902](https://www.cve.org/CVERecord?id=CVE-2026-100902)
|
||||
**Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper denial of service**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/0xWKZER/-security-disclosures/blob/main/Barco001.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-100903](https://www.cve.org/CVERecord?id=CVE-2026-100903)
|
||||
**ООО НПО Ритм GEOritm REST API obj-groups missing authentication**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipulation of the argument objectId leads to missing authentication. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 2.46 is able to mitigate this issue. It is advisable to upgrade the affected component. The vendor confirms: "In August 2026, NPO Ritm received an official vulnerability notification from the Russian Federal Service for Technical and Export Control (FSTEC Russia). The vulnerability was registered under identifier BDU:2026-11235. Following our internal investigation, we confirmed the vulnerability and implemented the necessary security fixes. The vulnerability has been fixed on our hosted GEO.RITM server at geo.ritm.ru. The fix has also been included in GEO.RITM version 2.46, which is already being distributed to our customers."
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/3VsEG3Rg
|
||||
|
||||
#### Github
|
||||
- https://github.com/4ybrick/CVE-2026-100903
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-100906](https://www.cve.org/CVERecord?id=CVE-2026-100906)
|
||||
**Eyeplus ONVIF Device GetUsers information disclosure**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-GetUsers-Unauth-Plaintext-Password.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-100907](https://www.cve.org/CVERecord?id=CVE-2026-100907)
|
||||
**Eyeplus p2pcam Service snapshot information disclosure**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Unauth-Snapshot-Disclosure.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-100908](https://www.cve.org/CVERecord?id=CVE-2026-100908)
|
||||
**Eyeplus p2pcam HTTP stack-based overflow**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Long-URI-DoS.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,67 @@
|
||||
### [CVE-2026-100909](https://www.cve.org/CVERecord?id=CVE-2026-100909)
|
||||
**OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed from remote. The exploit has been made public and could be used. Upgrading to version 4.3.5 and 4.4.0 is sufficient to resolve this issue. The patch is identified as 0e9736aa2c6d6bd3d60ff6ef9e0b4d32ce387f58. The affected component should be upgraded.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/0xGenesi/CVE/blob/main/October_CMS_Stream_Wrapper_Injection.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-101000](https://www.cve.org/CVERecord?id=CVE-2026-101000)
|
||||
**Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component ACL Handler. This manipulation of the argument section causes missing authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR100V2_V1.3.240614.030928%20Router/netcore_nbr100v2_uci_config_tamper.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-101001](https://www.cve.org/CVERecord?id=CVE-2026-101001)
|
||||
**Netcore NBR200V2 Web Management network_tools eval os command injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR200V2_V1.3.241127.071246%20Router/Netcore_NBR200V2_network_tools_command_injection.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-101002](https://www.cve.org/CVERecord?id=CVE-2026-101002)
|
||||
**Netcore NBR200V2 Tools Ping network_tools system os command injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR200V2_V1.3.241127.071246%20Router/Netcore_NBR200V2_tools_ping_command_injection.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-101005](https://www.cve.org/CVERecord?id=CVE-2026-101005)
|
||||
**October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 4.3.5 is able to mitigate this issue. You should upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/0xGenesi/CVE/blob/main/October_CMS_SSRF_IPv6_Mapped_IPv4_Bypass.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-101007](https://www.cve.org/CVERecord?id=CVE-2026-101007)
|
||||
**aaPanel BaoTa Database Backup database.py InputSql os command injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/zuesdevil/42ac3ee7ab5554b31784da14f175e029
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-101008](https://www.cve.org/CVERecord?id=CVE-2026-101008)
|
||||
**aaPanel BaoTa File Merge files.py merge_split_file command injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the component File Merge Handler. Performing a manipulation of the argument split_file_path results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/zuesdevil/56b73463ffe3390f670a5c031764a134
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-101009](https://www.cve.org/CVERecord?id=CVE-2026-101009)
|
||||
**aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip of the file /www/server/panel/class/panelTask.py of the component Unzip Handler. Executing a manipulation of the argument Password can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/zuesdevil/ba0b8aa9f7516ea0e57b173146ce5408
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-101010](https://www.cve.org/CVERecord?id=CVE-2026-101010)
|
||||
**aaPanel BaoTa data.py getData sql injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file /www/server/panel/class/data.py. The manipulation of the argument log_type leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/zuesdevil/e9760c3329b739d37f3a9dc501881384
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-101011](https://www.cve.org/CVERecord?id=CVE-2026-101011)
|
||||
**aaPanel BaoTa Domain domainMod.py get_domain_status sql injection**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file /www/server/panel/mod/project/domain/domainMod.py of the component Domain Handler. The manipulation of the argument get results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/zuesdevil/ec002a1540dd30d5e0d4a349b9f6fcbf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-101014](https://www.cve.org/CVERecord?id=CVE-2026-101014)
|
||||
**Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/opendmarc_util.c of the component DMARC Record Parser. Performing a manipulation results in off-by-one. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named b3b1da9264bc80324094a27c71e7369bdedc62ae. To fix this issue, it is recommended to deploy a patch.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/opendmarc-cleanup-off-by-one.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-101015](https://www.cve.org/CVERecord?id=CVE-2026-101015)
|
||||
**Trusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Executing a manipulation can lead to improper validation of unsafe equivalence in input. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://weitongli.com/share/opendmarc-unicode-dot-bypass.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -16,6 +16,7 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/doany1/CVE-2026-24849
|
||||
- https://github.com/exposelabniu/AMENDER-2026
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52610
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-33305](https://www.cve.org/CVERecord?id=CVE-2026-33305)
|
||||
**OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, an authorization bypass in the optional FaxSMS module (`oe-module-faxsms`) allows any authenticated OpenEMR user to invoke controller methods — including `getNotificationLog()`, which returns patient appointment data (PHI) — regardless of whether they hold the required ACL permissions. The `AppDispatch` constructor dispatches user-controlled actions and exits the process before any calling code can enforce ACL checks. Version 8.0.0.2 fixes the issue.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/exposelabniu/AMENDER-2026
|
||||
@@ -64,6 +64,7 @@ No PoCs from references.
|
||||
- https://github.com/krislamo/vulnlab
|
||||
- https://github.com/TeamN4C/SG-2026-0024
|
||||
- https://github.com/Minime794/DirtyFrag
|
||||
- https://github.com/coey0814/DirtyFrag-Galaxy
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52591
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-82384](https://www.cve.org/CVERecord?id=CVE-2026-82384)
|
||||
**Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is mapped unconditionally, so parsing occurs even when the global XML-RPC feature is set to disabled; no non-default configuration is required for this path. This can lead to remote code execution. Users are recommended to upgrade to Apache Roller 6.1.6 or later, which disables the extension types and rejects requests when the XML-RPC feature is disabled.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/murrez/CVE-2026-82384
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84744](https://www.cve.org/CVERecord?id=CVE-2026-84744)
|
||||
**WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back into the rendered form, allowing unauthenticated users to execute arbitrary shortcodes registered on the site and read the details of attachments belonging to non-public posts.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/99c4a9fc-114e-4d39-80aa-0e9544125794/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-86838](https://www.cve.org/CVERecord?id=CVE-2026-86838)
|
||||
**Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/1c8a53e7-5556-4dcb-a461-c6df253d0b7a/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-88828](https://www.cve.org/CVERecord?id=CVE-2026-88828)
|
||||
**Blacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or recorded.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/52804421-8988-4d8a-9143-04683d05873d/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-89300](https://www.cve.org/CVERecord?id=CVE-2026-89300)
|
||||
**WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table, as well as to make the site send templated verification emails to arbitrary email addresses. The route is not rate limited either.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a5ad8171-83c1-4c2e-83ac-24f008fadb82/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-89303](https://www.cve.org/CVERecord?id=CVE-2026-89303)
|
||||
**Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/dbe62e96-6493-4385-92a2-6281c5428a9f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-89411](https://www.cve.org/CVERecord?id=CVE-2026-89411)
|
||||
**Paymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/240a0440-7892-4c03-b282-2fdb6f086bb6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-92996](https://www.cve.org/CVERecord?id=CVE-2026-92996)
|
||||
**Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done**
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c97c7466-ea48-47d0-b562-c26127be3bcc/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-93000](https://www.cve.org/CVERecord?id=CVE-2026-93000)
|
||||
**SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search**
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The SPS-Suite WordPress plugin through 1.4.0 does not sanitise the search query before using it in a SQL query when its static-page search feature is enabled, allowing unauthenticated attackers to perform SQL injection attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a6f90424-46df-4f44-9491-76c75b5ab5eb/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -17,3 +17,4 @@ A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affec
|
||||
|
||||
#### Github
|
||||
- https://github.com/HackSpeak/CVE-2026-93958
|
||||
- https://github.com/murrez/CVE-2026-93958
|
||||
+4
-4
@@ -1,5 +1,5 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
|
||||
role="img" aria-label="PoC Index, 83,572 CVEs with public proof-of-concept exploits">
|
||||
role="img" aria-label="PoC Index, 83,626 CVEs with public proof-of-concept exploits">
|
||||
<clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
|
||||
<rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
|
||||
<g clip-path="url(#card)" opacity="0.6"><g>
|
||||
@@ -19,13 +19,13 @@
|
||||
<text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
|
||||
|
||||
<text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">172,882</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">172,934</text>
|
||||
<text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">83,572</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">83,626</text>
|
||||
<text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,212</text>
|
||||
fill="#f85149" letter-spacing="-0.5">1,213</text>
|
||||
<text x="1010" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">KNOWN EXPLOITED</text>
|
||||
</svg>
|
||||
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
@@ -20,13 +20,13 @@
|
||||
|
||||
<rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
|
||||
<text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">172,882</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">172,934</text>
|
||||
<text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">83,572</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">83,626</text>
|
||||
<text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,212</text>
|
||||
fill="#f85149" letter-spacing="-0.5">1,213</text>
|
||||
<text x="880" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">KNOWN EXPLOITED</text>
|
||||
|
||||
|
||||
|
Before Width: | Height: | Size: 2.7 KiB After Width: | Height: | Size: 2.7 KiB |
+3
-3
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"kev": 1212,
|
||||
"total_cves": 172882,
|
||||
"with_pocs": 83572
|
||||
"kev": 1213,
|
||||
"total_cves": 172934,
|
||||
"with_pocs": 83626
|
||||
}
|
||||
@@ -1 +1 @@
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
+14
-3
@@ -26388,7 +26388,6 @@ CVE-2026-63030 - https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030
|
||||
CVE-2026-66066 - https://github.com/ivanesk315/CVE-2026-66066
|
||||
CVE-2026-73570 - https://github.com/hainhc/CVE-2026-73570
|
||||
CVE-2018-14847 - https://github.com/BasuCert/WinboxPoC
|
||||
CVE-2020-11108 - https://github.com/Frichetten/CVE-2020-11108-PoC
|
||||
CVE-2026-34159 - https://github.com/TeamN4C/SG-2026-0021
|
||||
CVE-2026-43284 - https://github.com/TeamN4C/SG-2026-0024
|
||||
CVE-2026-51376 - https://github.com/BARGHEST-ngo/CVE-2026-51376
|
||||
@@ -26937,8 +26936,6 @@ CVE-2025-21479 - https://github.com/diyiqiuye/CVE-2025-21479-FX5P
|
||||
CVE-2025-32433 - https://github.com/X-Bulow/Reproduce-CVE-2025-32433
|
||||
CVE-2026-12227 - https://github.com/be-keb/CVE-2026-12227
|
||||
CVE-2026-34990 - https://github.com/0xc4rc3l/CVE-2026-34990-poc
|
||||
CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240
|
||||
CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
|
||||
CVE-2025-4802 - https://github.com/betizzel/CVE-2025-4802-Proof-of-Concept
|
||||
CVE-2026-93349 - https://github.com/SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection
|
||||
CVE-2026-100835 - https://github.com/murrez/CVE-2026-100835
|
||||
@@ -26976,3 +26973,17 @@ CVE-2026-34990 - https://github.com/Noorkhalel/CVE-2026-34990-CUPS-LPE-PoC
|
||||
CVE-2026-85984 - https://github.com/murrez/CVE-2026-85984
|
||||
CVE-2026-85706 - https://github.com/EQSTLab/CVE-2026-85706
|
||||
CVE-2026-32740 - https://github.com/FORTBRIDGE-UK/libheif-grid-nextjs-rce
|
||||
CVE-2015-2051 - https://github.com/Walnut1337/Command-Injection-DIR-868L
|
||||
CVE-2019-1068 - https://github.com/CTIresource/Vendor-Verbiage
|
||||
CVE-2020-12345 - https://github.com/tki8769-v/cve_poc_exp_in_github
|
||||
CVE-2021-1234 - https://github.com/Sudarshan2412/TaskVerifier
|
||||
CVE-2022-3699 - https://github.com/vmpprotect/vulnerable-driver-boilerplate
|
||||
CVE-2023-22518 - https://github.com/CTIresource/Vendor-Verbiage
|
||||
CVE-2024-21287 - https://github.com/CTIresource/Vendor-Verbiage
|
||||
CVE-2026-100886 - https://github.com/heapframe/seetong-ts81xxd3x-rce
|
||||
CVE-2026-100903 - https://github.com/4ybrick/CVE-2026-100903
|
||||
CVE-2026-24849 - https://github.com/exposelabniu/AMENDER-2026
|
||||
CVE-2026-33305 - https://github.com/exposelabniu/AMENDER-2026
|
||||
CVE-2026-43284 - https://github.com/coey0814/DirtyFrag-Galaxy
|
||||
CVE-2026-82384 - https://github.com/murrez/CVE-2026-82384
|
||||
CVE-2026-93958 - https://github.com/murrez/CVE-2026-93958
|
||||
@@ -38969,3 +38969,53 @@ CVE-2026-96897 - https://wpscan.com/vulnerability/f9fd04f4-282d-486f-8561-dbf022
|
||||
CVE-2026-96899 - https://wpscan.com/vulnerability/649584c7-0549-4080-92f0-bf4b9e8ee789/
|
||||
CVE-2026-97227 - https://wpscan.com/vulnerability/df187bfb-47f1-4259-b955-3c676f3d8cc1/
|
||||
CVE-2026-97319 - https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/
|
||||
CVE-2026-100875 - https://github.com/rmsbpro/Advisory/blob/main/updatedetailsfromfaculty-sqli.md
|
||||
CVE-2026-100876 - https://github.com/rmsbpro/Advisory/blob/main/broken-role-segregation.md
|
||||
CVE-2026-100877 - https://github.com/rmsbpro/Advisory/blob/main/registrationform-stored-xss.md
|
||||
CVE-2026-100878 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-004-idor-auth-role-privesc.md
|
||||
CVE-2026-100879 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-005-role-crud-missing-preauthorize.md
|
||||
CVE-2026-100880 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-006-stored-html-upload-xss.md
|
||||
CVE-2026-100881 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-007-xss-filter-disabled.md
|
||||
CVE-2026-100882 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-04-stored-xss-via-footer.md
|
||||
CVE-2026-100883 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-05-Missing-Function-Level%20Authorization.md
|
||||
CVE-2026-100884 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-06-IDOR-Email-Attachment%20Download.md
|
||||
CVE-2026-100885 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md
|
||||
CVE-2026-100886 - https://github.com/heapframe/seetong-ts81xxd3x-rce
|
||||
CVE-2026-100887 - https://gist.github.com/qianqiusujiu/d1b22995e74ba21c8fb776ce3b1cddef
|
||||
CVE-2026-100888 - https://weitongli.com/share/opendkim-h-tag-oob-write.html
|
||||
CVE-2026-100889 - https://weitongli.com/share/opendkim-qp-off-by-one.html
|
||||
CVE-2026-100890 - https://weitongli.com/share/opendmarc-ip6-wild-pointer.html
|
||||
CVE-2026-100891 - https://weitongli.com/share/opendmarc-ulabel-not-converted.html
|
||||
CVE-2026-100892 - https://gist.github.com/centauruszzz/c69a6bd152f45d9ca8db981f7da34bed
|
||||
CVE-2026-100893 - https://is.yuum.me/posts/2026-08-06-ssrf-vulnerability-in-vocechat-server-v0520/
|
||||
CVE-2026-100895 - https://weitongli.com/share/openarc-c-tag-null-deref.html
|
||||
CVE-2026-100896 - https://gist.github.com/H3rmesk1t/c071a62375f38b629f67653428a8f25a
|
||||
CVE-2026-100898 - https://github.com/dddwmr/CVE/blob/main/Timesheet%20Dashboard%20Chart%20Filter%20SQL%20Injection%20(ActivitiesReport).md
|
||||
CVE-2026-100899 - https://github.com/dddwmr/CVE/blob/main/Timesheet%20Dashboard%20Chart%20Filter%20SQL%20Injection%20(MonthlyReport).md
|
||||
CVE-2026-100900 - https://github.com/dddwmr/CVE/blob/main/Server-Side%20Request%20Forgery%20in%20Jira%20Import%20via%20Controllable%20Host%20and%20Missing%20canAccess%20.md
|
||||
CVE-2026-100901 - https://gist.github.com/qianqiusujiu/87a7d7d8bd7fb53cf8529e0bafbeafba
|
||||
CVE-2026-100902 - https://github.com/0xWKZER/-security-disclosures/blob/main/Barco001.md
|
||||
CVE-2026-100903 - https://pastebin.com/3VsEG3Rg
|
||||
CVE-2026-100906 - https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-GetUsers-Unauth-Plaintext-Password.md
|
||||
CVE-2026-100907 - https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Unauth-Snapshot-Disclosure.md
|
||||
CVE-2026-100908 - https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Long-URI-DoS.md
|
||||
CVE-2026-100909 - https://github.com/0xGenesi/CVE/blob/main/October_CMS_Stream_Wrapper_Injection.md
|
||||
CVE-2026-101000 - https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR100V2_V1.3.240614.030928%20Router/netcore_nbr100v2_uci_config_tamper.md
|
||||
CVE-2026-101001 - https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR200V2_V1.3.241127.071246%20Router/Netcore_NBR200V2_network_tools_command_injection.md
|
||||
CVE-2026-101002 - https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR200V2_V1.3.241127.071246%20Router/Netcore_NBR200V2_tools_ping_command_injection.md
|
||||
CVE-2026-101005 - https://github.com/0xGenesi/CVE/blob/main/October_CMS_SSRF_IPv6_Mapped_IPv4_Bypass.md
|
||||
CVE-2026-101007 - https://gist.github.com/zuesdevil/42ac3ee7ab5554b31784da14f175e029
|
||||
CVE-2026-101008 - https://gist.github.com/zuesdevil/56b73463ffe3390f670a5c031764a134
|
||||
CVE-2026-101009 - https://gist.github.com/zuesdevil/ba0b8aa9f7516ea0e57b173146ce5408
|
||||
CVE-2026-101010 - https://gist.github.com/zuesdevil/e9760c3329b739d37f3a9dc501881384
|
||||
CVE-2026-101011 - https://gist.github.com/zuesdevil/ec002a1540dd30d5e0d4a349b9f6fcbf
|
||||
CVE-2026-101014 - https://weitongli.com/share/opendmarc-cleanup-off-by-one.html
|
||||
CVE-2026-101015 - https://weitongli.com/share/opendmarc-unicode-dot-bypass.html
|
||||
CVE-2026-84744 - https://wpscan.com/vulnerability/99c4a9fc-114e-4d39-80aa-0e9544125794/
|
||||
CVE-2026-86838 - https://wpscan.com/vulnerability/1c8a53e7-5556-4dcb-a461-c6df253d0b7a/
|
||||
CVE-2026-88828 - https://wpscan.com/vulnerability/52804421-8988-4d8a-9143-04683d05873d/
|
||||
CVE-2026-89300 - https://wpscan.com/vulnerability/a5ad8171-83c1-4c2e-83ac-24f008fadb82/
|
||||
CVE-2026-89303 - https://wpscan.com/vulnerability/dbe62e96-6493-4385-92a2-6281c5428a9f/
|
||||
CVE-2026-89411 - https://wpscan.com/vulnerability/240a0440-7892-4c03-b282-2fdb6f086bb6/
|
||||
CVE-2026-92996 - https://wpscan.com/vulnerability/c97c7466-ea48-47d0-b562-c26127be3bcc/
|
||||
CVE-2026-93000 - https://wpscan.com/vulnerability/a6f90424-46df-4f44-9491-76c75b5ab5eb/
|
||||
@@ -117688,3 +117688,53 @@ CVE-2026-96897 - https://wpscan.com/vulnerability/f9fd04f4-282d-486f-8561-dbf022
|
||||
CVE-2026-96899 - https://wpscan.com/vulnerability/649584c7-0549-4080-92f0-bf4b9e8ee789/
|
||||
CVE-2026-97227 - https://wpscan.com/vulnerability/df187bfb-47f1-4259-b955-3c676f3d8cc1/
|
||||
CVE-2026-97319 - https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/
|
||||
CVE-2026-100875 - https://github.com/rmsbpro/Advisory/blob/main/updatedetailsfromfaculty-sqli.md
|
||||
CVE-2026-100876 - https://github.com/rmsbpro/Advisory/blob/main/broken-role-segregation.md
|
||||
CVE-2026-100877 - https://github.com/rmsbpro/Advisory/blob/main/registrationform-stored-xss.md
|
||||
CVE-2026-100878 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-004-idor-auth-role-privesc.md
|
||||
CVE-2026-100879 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-005-role-crud-missing-preauthorize.md
|
||||
CVE-2026-100880 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-006-stored-html-upload-xss.md
|
||||
CVE-2026-100881 - https://github.com/ArrestX/startraining-advisories/blob/main/advisories/ST-VULN-007-xss-filter-disabled.md
|
||||
CVE-2026-100882 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-04-stored-xss-via-footer.md
|
||||
CVE-2026-100883 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-05-Missing-Function-Level%20Authorization.md
|
||||
CVE-2026-100884 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-06-IDOR-Email-Attachment%20Download.md
|
||||
CVE-2026-100885 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md
|
||||
CVE-2026-100886 - https://github.com/heapframe/seetong-ts81xxd3x-rce
|
||||
CVE-2026-100887 - https://gist.github.com/qianqiusujiu/d1b22995e74ba21c8fb776ce3b1cddef
|
||||
CVE-2026-100888 - https://weitongli.com/share/opendkim-h-tag-oob-write.html
|
||||
CVE-2026-100889 - https://weitongli.com/share/opendkim-qp-off-by-one.html
|
||||
CVE-2026-100890 - https://weitongli.com/share/opendmarc-ip6-wild-pointer.html
|
||||
CVE-2026-100891 - https://weitongli.com/share/opendmarc-ulabel-not-converted.html
|
||||
CVE-2026-100892 - https://gist.github.com/centauruszzz/c69a6bd152f45d9ca8db981f7da34bed
|
||||
CVE-2026-100893 - https://is.yuum.me/posts/2026-08-06-ssrf-vulnerability-in-vocechat-server-v0520/
|
||||
CVE-2026-100895 - https://weitongli.com/share/openarc-c-tag-null-deref.html
|
||||
CVE-2026-100896 - https://gist.github.com/H3rmesk1t/c071a62375f38b629f67653428a8f25a
|
||||
CVE-2026-100898 - https://github.com/dddwmr/CVE/blob/main/Timesheet%20Dashboard%20Chart%20Filter%20SQL%20Injection%20(ActivitiesReport).md
|
||||
CVE-2026-100899 - https://github.com/dddwmr/CVE/blob/main/Timesheet%20Dashboard%20Chart%20Filter%20SQL%20Injection%20(MonthlyReport).md
|
||||
CVE-2026-100900 - https://github.com/dddwmr/CVE/blob/main/Server-Side%20Request%20Forgery%20in%20Jira%20Import%20via%20Controllable%20Host%20and%20Missing%20canAccess%20.md
|
||||
CVE-2026-100901 - https://gist.github.com/qianqiusujiu/87a7d7d8bd7fb53cf8529e0bafbeafba
|
||||
CVE-2026-100902 - https://github.com/0xWKZER/-security-disclosures/blob/main/Barco001.md
|
||||
CVE-2026-100903 - https://pastebin.com/3VsEG3Rg
|
||||
CVE-2026-100906 - https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-GetUsers-Unauth-Plaintext-Password.md
|
||||
CVE-2026-100907 - https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Unauth-Snapshot-Disclosure.md
|
||||
CVE-2026-100908 - https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Long-URI-DoS.md
|
||||
CVE-2026-100909 - https://github.com/0xGenesi/CVE/blob/main/October_CMS_Stream_Wrapper_Injection.md
|
||||
CVE-2026-101000 - https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR100V2_V1.3.240614.030928%20Router/netcore_nbr100v2_uci_config_tamper.md
|
||||
CVE-2026-101001 - https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR200V2_V1.3.241127.071246%20Router/Netcore_NBR200V2_network_tools_command_injection.md
|
||||
CVE-2026-101002 - https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR200V2_V1.3.241127.071246%20Router/Netcore_NBR200V2_tools_ping_command_injection.md
|
||||
CVE-2026-101005 - https://github.com/0xGenesi/CVE/blob/main/October_CMS_SSRF_IPv6_Mapped_IPv4_Bypass.md
|
||||
CVE-2026-101007 - https://gist.github.com/zuesdevil/42ac3ee7ab5554b31784da14f175e029
|
||||
CVE-2026-101008 - https://gist.github.com/zuesdevil/56b73463ffe3390f670a5c031764a134
|
||||
CVE-2026-101009 - https://gist.github.com/zuesdevil/ba0b8aa9f7516ea0e57b173146ce5408
|
||||
CVE-2026-101010 - https://gist.github.com/zuesdevil/e9760c3329b739d37f3a9dc501881384
|
||||
CVE-2026-101011 - https://gist.github.com/zuesdevil/ec002a1540dd30d5e0d4a349b9f6fcbf
|
||||
CVE-2026-101014 - https://weitongli.com/share/opendmarc-cleanup-off-by-one.html
|
||||
CVE-2026-101015 - https://weitongli.com/share/opendmarc-unicode-dot-bypass.html
|
||||
CVE-2026-84744 - https://wpscan.com/vulnerability/99c4a9fc-114e-4d39-80aa-0e9544125794/
|
||||
CVE-2026-86838 - https://wpscan.com/vulnerability/1c8a53e7-5556-4dcb-a461-c6df253d0b7a/
|
||||
CVE-2026-88828 - https://wpscan.com/vulnerability/52804421-8988-4d8a-9143-04683d05873d/
|
||||
CVE-2026-89300 - https://wpscan.com/vulnerability/a5ad8171-83c1-4c2e-83ac-24f008fadb82/
|
||||
CVE-2026-89303 - https://wpscan.com/vulnerability/dbe62e96-6493-4385-92a2-6281c5428a9f/
|
||||
CVE-2026-89411 - https://wpscan.com/vulnerability/240a0440-7892-4c03-b282-2fdb6f086bb6/
|
||||
CVE-2026-92996 - https://wpscan.com/vulnerability/c97c7466-ea48-47d0-b562-c26127be3bcc/
|
||||
CVE-2026-93000 - https://wpscan.com/vulnerability/a6f90424-46df-4f44-9491-76c75b5ab5eb/
|
||||
Reference in new issue
Block a user