Update CVE PoCs 2026-09-11

2026-10-23 16:35:19 +00:00 · 2026-09-11 07:25:15 +00:00
1 parent 42c622a80f
commit 8da0640c49
@@ -1,3 +1,3 @@
 {
-  "cvelist_fetch_time": "2026-09-10T06:51:14.958Z"
+  "cvelist_fetch_time": "2026-09-11T06:59:58.964Z"
 }
@@ -1,8 +1,8 @@
 <div align="center">

-<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171573-82703-1189" alt="PoC Index" width="100%"></a>
+<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171598-82728-1189" alt="PoC Index" width="100%"></a>

-[![last sync](https://img.shields.io/badge/last%20sync-11%20Sep%202026%2007%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609110707)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C703-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C189-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609110707)](https://github.com/0xMarcio/pocindex/stargazers)
+[![last sync](https://img.shields.io/badge/last%20sync-11%20Sep%202026%2007%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609110707)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C728-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C189-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609110707)](https://github.com/0xMarcio/pocindex/stargazers)

 <a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>

@@ -91,6 +91,8 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which
 - https://github.com/tshaq17/vsftpd-2.3.4---Backdoor-Command-Execution
 - https://github.com/JUN41DS2709/vsFTPd-2.3.4-Exploit
 - https://github.com/aboubacar70/LAB1-metasploitable
+- https://github.com/mohammadibrahimop/cyber-kill-chain
+- https://github.com/shivkumaarr/Cyart_Tech_Task

 #### Nuclei
 - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml
@@ -17,7 +17,7 @@ PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.p
 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/phptax_exec.rb

 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/kyaw-tun/red-team-capstone

 #### Metasploit
 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phptax_exec.rb
@@ -17,5 +17,4 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor
 #### Github
 - https://github.com/FenrirSec/CVE-2018-17240_exploit
 - https://github.com/Xewdy444/Netgrave
- https://github.com/BBge/CVE-2018-17240

@@ -20,6 +20,7 @@ No PoCs from references.
 - https://github.com/bysinks/CVE-2021-29441
 - https://github.com/hh-hunter/nacos-cve-2021-29441
 - https://github.com/K3ysTr0K3R/CVE-2021-29441
+- https://github.com/galact-byte/dddd-next

 #### Nuclei
 - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29441.yaml
@@ -162,6 +162,7 @@ A flaw was found in the way the "flags" member of the new pipe buffer structure
 - https://github.com/stenaflow/dirty-pipe-cola
 - https://github.com/weto91/GitHub_Search_CVE
 - https://github.com/yutasato88/DIRTYPIPE
+- https://github.com/vudangducminh/CVE-2022-0847

 #### ExploitDB
 - https://www.exploit-db.com/exploits/50808
@@ -22,6 +22,7 @@ Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker
 - https://github.com/hupe1980/CVE-2022-24637
 - https://github.com/icebreack/CVE-2022-24637
 - https://github.com/726232111/CVE-2022-24638
+- https://github.com/PrinceAikinsBaidoo/CVE-2022-24637

 #### Nuclei
 - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24637.yaml
@@ -21,5 +21,5 @@ ws is an open source WebSocket client and server for Node.js. A request with a n
 - https://github.com/advisories/GHSA-3h5v-q93c-6h6q

 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/RazdoruNET/OMG_KILLER

@@ -113,7 +113,6 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
 - https://github.com/hackingyseguridad/ssha
 - https://github.com/jasonnorman66994-dot/sovereign-command-center
 - https://github.com/ptn1411/skill
- https://github.com/zgzhang/cve-2024-6387-poc

 #### ExploitDB
 - https://www.exploit-db.com/exploits/52269
@@ -0,0 +1,17 @@
+### [CVE-2025-15695](https://www.cve.org/CVERecord?id=CVE-2025-15695)
+**GTranslate < 3.0.10 - Admin+ Stored XSS**
+![](https://img.shields.io/static/v1?label=Product&message=Translate%20WordPress%20with%20GTranslate&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/423b6be0-e0f2-42c0-8b40-4015e4a0e670/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -20,6 +20,7 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.17&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.18&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.19&color=blue)
@@ -20,6 +20,7 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.17&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.18&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.19&color=blue)
@@ -16,6 +16,7 @@
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.17&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.18&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.19&color=blue)
@@ -0,0 +1,17 @@
+### [CVE-2026-14559](https://www.cve.org/CVERecord?id=CVE-2026-14559)
+**Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover**
+![](https://img.shields.io/static/v1?label=Product&message=teddy-bear-customize-addon&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brightgreen)
+
+### Description
+
+The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/90cbbed5-9662-4405-88b8-bd55854dccdf/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-14560](https://www.cve.org/CVERecord?id=CVE-2026-14560)
+**Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload**
+![](https://img.shields.io/static/v1?label=Product&message=teddy-bear-customize-addon&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20%28%27Code%20Injection%27%29&color=brightgreen)
+
+### Description
+
+The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/aba51906-91dc-4e75-ad44-373fe128deee/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-14562](https://www.cve.org/CVERecord?id=CVE-2026-14562)
+**Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Order Data Disclosure**
+![](https://img.shields.io/static/v1?label=Product&message=teddy-bear-customize-addon&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
+
+### Description
+
+The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/890f55f9-0bd0-4816-a666-a735b41ce5c7/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-14563](https://www.cve.org/CVERecord?id=CVE-2026-14563)
+**Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account Takeover**
+![](https://img.shields.io/static/v1?label=Product&message=advanced-customized-prompts&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brightgreen)
+
+### Description
+
+The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email address in an unauthenticated action, allowing unauthenticated attackers to log in as any registered user, including administrators, or to create arbitrary new accounts.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/7c7ad196-dff3-485f-9a50-8705bd796fb3/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-14565](https://www.cve.org/CVERecord?id=CVE-2026-14565)
+**Advanced Customized Prompts <= 1.0.1 - Subscriber+ Stored XSS via Product Popup Configuration**
+![](https://img.shields.io/static/v1?label=Product&message=advanced-customized-prompts&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape the stored values on output, allowing any authenticated user such as a subscriber to store JavaScript that executes in the browser of visitors viewing the affected product.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/613e5421-9da5-408a-b35d-b0def567e8db/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-14566](https://www.cve.org/CVERecord?id=CVE-2026-14566)
+**Advanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata Tampering**
+![](https://img.shields.io/static/v1?label=Product&message=advanced-customized-prompts&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brightgreen)
+
+### Description
+
+The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order, allowing any authenticated user such as a subscriber to tamper with the custom metadata of orders belonging to other customers.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/01094477-a9ad-41d9-9acd-f6ed37e6e605/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -1,5 +1,5 @@
 ### [CVE-2026-18649](https://www.cve.org/CVERecord?id=CVE-2026-18649)
-**Gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders**
+**Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders**
 ![](https://img.shields.io/static/v1?label=Vendor&message=Red%20Hat&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010.0%20Extended%20Update%20Support&color=blue)
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAu
 - https://github.com/BomboBombone/CVE-2026-73309

 #### Github
- https://github.com/BomboBombone/CVE-2026-73309
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoin
 - https://github.com/BomboBombone/CVE-2026-73310

 #### Github
- https://github.com/BomboBombone/CVE-2026-73310
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability
 - https://github.com/BomboBombone/CVE-2026-73311

 #### Github
- https://github.com/BomboBombone/CVE-2026-73311
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a refresh token replay vulnerability that allows
 - https://github.com/BomboBombone/CVE-2026-73312

 #### Github
- https://github.com/BomboBombone/CVE-2026-73312
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerabilit
 - https://github.com/BomboBombone/CVE-2026-73313

 #### Github
- https://github.com/BomboBombone/CVE-2026-73313
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a signature verification logic error in the PayPa
 - https://github.com/BomboBombone/CVE-2026-73314

 #### Github
- https://github.com/BomboBombone/CVE-2026-73314
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a server-side request forgery vulnerability in th
 - https://github.com/BomboBombone/CVE-2026-73315

 #### Github
- https://github.com/BomboBombone/CVE-2026-73315
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST
 - https://github.com/BomboBombone/CVE-2026-73316

 #### Github
- https://github.com/BomboBombone/CVE-2026-73316
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP
 - https://github.com/BomboBombone/CVE-2026-73317

 #### Github
- https://github.com/BomboBombone/CVE-2026-73317
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a missing authorization vulnerability in the forc
 - https://github.com/BomboBombone/CVE-2026-73318

 #### Github
- https://github.com/BomboBombone/CVE-2026-73318
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynam
 - https://github.com/BomboBombone/CVE-2026-73319

 #### Github
- https://github.com/BomboBombone/CVE-2026-73319
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an unauthenticated information disclosure vulnera
 - https://github.com/BomboBombone/CVE-2026-73320

 #### Github
- https://github.com/BomboBombone/CVE-2026-73320
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BB
 - https://github.com/BomboBombone/CVE-2026-73321

 #### Github
- https://github.com/BomboBombone/CVE-2026-73321
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-73693](https://www.cve.org/CVERecord?id=CVE-2026-73693)
+**FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler**
+![](https://img.shields.io/static/v1?label=Vendor&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20%28%27OS%20Command%20Injection%27%29&color=brightgreen)
+
+### Description
+
+FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to execute arbitrary commands by uploading files with shell metacharacters in their names. Attackers can upload a file containing command substitution syntax such as backticks, semicolons, or $() sequences in the filename, then trigger the PhotoProofSheet endpoint to execute arbitrary commands as the web-server user due to missing escapeshellarg() sanitization in the ImageMagick montage command construction.
+
+### POC
+
+#### Reference
+- https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-73694](https://www.cve.org/CVERecord?id=CVE-2026-73694)
+**FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition**
+![](https://img.shields.io/static/v1?label=Vendor&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20%28%27OS%20Command%20Injection%27%29&color=brightgreen)
+
+### Description
+
+FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd() in CLI.php that strips shell-metacharacter escaping, allowing attacker-controlled input to reach an exec() sink unsanitized. Attackers can exploit this through an interactive path via image_preview.php with a crafted args parameter requiring superuser authentication, or through a persistent path by storing malicious payloads in thumbnails_ffmpeg_args or thumbnails_ffmpeg_ss that execute when any user triggers video thumbnail generation.
+
+### POC
+
+#### Reference
+- https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-73698](https://www.cve.org/CVERecord?id=CVE-2026-73698)
+**FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action**
+![](https://img.shields.io/static/v1?label=Vendor&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20%28%27SQL%20Injection%27%29&color=brightgreen)
+
+### Description
+
+FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the description parameter as an array, causing the getValuesString() method in DB/DP.php to interpolate raw array values directly into an INSERT statement without parameterization. Because the underlying PDO connection uses emulated prepared statements enabling stacked queries, attackers can manipulate the df_users_permissions table to escalate a delegated administrator account to superuser privileges, and may additionally achieve code execution via unsanitized path values passed to require_once in the logs listing component.
+
+### POC
+
+#### Reference
+- https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-73699](https://www.cve.org/CVERecord?id=CVE-2026-73699)
+**FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()**
+![](https://img.shields.io/static/v1?label=Vendor&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=FileRun&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Deserialization%20of%20Untrusted%20Data&color=brightgreen)
+
+### Description
+
+FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect options passed to unserialize() in the Perms::getPerms() method, where a positional array is used instead of the required named-key array to disable class instantiation. Attackers with database write access can inject a serialized gadget chain into the permissions table columns processed on every authenticated page load to write arbitrary files, such as PHP webshells, to web-accessible paths.
+
+### POC
+
+#### Reference
+- https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+
+#### Github
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a path traversal vulnerability in the style archi
 - https://github.com/BomboBombone/CVE-2026-74239

 #### Github
- https://github.com/BomboBombone/CVE-2026-74239
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-74925](https://www.cve.org/CVERecord?id=CVE-2026-74925)
+**MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator**
+![](https://img.shields.io/static/v1?label=Product&message=MultiVendorX&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.0.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%20Improper%20Privilege%20Management&color=brightgreen)
+
+### Description
+
+The MultiVendorX  WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role administrator-level capabilities and take over the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/04d64797-751a-4cdd-a37d-70afbad5d784/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -1,8 +1,9 @@
 ### [CVE-2026-78071](https://www.cve.org/CVERecord?id=CVE-2026-78071)
-**Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0 - 10.11.2**
+**Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0**
 ![](https://img.shields.io/static/v1?label=Vendor&message=digital-peak.com&color=blue)
 ![](https://img.shields.io/static/v1?label=Product&message=DP%20Calendar%20extension%20for%20Joomla&color=blue)
-![](https://img.shields.io/static/v1?label=Version&message=7.0.0-10.11.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=7.0.0-8.19.5&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=9.0.0-10.12.0&color=brightgreen)
 ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20%28%27Cross-site%20Scripting%27%29&color=brightgreen)

 ### Description
@@ -0,0 +1,17 @@
+### [CVE-2026-82305](https://www.cve.org/CVERecord?id=CVE-2026-82305)
+**YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title**
+![](https://img.shields.io/static/v1?label=Product&message=YITH%20WooCommerce%20Wishlist&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brightgreen)
+
+### Description
+
+The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-82533](https://www.cve.org/CVERecord?id=CVE-2026-82533)
+**DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing**
+![](https://img.shields.io/static/v1?label=Vendor&message=DeepSeek&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=DeepSeek%20Harness&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Reliance%20on%20Untrusted%20Inputs%20in%20a%20Security%20Decision&color=brightgreen)
+
+### Description
+
+DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a confined tool-executed process can reach the loopback API without any port exposure and use it to escape its own OS sandbox, escalate to unconfined execution, and disable the approval prompt. When the port is externally reachable via tunnel, SSH forward, or reverse proxy, a remote attacker can exploit the same flaw to create sessions, execute arbitrary commands, and exfiltrate stored conversation transcripts without credentials.
+
+### POC
+
+#### Reference
+- https://www.ox.security/blog/cve-2026-82533-deepseek-harness-ai-agent-sandbox-escape/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-83545](https://www.cve.org/CVERecord?id=CVE-2026-83545)
+**CoolClock < 4.3.8 - Contributor+ Stored XSS via Custom Skin JSON**
+![](https://img.shields.io/static/v1?label=Product&message=CoolClock&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes when the content is viewed.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/d331d834-08f7-46e2-859a-7b797213ad0b/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-83546](https://www.cve.org/CVERecord?id=CVE-2026-83546)
+**CoolClock < 4.3.8 - Contributor+ Stored XSS via Skin Class Attribute**
+![](https://img.shields.io/static/v1?label=Product&message=CoolClock&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/57fcdde1-1723-42e1-a6d0-16e63a532ac7/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-85677](https://www.cve.org/CVERecord?id=CVE-2026-85677)
+**Gutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content**
+![](https://img.shields.io/static/v1?label=Product&message=Gutenverse%20News&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Gutenverse News  WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript that will execute in the browser of any administrator who reviews the comment queue, and of any visitor to the post once the comment is approved.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/80a2cc9f-4242-4ffb-a781-cffdceb84ab3/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-85678](https://www.cve.org/CVERecord?id=CVE-2026-85678)
+**AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript**
+![](https://img.shields.io/static/v1?label=Product&message=AI%20Builder&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.4.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The AI Builder  WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views the post, including the editor or administrator who reviews it.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/d81ebdaa-4a06-48df-a471-c11ea7dc62f8/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86779](https://www.cve.org/CVERecord?id=CVE-2026-86779)
+**Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart**
+![](https://img.shields.io/static/v1?label=Product&message=Visualizer&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The Visualizer  WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above to permanently delete any chart on the site, including charts created by other users such as administrators.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/12a30aca-9b78-4ee8-9cf0-29e579ea5a0b/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86780](https://www.cve.org/CVERecord?id=CVE-2026-86780)
+**Featured Image with URL < 1.0.6 - Contributor+ Stored XSS via Image Alt Text**
+![](https://img.shields.io/static/v1?label=Product&message=Featured%20Image%20with%20URL&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected post, including higher-privileged users such as Editors and Administrators.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/7c5795a2-e0bd-41b6-a3a9-d80ff66799d6/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86781](https://www.cve.org/CVERecord?id=CVE-2026-86781)
+**SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure**
+![](https://img.shields.io/static/v1?label=Product&message=SSL%20Zen%20%E2%80%94%20SSL%20Certificate%20Installer%20%26%20HTTPS%20Redirects&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brightgreen)
+
+### Description
+
+The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site's TLS private key, certificates, and diagnostic logs.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/858977f8-8ea3-4d3d-8967-31567f6786ff/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86782](https://www.cve.org/CVERecord?id=CVE-2026-86782)
+**Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR**
+![](https://img.shields.io/static/v1?label=Product&message=Visualizer&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.0.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brightgreen)
+
+### Description
+
+The Visualizer  WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/ad9909b8-c302-4cb5-bbe7-bff89c64b6ce/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86812](https://www.cve.org/CVERecord?id=CVE-2026-86812)
+**WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API**
+![](https://img.shields.io/static/v1?label=Product&message=WPCafe&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=3.0.10&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brightgreen)
+
+### Description
+
+The WPCafe  WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash, any order.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/fe8d76b2-6d57-49cc-9927-5231e1a26a41/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86815](https://www.cve.org/CVERecord?id=CVE-2026-86815)
+**BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes**
+![](https://img.shields.io/static/v1?label=Product&message=BackWPup&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.2.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The BackWPup  WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup  WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and run backup jobs and exfiltrate a full database backup to an attacker-controlled destination.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/fa66c458-f14f-47bc-87e6-b603200ef8e9/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-88898](https://www.cve.org/CVERecord?id=CVE-2026-88898)
+**AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint**
+![](https://img.shields.io/static/v1?label=Vendor&message=AppFlowy-IO&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=AppFlowy-Cloud&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0.7.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Missing%20Authorization&color=brightgreen)
+
+### Description
+
+AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint path, allowing authenticated users to publish content into other tenants' namespaces. Attackers can write published views with attacker-controlled title, body and metadata into victim workspaces to deface public pages or host phishing content on trusted URLs.
+
+### POC
+
+#### Reference
+- https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3
+
+#### Github
+No PoCs found on GitHub currently.
@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
-     role="img" aria-label="PoC Index, 82,703 CVEs with public proof-of-concept exploits">
+     role="img" aria-label="PoC Index, 82,728 CVEs with public proof-of-concept exploits">
  <clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
  <rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
  <g clip-path="url(#card)" opacity="0.6"><g>
@@ -19,10 +19,10 @@
  <text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>

  <text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">171,573</text>
+        fill="#e6edf3" letter-spacing="-0.5">171,598</text>
  <text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
        fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">82,703</text>
+        fill="#2f81f7" letter-spacing="-0.5">82,728</text>
  <text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
        fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
        fill="#f85149" letter-spacing="-0.5">1,189</text>
@@ -20,10 +20,10 @@

  <rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
  <text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">171,573</text>
+        fill="#e6edf3" letter-spacing="-0.5">171,598</text>
  <text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
        fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">82,703</text>
+        fill="#2f81f7" letter-spacing="-0.5">82,728</text>
  <text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
        fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
        fill="#f85149" letter-spacing="-0.5">1,189</text>
@@ -1,5 +1,5 @@
 {
 "kev": 1189,
- "total_cves": 171573,
- "with_pocs": 82703
+ "total_cves": 171598,
+ "with_pocs": 82728
 }
@@ -1 +1 @@
-{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
+{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
@@ -26638,9 +26638,7 @@ CVE-2026-73570 - https://github.com/hainhc/CVE-2026-73570
 CVE-2026-73312 - https://github.com/BomboBombone/CVE-2026-73312
 CVE-2026-73318 - https://github.com/BomboBombone/CVE-2026-73318
 CVE-2018-14847 - https://github.com/BasuCert/WinboxPoC
-CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240
 CVE-2020-11108 - https://github.com/Frichetten/CVE-2020-11108-PoC
-CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
 CVE-2026-34159 - https://github.com/TeamN4C/SG-2026-0021
 CVE-2026-43284 - https://github.com/TeamN4C/SG-2026-0024
 CVE-2026-51376 - https://github.com/BARGHEST-ngo/CVE-2026-51376
@@ -26664,3 +26662,11 @@ CVE-2026-87491 - https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-850
 CVE-2026-18351 - https://github.com/ChiefYoru/Exploit-CVE-2026-18351
 CVE-2026-18351 - https://github.com/JohenLastGen-JLG/CVE-2026-18351
 CVE-2026-82222 - https://github.com/sajjadsiam/CVE-2026-82222-PoC
+CVE-2011-2523 - https://github.com/mohammadibrahimop/cyber-kill-chain
+CVE-2011-2523 - https://github.com/shivkumaarr/Cyart_Tech_Task
+CVE-2012-10037 - https://github.com/kyaw-tun/red-team-capstone
+CVE-2021-29441 - https://github.com/galact-byte/dddd-next
+CVE-2022-0847 - https://github.com/vudangducminh/CVE-2022-0847
+CVE-2022-24637 - https://github.com/PrinceAikinsBaidoo/CVE-2022-24637
+CVE-2024-37890 - https://github.com/RazdoruNET/OMG_KILLER
+CVE-2026-26211 - https://github.com/LindHunt/CVE-2026-26211
@@ -38070,3 +38070,28 @@ CVE-2026-87928 - https://github.com/EviL0rd/maxsite-cve2/blob/main/2026.09.08-ma
 CVE-2026-87929 - https://github.com/EviL0rd/maxsite-cve4/blob/main/2026.09.08-maxsite-cms-hardcoded-session-key-auth-bypass.md
 CVE-2026-87930 - https://github.com/EviL0rd/maxsite-cve6/blob/main/2026.09.08-maxsite-cms-unsafe-unserialize-object-injection.md
 CVE-2026-87933 - https://github.com/DaveGamble/cJSON/issues/1060
+CVE-2025-15695 - https://wpscan.com/vulnerability/423b6be0-e0f2-42c0-8b40-4015e4a0e670/
+CVE-2026-14559 - https://wpscan.com/vulnerability/90cbbed5-9662-4405-88b8-bd55854dccdf/
+CVE-2026-14560 - https://wpscan.com/vulnerability/aba51906-91dc-4e75-ad44-373fe128deee/
+CVE-2026-14562 - https://wpscan.com/vulnerability/890f55f9-0bd0-4816-a666-a735b41ce5c7/
+CVE-2026-14563 - https://wpscan.com/vulnerability/7c7ad196-dff3-485f-9a50-8705bd796fb3/
+CVE-2026-14565 - https://wpscan.com/vulnerability/613e5421-9da5-408a-b35d-b0def567e8db/
+CVE-2026-14566 - https://wpscan.com/vulnerability/01094477-a9ad-41d9-9acd-f6ed37e6e605/
+CVE-2026-73693 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-73694 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-73698 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-73699 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-74925 - https://wpscan.com/vulnerability/04d64797-751a-4cdd-a37d-70afbad5d784/
+CVE-2026-82305 - https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/
+CVE-2026-82533 - https://www.ox.security/blog/cve-2026-82533-deepseek-harness-ai-agent-sandbox-escape/
+CVE-2026-83545 - https://wpscan.com/vulnerability/d331d834-08f7-46e2-859a-7b797213ad0b/
+CVE-2026-83546 - https://wpscan.com/vulnerability/57fcdde1-1723-42e1-a6d0-16e63a532ac7/
+CVE-2026-85677 - https://wpscan.com/vulnerability/80a2cc9f-4242-4ffb-a781-cffdceb84ab3/
+CVE-2026-85678 - https://wpscan.com/vulnerability/d81ebdaa-4a06-48df-a471-c11ea7dc62f8/
+CVE-2026-86779 - https://wpscan.com/vulnerability/12a30aca-9b78-4ee8-9cf0-29e579ea5a0b/
+CVE-2026-86780 - https://wpscan.com/vulnerability/7c5795a2-e0bd-41b6-a3a9-d80ff66799d6/
+CVE-2026-86781 - https://wpscan.com/vulnerability/858977f8-8ea3-4d3d-8967-31567f6786ff/
+CVE-2026-86782 - https://wpscan.com/vulnerability/ad9909b8-c302-4cb5-bbe7-bff89c64b6ce/
+CVE-2026-86812 - https://wpscan.com/vulnerability/fe8d76b2-6d57-49cc-9927-5231e1a26a41/
+CVE-2026-86815 - https://wpscan.com/vulnerability/fa66c458-f14f-47bc-87e6-b603200ef8e9/
+CVE-2026-88898 - https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3
@@ -117059,3 +117059,28 @@ CVE-2026-56341 - https://github.com/advisories/GHSA-wprj-9cvc-5w37
 CVE-2026-88000 - https://github.com/advisories/GHSA-3cgp-3cqx-j8w2
 CVE-2026-88001 - https://github.com/advisories/GHSA-5x7x-4c3c-qf5w
 CVE-2026-88002 - https://github.com/advisories/GHSA-jqhh-cjmq-vmv6
+CVE-2025-15695 - https://wpscan.com/vulnerability/423b6be0-e0f2-42c0-8b40-4015e4a0e670/
+CVE-2026-14559 - https://wpscan.com/vulnerability/90cbbed5-9662-4405-88b8-bd55854dccdf/
+CVE-2026-14560 - https://wpscan.com/vulnerability/aba51906-91dc-4e75-ad44-373fe128deee/
+CVE-2026-14562 - https://wpscan.com/vulnerability/890f55f9-0bd0-4816-a666-a735b41ce5c7/
+CVE-2026-14563 - https://wpscan.com/vulnerability/7c7ad196-dff3-485f-9a50-8705bd796fb3/
+CVE-2026-14565 - https://wpscan.com/vulnerability/613e5421-9da5-408a-b35d-b0def567e8db/
+CVE-2026-14566 - https://wpscan.com/vulnerability/01094477-a9ad-41d9-9acd-f6ed37e6e605/
+CVE-2026-73693 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-73694 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-73698 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-73699 - https://vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce
+CVE-2026-74925 - https://wpscan.com/vulnerability/04d64797-751a-4cdd-a37d-70afbad5d784/
+CVE-2026-82305 - https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/
+CVE-2026-82533 - https://www.ox.security/blog/cve-2026-82533-deepseek-harness-ai-agent-sandbox-escape/
+CVE-2026-83545 - https://wpscan.com/vulnerability/d331d834-08f7-46e2-859a-7b797213ad0b/
+CVE-2026-83546 - https://wpscan.com/vulnerability/57fcdde1-1723-42e1-a6d0-16e63a532ac7/
+CVE-2026-85677 - https://wpscan.com/vulnerability/80a2cc9f-4242-4ffb-a781-cffdceb84ab3/
+CVE-2026-85678 - https://wpscan.com/vulnerability/d81ebdaa-4a06-48df-a471-c11ea7dc62f8/
+CVE-2026-86779 - https://wpscan.com/vulnerability/12a30aca-9b78-4ee8-9cf0-29e579ea5a0b/
+CVE-2026-86780 - https://wpscan.com/vulnerability/7c5795a2-e0bd-41b6-a3a9-d80ff66799d6/
+CVE-2026-86781 - https://wpscan.com/vulnerability/858977f8-8ea3-4d3d-8967-31567f6786ff/
+CVE-2026-86782 - https://wpscan.com/vulnerability/ad9909b8-c302-4cb5-bbe7-bff89c64b6ce/
+CVE-2026-86812 - https://wpscan.com/vulnerability/fe8d76b2-6d57-49cc-9927-5231e1a26a41/
+CVE-2026-86815 - https://wpscan.com/vulnerability/fa66c458-f14f-47bc-87e6-b603200ef8e9/
+CVE-2026-88898 - https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3