mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Update CVE PoCs 2026-09-03
This commit is contained in:
CVE-BOT committed
1 parent
0238fcc4a3
commit
7ace47c9fc
92 files changed
+1097
-26
No files matched your search
@@ -1,3 +1,3 @@
|
||||
{
|
||||
"cvelist_fetch_time": "2026-09-02T06:58:23.064Z"
|
||||
"cvelist_fetch_time": "2026-09-03T04:52:24.968Z"
|
||||
}
|
||||
@@ -1,8 +1,8 @@
|
||||
<div align="center">
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171005-82468-1181" alt="PoC Index" width="100%"></a>
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171060-82528-1181" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
|
||||
@@ -13,5 +13,5 @@ Tar 1.15.1 does not properly warn the user when extracting setuid or setgid file
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/sub148/vuln-triage
|
||||
|
||||
@@ -89,6 +89,8 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which
|
||||
- https://github.com/RinAliyeva/metasploitable2-vsftpd-exploitation
|
||||
- https://github.com/brettsm/vsftpd2.3.4-backdoor-exploit
|
||||
- https://github.com/tshaq17/vsftpd-2.3.4---Backdoor-Command-Execution
|
||||
- https://github.com/JUN41DS2709/vsFTPd-2.3.4-Exploit
|
||||
- https://github.com/aboubacar70/LAB1-metasploitable
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml
|
||||
|
||||
@@ -17,5 +17,4 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor
|
||||
#### Github
|
||||
- https://github.com/FenrirSec/CVE-2018-17240_exploit
|
||||
- https://github.com/Xewdy444/Netgrave
|
||||
- https://github.com/BBge/CVE-2018-17240
|
||||
|
||||
@@ -15,5 +15,5 @@ GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may
|
||||
- https://ubuntu.com/security/CVE-2019-1010022
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/sub148/vuln-triage
|
||||
|
||||
@@ -18,4 +18,5 @@ Kubernetes API server in all versions allow an attacker who is able to create a
|
||||
- https://github.com/alebedev87/gatekeeper-cve-2020-8554
|
||||
- https://github.com/jrmurray000/CVE-2020-8554
|
||||
- https://github.com/twistlock/k8s-cve-2020-8554-mitigations
|
||||
- https://github.com/raesene/vuln_pocs
|
||||
|
||||
@@ -14,5 +14,5 @@ A security issue was discovered in Kubernetes where actors that control the resp
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/raesene/vuln_pocs
|
||||
|
||||
@@ -14,5 +14,5 @@ As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to p
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/raesene/vuln_pocs
|
||||
|
||||
@@ -13,5 +13,5 @@ runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Trav
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/raesene/vuln_pocs
|
||||
|
||||
@@ -465,6 +465,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
|
||||
- https://github.com/vutiendat323/CVE-2021-44228_Log4Shell
|
||||
- https://github.com/kwekre/poc
|
||||
- https://github.com/N0tOd2y/PenForge
|
||||
- https://github.com/ARPSyndicate/puncia
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml
|
||||
|
||||
@@ -25,4 +25,5 @@ The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL
|
||||
- https://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765
|
||||
- https://github.com/shamo0/PDFkit-CMD-Injection
|
||||
- https://github.com/Jeanback1/CVE-2022-25765-exploit
|
||||
- https://github.com/innocentx0/CVE-2022-25765
|
||||
|
||||
@@ -53,6 +53,7 @@ No PoCs from references.
|
||||
- https://github.com/Phaedrik/CVE-2023-23397-POC
|
||||
- https://github.com/cleverg0d/CVEs
|
||||
- https://github.com/medyassineakhmari/CVE_2023_23397
|
||||
- https://github.com/TushaeBXN/kerrigan-fantasma
|
||||
|
||||
#### Collections
|
||||
- https://github.com/helloexp/0day/tree/master/00-CVE_EXP/CVE-2023-23397
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2023-3360](https://www.cve.org/CVERecord?id=CVE-2023-3360)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/7f00e126-7c2a-404d-911a-cf5d4c489f5f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -75,6 +75,7 @@ The HTTP/2 protocol allows a denial of service (server resource consumption) bec
|
||||
- https://github.com/tahaXafous/CVE-2023-44487-dos
|
||||
- https://github.com/tpirate/cve-2023-44487-POC
|
||||
- https://github.com/irvik00/Homework_11
|
||||
- https://github.com/sub148/vuln-triage
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52426
|
||||
@@ -16,4 +16,5 @@ No PoCs from references.
|
||||
- https://github.com/Meirelez/SSR-DNSSEC
|
||||
- https://github.com/Pablodiz/CVE-2023-50387
|
||||
- https://github.com/knqyf263/CVE-2023-50387
|
||||
- https://github.com/sub148/vuln-triage
|
||||
|
||||
@@ -30,5 +30,4 @@ A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables compon
|
||||
- https://github.com/vettrivel007/CVE-2024-1086
|
||||
- https://github.com/NGChuen/linux-kernel-bugs
|
||||
- https://github.com/eavil666/cve-poc-mapper
|
||||
- https://github.com/Notselwyn/CVE-2024-1086
|
||||
|
||||
@@ -34,6 +34,7 @@ No PoCs from references.
|
||||
- https://github.com/Adamkadaban/CVE-2024-30085
|
||||
- https://github.com/murdok1982/Exploit-PoC-para-CVE-2024-30085
|
||||
- https://github.com/12121211aaaaa/CVE_2024_30085
|
||||
- https://github.com/TushaeBXN/kerrigan-fantasma
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_30085_cloud_files.rb
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2024-3773](https://www.cve.org/CVERecord?id=CVE-2024-3773)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b2c7d31d-8d9f-4c79-b01b-fc350c60a528/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -97,8 +97,6 @@ In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, w
|
||||
- https://github.com/razureink/cve-2024-4577-phpcgi_rce_reproduction
|
||||
- https://github.com/BLACK-ARCHIVERS/CVE-2024-4577
|
||||
- https://github.com/mrzero-cool/cve-poc-search
|
||||
- https://github.com/11whoami99/CVE-2024-4577
|
||||
- https://github.com/watchtowrlabs/CVE-2024-4577
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4577.yaml
|
||||
|
||||
@@ -112,7 +112,6 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
|
||||
- https://github.com/evilbotnet/ilovemalware
|
||||
- https://github.com/hackingyseguridad/ssha
|
||||
- https://github.com/jasonnorman66994-dot/sovereign-command-center
|
||||
- https://github.com/zgzhang/cve-2024-6387-poc
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52269
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15481](https://www.cve.org/CVERecord?id=CVE-2025-15481)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a5fb18fa-be2c-41a5-81ef-ca27de024d34/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15485](https://www.cve.org/CVERecord?id=CVE-2025-15485)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15489](https://www.cve.org/CVERecord?id=CVE-2025-15489)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b1b4f64a-5bff-486e-a3e5-e71b5ca28d78/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15490](https://www.cve.org/CVERecord?id=CVE-2025-15490)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/87d4768e-48a5-4d91-a5e1-8a84ba2de035/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15692](https://www.cve.org/CVERecord?id=CVE-2025-15692)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/263e7dc0-61bb-468e-9e15-a6b6789923f4/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -337,6 +337,7 @@ A pre-authentication remote code execution vulnerability exists in React Server
|
||||
- https://github.com/wangxso/CVE-2025-66478-POC
|
||||
- https://github.com/wargaintibumi/react2int-shell
|
||||
- https://github.com/wnaspy/CVE-POC-WEAPON
|
||||
- https://github.com/ChrisBarack/cve-2025-55182
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55182.yaml
|
||||
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-8945](https://www.cve.org/CVERecord?id=CVE-2025-8945)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/37cec6e0-a349-4cc7-971d-b370bc733ab6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-9314](https://www.cve.org/CVERecord?id=CVE-2025-9314)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/0b1d9bfa-f7fa-4c6b-a310-699a47267e51/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-9974](https://www.cve.org/CVERecord?id=CVE-2025-9974)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitrary commands on the underlying ONT/Beacon operating system, potentially impacting the confidentiality, integrity, and availability of the device.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/Rajdave69/CVE-2025-9974
|
||||
@@ -17,3 +17,4 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/HORKimhab/CVE-2026-0768
|
||||
- https://github.com/rmhowe425/POC-CVE-2026-0768
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-0769](https://www.cve.org/CVERecord?id=CVE-2026-0769)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
|
||||
|
||||
The specific flaw exists within the implementation of eval_custom_component_code function. The issue results from the lack of proper validation of a user-supplied string before using it to execute python code. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26972.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/rmhowe425/POC-CVE-2026-0769
|
||||
@@ -16,3 +16,4 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/ANYLNK/STProcessMonitorBYOVD
|
||||
- https://github.com/mein-0/cve-2026-0828
|
||||
- https://github.com/ximerag/dast
|
||||
@@ -17,3 +17,4 @@ No PoCs from references.
|
||||
- https://github.com/Galaxy-sc/CVE-2026-0920-WordPress-LA-Studio-Exploit
|
||||
- https://github.com/Nxploited/CVE-2026-0920-
|
||||
- https://github.com/Dx3iZ/CVE-2026-0920
|
||||
- https://github.com/katranSefa/CVE-2026-0920
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-10821](https://www.cve.org/CVERecord?id=CVE-2026-10821)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level access. This allows such users to inject arbitrary newline-delimited Apache directives into the root .htaccess file. On Apache servers that honour PHP directives, the injection can be chained with the user's own media upload (a polyglot image carrying a PHP payload) and an auto_prepend_file directive to achieve Remote Code Execution.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/2ddd8362-7248-48de-aab9-74c70e7d5dd6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-14326](https://www.cve.org/CVERecord?id=CVE-2026-14326)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/0e12e0d0-fcf1-4dfd-bbf3-7647fe231b26/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -15,3 +15,4 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/Nxploited/CVE-2026-1555
|
||||
- https://github.com/willygailo/WG-CVE-2026-1555-Linux
|
||||
- https://github.com/katranSefa/CVE-2026-1555
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-17563](https://www.cve.org/CVERecord?id=CVE-2026-17563)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through forms restricted to paying subscribers.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/293b7391-ac1a-4ec5-95d1-4578391906b2/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-19490](https://www.cve.org/CVERecord?id=CVE-2026-19490)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Vulnerability in NetScaler ADC and NetScaler Gateway.
|
||||
|
||||
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/TarPeg007/CVE-2026-19490
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-19698](https://www.cve.org/CVERecord?id=CVE-2026-19698)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous visitors. JavaScript execution is not possible at that role, so the impact is limited to defacement, interface redressing and forcing external resources to load.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/0e6cd37e-3004-498d-8d8d-21617138888a/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -15,6 +15,7 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/aavamin/CVE-2026-24423
|
||||
- https://github.com/CyberAlp0/SmarterMail-CVE-2026-24423
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24423.yaml
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-25550](https://www.cve.org/CVERecord?id=CVE-2026-25550)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Seagull Software BarTender 2010, 2016, and 2019 contain an unauthenticated remote code execution vulnerability in the .NET Remoting service exposed on TCP port 7375 via BtSystem.Service.exe. The service registers an unauthenticated singleton endpoint — BarTenderSystem for BarTender 2016 <= R9, and DataServiceSingleton for BarTender 2019 <= R10 — configured with BinaryServerFormatterSinkProvider and TypeFilterLevel set to Full. An unauthenticated remote attacker can exploit .NET Remoting object unmarshalling to read or write arbitrary files on the server using the .NET WebClient class, or coerce NTLMv2 authentication by supplying a UNC path to an attacker-controlled server, enabling sensitive credential disclosure, remote code execution, or lateral movement depending on service account privileges and network environment. The service runs in the context of NT AUTHORITY\\SYSTEM. This vulnerability is corrected in BarTender 12.1. Users of affected releases should upgrade to BarTender 12.1 or later.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a618
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-2688](https://www.cve.org/CVERecord?id=CVE-2026-2688)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server explicitly checks for this value to skip nonce validation entirely. This allows unauthenticated attackers to access protected AJAX endpoints.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/779304f2-7dc2-4f12-b134-dede9a0c5eb6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-2811](https://www.cve.org/CVERecord?id=CVE-2026-2811)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/48250628-9b81-4bef-b623-356ceca01215/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-38577](https://www.cve.org/CVERecord?id=CVE-2026-38577)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/poxsky/CVE-2026-38577-by-deepak-Anmol
|
||||
@@ -149,3 +149,4 @@ No PoCs from references.
|
||||
- https://github.com/lkeld/CVE-2026-43499-poc
|
||||
- https://github.com/abdgalaxy36-code/rmgp-complete-handoff
|
||||
- https://github.com/slapah/ghostlock-h8q
|
||||
- https://github.com/ain0203root/Root-My-Galaxy-Payloads-S721B-DZG1
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-4357](https://www.cve.org/CVERecord?id=CVE-2026-4357)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b364969d-9dac-46ce-83e2-fc0fc2e5f698/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -19,6 +19,7 @@ No PoCs from references.
|
||||
- https://github.com/HORKimhab/CVE-2026-5027
|
||||
- https://github.com/Layer-6/CVE-2026-5027-Langflow
|
||||
- https://github.com/0xBlackash/CVE-2026-5027
|
||||
- https://github.com/rmhowe425/POC-CVE-2026-5027
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-64788](https://www.cve.org/CVERecord?id=CVE-2026-64788)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/ByteV0rtex/CVE-2026-64788
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-65343](https://www.cve.org/CVERecord?id=CVE-2026-65343)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/ByteV0rtex/CVE-2026-65343
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-65349](https://www.cve.org/CVERecord?id=CVE-2026-65349)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/ByteV0rtex/CVE-2026-65349
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-73296](https://www.cve.org/CVERecord?id=CVE-2026-73296)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/0xBlackash/CVE-2026-73296
|
||||
@@ -20,6 +20,7 @@ No PoCs from references.
|
||||
- https://github.com/BiuTrap/CVE-2026-73570
|
||||
- https://github.com/alsyundawy/eradicate-zimbra-malware
|
||||
- https://github.com/virologi-info/Zimbra-security
|
||||
- https://github.com/byt3l0rd/CVE-2026-73570
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-73570.yaml
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-75134](https://www.cve.org/CVERecord?id=CVE-2026-75134)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by exploiting an overly permissive KSES allowlist that explicitly permits the onload event handler on iframe elements. Attackers can store crafted JavaScript payloads in post content that execute when the affected post is viewed or previewed by higher-privileged users, potentially leading to privilege escalation or account compromise.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Elymaro/CVE/blob/main/WordPress/CVE-2026-75134.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -12,6 +12,7 @@ A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected
|
||||
|
||||
#### Reference
|
||||
- https://github.com/natanmorette-thoropass/thoropass-vuln-research-program/tree/main/2026/Path%20Traversal%20via%20Dataset%20Folder%20Parameter
|
||||
- https://github.com/heylaika/vuln-research-program/blob/main/2026/CVE-2026-7680%20-%20COCO%20Annotator%20-%20Path%20Traversal%20via%20Dataset%20Folder%20Parameter/README.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77009](https://www.cve.org/CVERecord?id=CVE-2026-77009)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/2881cd28-6c30-4942-9443-317dd19f1e4a/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77793](https://www.cve.org/CVERecord?id=CVE-2026-77793)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to complete a paid registration without paying and obtain an activated account.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/83f11a27-be9c-4b27-b4ea-d0c58e0d7829/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77794](https://www.cve.org/CVERecord?id=CVE-2026-77794)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c8cdc20f-d6ca-4e02-b8ab-68cd9362952f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-78153](https://www.cve.org/CVERecord?id=CVE-2026-78153)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d17c00fc-002a-4f5f-9255-dcc34da89d90/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-7899](https://www.cve.org/CVERecord?id=CVE-2026-7899)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/HORKimhab/CVE-2026-7899
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-8151](https://www.cve.org/CVERecord?id=CVE-2026-8151)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-in administrator into changing the configured third-party API key. Once replaced, all subsequent member registration data (name, email, membership level) is sent to the attacker-controlled account.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c7002cf8-83db-4e1f-a6e9-230293290635/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81571](https://www.cve.org/CVERecord?id=CVE-2026-81571)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/049d0bfc-962b-4f5b-a089-c45f4ad981e3/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -19,6 +19,7 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/HORKimhab/CVE-2026-82329
|
||||
- https://github.com/realalexandergeorgiev/artifactory-CVE-2026-82329-poc.py
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-82329.yaml
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-82524](https://www.cve.org/CVERecord?id=CVE-2026-82524)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public storage disk and execute arbitrary operating system commands on the server by accessing the uploaded file at the URL returned in the server response.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://ashutosh-jena.in/blog/remote-code-execution-rce-via-unrestricted-file-upload-in-unopim-v214
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-82884](https://www.cve.org/CVERecord?id=CVE-2026-82884)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privileged user edits the post.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/9d4e5075-062a-42d7-beba-9f96f9ce76da/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-83533](https://www.cve.org/CVERecord?id=CVE-2026-83533)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/8ffb76d6-fda5-4819-ab07-d8c086169110/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-83547](https://www.cve.org/CVERecord?id=CVE-2026-83547)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84833](https://www.cve.org/CVERecord?id=CVE-2026-84833)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in resource consumption. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/outlookgp/CVE/tree/main/OpenBrowser_Message_Budget_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-84839](https://www.cve.org/CVERecord?id=CVE-2026-84839)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO Compliance Console. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.5.1 can resolve this issue. It is suggested to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/mano257200/TSI-DPDP-CMS-Missing-Authentication/blob/main/README.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-84840](https://www.cve.org/CVERecord?id=CVE-2026-84840)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 0.5.1 is able to mitigate this issue. Upgrading the affected component is recommended.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/mano257200/TSI-DPDP-CMS-Unauthenticated-Super-Admin-Bootstrap-Endpoint/blob/main/README.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-84841](https://www.cve.org/CVERecord?id=CVE-2026-84841)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.5.1 is able to resolve this issue. It is recommended to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/mano257200/TSI-DPDP-CMS-Client-Side-Only-Authentication-Allows-Complete-Bypass-via-Direct-HTTP-Request/blob/main/README.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-84852](https://www.cve.org/CVERecord?id=CVE-2026-84852)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument _display_name leads to path traversal. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://docs.google.com/document/d/1g8q6UDV2EBm0UfEz2tc1eVBSxXqX5Zk8Ei30FuKAYa8/edit?usp=sharing
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84856](https://www.cve.org/CVERecord?id=CVE-2026-84856)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route.ts of the component Composio Webhook Endpoint. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 0.9.2 is sufficient to resolve this issue. Upgrading the affected component is recommended. The legacy Next.js app was deleted at 0.9.2 rather than patched, leaving no security control behind.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/hackerguopeng/cve/tree/main/Rowboat_PreAuth_Body_Buffer_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-84857](https://www.cve.org/CVERecord?id=CVE-2026-84857)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/outlookgp/CVE/tree/main/AIChat_Serve_Request_Body_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84885](https://www.cve.org/CVERecord?id=CVE-2026-84885)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the component CodeAgent. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/outlookgp/CVE/tree/main/AgentS_CodeAgent_Tool_Output_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-84886](https://www.cve.org/CVERecord?id=CVE-2026-84886)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file gui_agents/s1/utils/ocr_server.py of the component OCR HTTP API. Executing a manipulation of the argument img_bytes can lead to resource consumption. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/hackerguopeng/cve/tree/main/AgentS_OCR_HTTP_Body_Image_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-84887](https://www.cve.org/CVERecord?id=CVE-2026-84887)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/outlookgp/CVE/tree/main/AgentS_Action_Parameter_Budget_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,26 @@
|
||||
### [CVE-2026-84888](https://www.cve.org/CVERecord?id=CVE-2026-84888)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/outlookgp/CVE/tree/main/OpenFang_ShellExec_Output_Buffer_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-85021](https://www.cve.org/CVERecord?id=CVE-2026-85021)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirect_url causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc#file-cvd_dify_vuln1_20260705-md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-85022](https://www.cve.org/CVERecord?id=CVE-2026-85022)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirect_url leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc#file-cvd_dify_vuln2_20260705-md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-85030](https://www.cve.org/CVERecord?id=CVE-2026-85030)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routes_agent.py of the component selfRegister API Endpoint. Such manipulation of the argument initial_balance leads to business logic errors. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is described as difficult. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. profit_percent_for_display() divides by INITIAL_CAPITAL + deposited, and challenge scoring's return_pct also normalises against the attacker-inflated starting_cash. So an inflated initial_balance does not yield artificial percent returns - it inflates the absolute cash/equity column only, which is a cosmetic/leaderboard-gaming concern in a simulated game.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Dave-gilmore-aus/security-advisories/blob/main/AI-Trader-Unrestricted%20Resource%20Consumption%20%26%20Broken%20Business%20Logic%20in%20AI-Trader%20(CVE-Pending).md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-85040](https://www.cve.org/CVERecord?id=CVE-2026-85040)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Vendor documents this as deliberate debug-only behavior. But isSafePhpCode blacklist offers no real RCE containment.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/xiaohai12138-1/cve/blob/main/CRMEB/CRMEB%20Backend%20custom%20%20scheduled%20task%20functionality%20%20RCE.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-85091](https://www.cve.org/CVERecord?id=CVE-2026-85091)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-85092](https://www.cve.org/CVERecord?id=CVE-2026-85092)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link with the expected filename pointing to any root-owned file, and when the acquisition runs in kernel context, LiME follows the link and truncates the target file with the memory acquisition stream.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/thesmartshadow/5355949144749b431da41490b63598f5
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-9055](https://www.cve.org/CVERecord?id=CVE-2026-9055)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set their role to 'manager' and trigger creation of a WordPress user with the wpamelia-manager role when the 'externalId' parameter is set to 0. This makes it possible for unauthenticated attackers to escalate their privileges to administrator by first elevating to the manager role, then creating a provider entity linked to an administrator user ID and overwriting that administrator's password.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/EXEcution-py/CVE-2026-9055
|
||||
+3
-3
@@ -1,5 +1,5 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
|
||||
role="img" aria-label="PoC Index, 82,468 CVEs with public proof-of-concept exploits">
|
||||
role="img" aria-label="PoC Index, 82,528 CVEs with public proof-of-concept exploits">
|
||||
<clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
|
||||
<rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
|
||||
<g clip-path="url(#card)" opacity="0.6"><g>
|
||||
@@ -19,10 +19,10 @@
|
||||
<text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
|
||||
|
||||
<text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,005</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,060</text>
|
||||
<text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,468</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,528</text>
|
||||
<text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,181</text>
|
||||
|
||||
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
@@ -20,10 +20,10 @@
|
||||
|
||||
<rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
|
||||
<text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,005</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,060</text>
|
||||
<text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,468</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,528</text>
|
||||
<text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,181</text>
|
||||
|
||||
|
Before Width: | Height: | Size: 2.7 KiB After Width: | Height: | Size: 2.7 KiB |
+2
-2
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"kev": 1181,
|
||||
"total_cves": 171005,
|
||||
"with_pocs": 82468
|
||||
"total_cves": 171060,
|
||||
"with_pocs": 82528
|
||||
}
|
||||
@@ -1 +1 @@
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
+35
-5
@@ -26844,14 +26844,44 @@ CVE-2026-39987 - https://github.com/Ghxstsec/CVE-2026-39987
|
||||
CVE-2026-43499 - https://github.com/abdgalaxy36-code/rmgp-complete-handoff
|
||||
CVE-2026-82221 - https://github.com/gabrielftanaka/CVE-2026-82221-PoC
|
||||
CVE-2026-84361 - https://github.com/Saku0512/CVE-2026-84361-poc
|
||||
CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240
|
||||
CVE-2019-10068 - https://github.com/crukz404/CVE-2019-10068-PoC
|
||||
CVE-2024-1086 - https://github.com/Notselwyn/CVE-2024-1086
|
||||
CVE-2024-21907 - https://github.com/iSecurityTW/seal-security-nuget-demo-net7
|
||||
CVE-2024-4577 - https://github.com/11whoami99/CVE-2024-4577
|
||||
CVE-2024-4577 - https://github.com/watchtowrlabs/CVE-2024-4577
|
||||
CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
|
||||
CVE-2026-43499 - https://github.com/slapah/ghostlock-h8q
|
||||
CVE-2026-75604 - https://github.com/HackSpeak/CVE-2026-75604
|
||||
CVE-2026-75604 - https://github.com/e4zyy/Project-CVE-2026-75604
|
||||
CVE-2025-29009 - https://github.com/katranSefa/CVE-2025-29009
|
||||
CVE-2005-2541 - https://github.com/sub148/vuln-triage
|
||||
CVE-2011-2523 - https://github.com/JUN41DS2709/vsFTPd-2.3.4-Exploit
|
||||
CVE-2011-2523 - https://github.com/aboubacar70/LAB1-metasploitable
|
||||
CVE-2019-1010022 - https://github.com/sub148/vuln-triage
|
||||
CVE-2020-8554 - https://github.com/raesene/vuln_pocs
|
||||
CVE-2020-8561 - https://github.com/raesene/vuln_pocs
|
||||
CVE-2020-8562 - https://github.com/raesene/vuln_pocs
|
||||
CVE-2021-30465 - https://github.com/raesene/vuln_pocs
|
||||
CVE-2021-44228 - https://github.com/ARPSyndicate/puncia
|
||||
CVE-2022-25765 - https://github.com/innocentx0/CVE-2022-25765
|
||||
CVE-2023-23397 - https://github.com/TushaeBXN/kerrigan-fantasma
|
||||
CVE-2023-44487 - https://github.com/sub148/vuln-triage
|
||||
CVE-2023-50387 - https://github.com/sub148/vuln-triage
|
||||
CVE-2024-30085 - https://github.com/TushaeBXN/kerrigan-fantasma
|
||||
CVE-2025-55182 - https://github.com/ChrisBarack/cve-2025-55182
|
||||
CVE-2025-9974 - https://github.com/Rajdave69/CVE-2025-9974
|
||||
CVE-2026-0768 - https://github.com/rmhowe425/POC-CVE-2026-0768
|
||||
CVE-2026-0769 - https://github.com/rmhowe425/POC-CVE-2026-0769
|
||||
CVE-2026-0828 - https://github.com/ximerag/dast
|
||||
CVE-2026-0920 - https://github.com/katranSefa/CVE-2026-0920
|
||||
CVE-2026-1555 - https://github.com/katranSefa/CVE-2026-1555
|
||||
CVE-2026-19490 - https://github.com/TarPeg007/CVE-2026-19490
|
||||
CVE-2026-24423 - https://github.com/CyberAlp0/SmarterMail-CVE-2026-24423
|
||||
CVE-2026-38577 - https://github.com/poxsky/CVE-2026-38577-by-deepak-Anmol
|
||||
CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
|
||||
CVE-2026-43499 - https://github.com/ain0203root/Root-My-Galaxy-Payloads-S721B-DZG1
|
||||
CVE-2026-5027 - https://github.com/rmhowe425/POC-CVE-2026-5027
|
||||
CVE-2026-64788 - https://github.com/ByteV0rtex/CVE-2026-64788
|
||||
CVE-2026-65343 - https://github.com/ByteV0rtex/CVE-2026-65343
|
||||
CVE-2026-65349 - https://github.com/ByteV0rtex/CVE-2026-65349
|
||||
CVE-2026-73296 - https://github.com/0xBlackash/CVE-2026-73296
|
||||
CVE-2026-73570 - https://github.com/byt3l0rd/CVE-2026-73570
|
||||
CVE-2026-7899 - https://github.com/HORKimhab/CVE-2026-7899
|
||||
CVE-2026-82329 - https://github.com/realalexandergeorgiev/artifactory-CVE-2026-82329-poc.py
|
||||
CVE-2026-9055 - https://github.com/EXEcution-py/CVE-2026-9055
|
||||
@@ -37705,3 +37705,50 @@ CVE-2026-84441 - https://github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/un
|
||||
CVE-2026-84442 - https://docs.google.com/document/d/1NqFuHvwq66hpOfxTWPKlUB1_eMwLvujH/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/disksec
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/psychite
|
||||
CVE-2023-3360 - https://wpscan.com/vulnerability/7f00e126-7c2a-404d-911a-cf5d4c489f5f/
|
||||
CVE-2024-3773 - https://wpscan.com/vulnerability/b2c7d31d-8d9f-4c79-b01b-fc350c60a528/
|
||||
CVE-2025-15481 - https://wpscan.com/vulnerability/a5fb18fa-be2c-41a5-81ef-ca27de024d34/
|
||||
CVE-2025-15485 - https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/
|
||||
CVE-2025-15489 - https://wpscan.com/vulnerability/b1b4f64a-5bff-486e-a3e5-e71b5ca28d78/
|
||||
CVE-2025-15490 - https://wpscan.com/vulnerability/87d4768e-48a5-4d91-a5e1-8a84ba2de035/
|
||||
CVE-2025-15692 - https://wpscan.com/vulnerability/263e7dc0-61bb-468e-9e15-a6b6789923f4/
|
||||
CVE-2025-8945 - https://wpscan.com/vulnerability/37cec6e0-a349-4cc7-971d-b370bc733ab6/
|
||||
CVE-2025-9314 - https://wpscan.com/vulnerability/0b1d9bfa-f7fa-4c6b-a310-699a47267e51/
|
||||
CVE-2026-10821 - https://wpscan.com/vulnerability/2ddd8362-7248-48de-aab9-74c70e7d5dd6/
|
||||
CVE-2026-14326 - https://wpscan.com/vulnerability/0e12e0d0-fcf1-4dfd-bbf3-7647fe231b26/
|
||||
CVE-2026-17563 - https://wpscan.com/vulnerability/293b7391-ac1a-4ec5-95d1-4578391906b2/
|
||||
CVE-2026-19698 - https://wpscan.com/vulnerability/0e6cd37e-3004-498d-8d8d-21617138888a/
|
||||
CVE-2026-25550 - https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a618
|
||||
CVE-2026-2688 - https://wpscan.com/vulnerability/779304f2-7dc2-4f12-b134-dede9a0c5eb6/
|
||||
CVE-2026-2811 - https://wpscan.com/vulnerability/48250628-9b81-4bef-b623-356ceca01215/
|
||||
CVE-2026-4357 - https://wpscan.com/vulnerability/b364969d-9dac-46ce-83e2-fc0fc2e5f698/
|
||||
CVE-2026-75134 - https://github.com/Elymaro/CVE/blob/main/WordPress/CVE-2026-75134.md
|
||||
CVE-2026-7680 - https://github.com/heylaika/vuln-research-program/blob/main/2026/CVE-2026-7680%20-%20COCO%20Annotator%20-%20Path%20Traversal%20via%20Dataset%20Folder%20Parameter/README.md
|
||||
CVE-2026-77009 - https://wpscan.com/vulnerability/2881cd28-6c30-4942-9443-317dd19f1e4a/
|
||||
CVE-2026-77793 - https://wpscan.com/vulnerability/83f11a27-be9c-4b27-b4ea-d0c58e0d7829/
|
||||
CVE-2026-77794 - https://wpscan.com/vulnerability/c8cdc20f-d6ca-4e02-b8ab-68cd9362952f/
|
||||
CVE-2026-78153 - https://wpscan.com/vulnerability/d17c00fc-002a-4f5f-9255-dcc34da89d90/
|
||||
CVE-2026-8151 - https://wpscan.com/vulnerability/c7002cf8-83db-4e1f-a6e9-230293290635/
|
||||
CVE-2026-81571 - https://wpscan.com/vulnerability/049d0bfc-962b-4f5b-a089-c45f4ad981e3/
|
||||
CVE-2026-82524 - https://ashutosh-jena.in/blog/remote-code-execution-rce-via-unrestricted-file-upload-in-unopim-v214
|
||||
CVE-2026-82884 - https://wpscan.com/vulnerability/9d4e5075-062a-42d7-beba-9f96f9ce76da/
|
||||
CVE-2026-83533 - https://wpscan.com/vulnerability/8ffb76d6-fda5-4819-ab07-d8c086169110/
|
||||
CVE-2026-83547 - https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67/
|
||||
CVE-2026-83744 - https://ashutosh-jena.in/blog/server-side-request-forgery-ssrf-in-invoice-ninja-pdf-rendering-v51326
|
||||
CVE-2026-84833 - https://github.com/outlookgp/CVE/tree/main/OpenBrowser_Message_Budget_DoS_Report
|
||||
CVE-2026-84839 - https://github.com/mano257200/TSI-DPDP-CMS-Missing-Authentication/blob/main/README.md
|
||||
CVE-2026-84840 - https://github.com/mano257200/TSI-DPDP-CMS-Unauthenticated-Super-Admin-Bootstrap-Endpoint/blob/main/README.md
|
||||
CVE-2026-84841 - https://github.com/mano257200/TSI-DPDP-CMS-Client-Side-Only-Authentication-Allows-Complete-Bypass-via-Direct-HTTP-Request/blob/main/README.md
|
||||
CVE-2026-84852 - https://docs.google.com/document/d/1g8q6UDV2EBm0UfEz2tc1eVBSxXqX5Zk8Ei30FuKAYa8/edit?usp=sharing
|
||||
CVE-2026-84856 - https://github.com/hackerguopeng/cve/tree/main/Rowboat_PreAuth_Body_Buffer_DoS_Report
|
||||
CVE-2026-84857 - https://github.com/outlookgp/CVE/tree/main/AIChat_Serve_Request_Body_DoS_Report
|
||||
CVE-2026-84885 - https://github.com/outlookgp/CVE/tree/main/AgentS_CodeAgent_Tool_Output_DoS_Report
|
||||
CVE-2026-84886 - https://github.com/hackerguopeng/cve/tree/main/AgentS_OCR_HTTP_Body_Image_DoS_Report
|
||||
CVE-2026-84887 - https://github.com/outlookgp/CVE/tree/main/AgentS_Action_Parameter_Budget_DoS_Report
|
||||
CVE-2026-84888 - https://github.com/outlookgp/CVE/tree/main/OpenFang_ShellExec_Output_Buffer_DoS_Report
|
||||
CVE-2026-85021 - https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc#file-cvd_dify_vuln1_20260705-md
|
||||
CVE-2026-85022 - https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc#file-cvd_dify_vuln2_20260705-md
|
||||
CVE-2026-85030 - https://github.com/Dave-gilmore-aus/security-advisories/blob/main/AI-Trader-Unrestricted%20Resource%20Consumption%20%26%20Broken%20Business%20Logic%20in%20AI-Trader%20(CVE-Pending).md
|
||||
CVE-2026-85040 - https://github.com/xiaohai12138-1/cve/blob/main/CRMEB/CRMEB%20Backend%20custom%20%20scheduled%20task%20functionality%20%20RCE.md
|
||||
CVE-2026-85091 - https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
|
||||
CVE-2026-85092 - https://gist.github.com/thesmartshadow/5355949144749b431da41490b63598f5
|
||||
@@ -116834,3 +116834,49 @@ CVE-2026-84441 - https://github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/un
|
||||
CVE-2026-84442 - https://docs.google.com/document/d/1NqFuHvwq66hpOfxTWPKlUB1_eMwLvujH/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/disksec
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/psychite
|
||||
CVE-2023-3360 - https://wpscan.com/vulnerability/7f00e126-7c2a-404d-911a-cf5d4c489f5f/
|
||||
CVE-2024-3773 - https://wpscan.com/vulnerability/b2c7d31d-8d9f-4c79-b01b-fc350c60a528/
|
||||
CVE-2025-15481 - https://wpscan.com/vulnerability/a5fb18fa-be2c-41a5-81ef-ca27de024d34/
|
||||
CVE-2025-15485 - https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/
|
||||
CVE-2025-15489 - https://wpscan.com/vulnerability/b1b4f64a-5bff-486e-a3e5-e71b5ca28d78/
|
||||
CVE-2025-15490 - https://wpscan.com/vulnerability/87d4768e-48a5-4d91-a5e1-8a84ba2de035/
|
||||
CVE-2025-15692 - https://wpscan.com/vulnerability/263e7dc0-61bb-468e-9e15-a6b6789923f4/
|
||||
CVE-2025-8945 - https://wpscan.com/vulnerability/37cec6e0-a349-4cc7-971d-b370bc733ab6/
|
||||
CVE-2025-9314 - https://wpscan.com/vulnerability/0b1d9bfa-f7fa-4c6b-a310-699a47267e51/
|
||||
CVE-2026-10821 - https://wpscan.com/vulnerability/2ddd8362-7248-48de-aab9-74c70e7d5dd6/
|
||||
CVE-2026-14326 - https://wpscan.com/vulnerability/0e12e0d0-fcf1-4dfd-bbf3-7647fe231b26/
|
||||
CVE-2026-17563 - https://wpscan.com/vulnerability/293b7391-ac1a-4ec5-95d1-4578391906b2/
|
||||
CVE-2026-19698 - https://wpscan.com/vulnerability/0e6cd37e-3004-498d-8d8d-21617138888a/
|
||||
CVE-2026-25550 - https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a618
|
||||
CVE-2026-2688 - https://wpscan.com/vulnerability/779304f2-7dc2-4f12-b134-dede9a0c5eb6/
|
||||
CVE-2026-2811 - https://wpscan.com/vulnerability/48250628-9b81-4bef-b623-356ceca01215/
|
||||
CVE-2026-4357 - https://wpscan.com/vulnerability/b364969d-9dac-46ce-83e2-fc0fc2e5f698/
|
||||
CVE-2026-75134 - https://github.com/Elymaro/CVE/blob/main/WordPress/CVE-2026-75134.md
|
||||
CVE-2026-7680 - https://github.com/heylaika/vuln-research-program/blob/main/2026/CVE-2026-7680%20-%20COCO%20Annotator%20-%20Path%20Traversal%20via%20Dataset%20Folder%20Parameter/README.md
|
||||
CVE-2026-77009 - https://wpscan.com/vulnerability/2881cd28-6c30-4942-9443-317dd19f1e4a/
|
||||
CVE-2026-77793 - https://wpscan.com/vulnerability/83f11a27-be9c-4b27-b4ea-d0c58e0d7829/
|
||||
CVE-2026-77794 - https://wpscan.com/vulnerability/c8cdc20f-d6ca-4e02-b8ab-68cd9362952f/
|
||||
CVE-2026-78153 - https://wpscan.com/vulnerability/d17c00fc-002a-4f5f-9255-dcc34da89d90/
|
||||
CVE-2026-8151 - https://wpscan.com/vulnerability/c7002cf8-83db-4e1f-a6e9-230293290635/
|
||||
CVE-2026-81571 - https://wpscan.com/vulnerability/049d0bfc-962b-4f5b-a089-c45f4ad981e3/
|
||||
CVE-2026-82524 - https://ashutosh-jena.in/blog/remote-code-execution-rce-via-unrestricted-file-upload-in-unopim-v214
|
||||
CVE-2026-82884 - https://wpscan.com/vulnerability/9d4e5075-062a-42d7-beba-9f96f9ce76da/
|
||||
CVE-2026-83533 - https://wpscan.com/vulnerability/8ffb76d6-fda5-4819-ab07-d8c086169110/
|
||||
CVE-2026-83547 - https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67/
|
||||
CVE-2026-84833 - https://github.com/outlookgp/CVE/tree/main/OpenBrowser_Message_Budget_DoS_Report
|
||||
CVE-2026-84839 - https://github.com/mano257200/TSI-DPDP-CMS-Missing-Authentication/blob/main/README.md
|
||||
CVE-2026-84840 - https://github.com/mano257200/TSI-DPDP-CMS-Unauthenticated-Super-Admin-Bootstrap-Endpoint/blob/main/README.md
|
||||
CVE-2026-84841 - https://github.com/mano257200/TSI-DPDP-CMS-Client-Side-Only-Authentication-Allows-Complete-Bypass-via-Direct-HTTP-Request/blob/main/README.md
|
||||
CVE-2026-84852 - https://docs.google.com/document/d/1g8q6UDV2EBm0UfEz2tc1eVBSxXqX5Zk8Ei30FuKAYa8/edit?usp=sharing
|
||||
CVE-2026-84856 - https://github.com/hackerguopeng/cve/tree/main/Rowboat_PreAuth_Body_Buffer_DoS_Report
|
||||
CVE-2026-84857 - https://github.com/outlookgp/CVE/tree/main/AIChat_Serve_Request_Body_DoS_Report
|
||||
CVE-2026-84885 - https://github.com/outlookgp/CVE/tree/main/AgentS_CodeAgent_Tool_Output_DoS_Report
|
||||
CVE-2026-84886 - https://github.com/hackerguopeng/cve/tree/main/AgentS_OCR_HTTP_Body_Image_DoS_Report
|
||||
CVE-2026-84887 - https://github.com/outlookgp/CVE/tree/main/AgentS_Action_Parameter_Budget_DoS_Report
|
||||
CVE-2026-84888 - https://github.com/outlookgp/CVE/tree/main/OpenFang_ShellExec_Output_Buffer_DoS_Report
|
||||
CVE-2026-85021 - https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc#file-cvd_dify_vuln1_20260705-md
|
||||
CVE-2026-85022 - https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc#file-cvd_dify_vuln2_20260705-md
|
||||
CVE-2026-85030 - https://github.com/Dave-gilmore-aus/security-advisories/blob/main/AI-Trader-Unrestricted%20Resource%20Consumption%20%26%20Broken%20Business%20Logic%20in%20AI-Trader%20(CVE-Pending).md
|
||||
CVE-2026-85040 - https://github.com/xiaohai12138-1/cve/blob/main/CRMEB/CRMEB%20Backend%20custom%20%20scheduled%20task%20functionality%20%20RCE.md
|
||||
CVE-2026-85091 - https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
|
||||
CVE-2026-85092 - https://gist.github.com/thesmartshadow/5355949144749b431da41490b63598f5
|
||||
Reference in new issue
Block a user