mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Update CVE PoCs 2026-09-02
This commit is contained in:
CVE-BOT committed
1 parent
438f5d533c
commit
a124d64067
83 files changed
+1162
-21
No files matched your search
@@ -1,3 +1,3 @@
|
||||
{
|
||||
"cvelist_fetch_time": "2026-09-01T17:33:21.880Z"
|
||||
"cvelist_fetch_time": "2026-09-02T06:58:23.064Z"
|
||||
}
|
||||
@@ -1,8 +1,8 @@
|
||||
<div align="center">
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=170947-82410-1181" alt="PoC Index" width="100%"></a>
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171004-82467-1181" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
|
||||
@@ -20,6 +20,7 @@ Apache Shiro before 1.2.5, when a cipher key has not been configured for the "re
|
||||
- https://github.com/m3terpreter/CVE-2016-4437
|
||||
- https://github.com/pizza-power/CVE-2016-4437
|
||||
- https://github.com/xk-mt/CVE-2016-4437
|
||||
- https://github.com/N0tOd2y/PenForge
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4437.yaml
|
||||
|
||||
@@ -15,6 +15,7 @@ parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0
|
||||
#### Github
|
||||
- https://github.com/h0cksr/Fastjson--CVE-2017-18349-
|
||||
- https://github.com/Dungsocool/CVE-2017-18349
|
||||
- https://github.com/N0tOd2y/PenForge
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18349.yaml
|
||||
@@ -17,5 +17,4 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor
|
||||
#### Github
|
||||
- https://github.com/FenrirSec/CVE-2018-17240_exploit
|
||||
- https://github.com/Xewdy444/Netgrave
|
||||
- https://github.com/BBge/CVE-2018-17240
|
||||
|
||||
@@ -33,6 +33,7 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
|
||||
- https://github.com/welove88888/CVE-2019-2725
|
||||
- https://github.com/zhusx110/cve-2019-2725
|
||||
- https://github.com/loursha/Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725
|
||||
- https://github.com/N0tOd2y/PenForge
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2725.yaml
|
||||
|
||||
@@ -29,4 +29,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/0xBlackash/CVE-2020-17103
|
||||
- https://github.com/AlexLinov/MiniPlasma-Runner
|
||||
- https://github.com/MaikCyberSec/Threat-Hunting-
|
||||
|
||||
@@ -464,6 +464,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
|
||||
- https://github.com/razureink/cve-2021-44228-log4shell_rce_reproduction
|
||||
- https://github.com/vutiendat323/CVE-2021-44228_Log4Shell
|
||||
- https://github.com/kwekre/poc
|
||||
- https://github.com/N0tOd2y/PenForge
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml
|
||||
|
||||
@@ -43,4 +43,5 @@ No PoCs from references.
|
||||
- https://github.com/onurkerembozkurt/fgt-cve-2023-27997-exploit
|
||||
- https://github.com/puckiestyle/cve-2023-27997
|
||||
- https://github.com/rio128128/CVE-2023-27997-POC
|
||||
- https://github.com/abraxas/Fortigate-SSL-VPN-Exploit-Kit
|
||||
|
||||
@@ -20,4 +20,5 @@ No PoCs from references.
|
||||
- https://github.com/passwa11/CVE-2023-4357-APT-Style-exploitation
|
||||
- https://github.com/sunu11/chrome-CVE-2023-4357
|
||||
- https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE
|
||||
- https://github.com/shihongsu/NetSec-CVE-2023-4357
|
||||
|
||||
@@ -30,5 +30,4 @@ A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables compon
|
||||
- https://github.com/vettrivel007/CVE-2024-1086
|
||||
- https://github.com/NGChuen/linux-kernel-bugs
|
||||
- https://github.com/eavil666/cve-poc-mapper
|
||||
- https://github.com/Notselwyn/CVE-2024-1086
|
||||
|
||||
@@ -33,4 +33,5 @@ No PoCs from references.
|
||||
- https://github.com/0x13-ByteZer0/CVE-2024-21762
|
||||
- https://github.com/CrackerCat/cve-2024-21762-poc
|
||||
- https://github.com/cleverg0d/CVEs
|
||||
- https://github.com/abraxas/Fortigate-SSL-VPN-Exploit-Kit
|
||||
|
||||
@@ -97,8 +97,6 @@ In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, w
|
||||
- https://github.com/razureink/cve-2024-4577-phpcgi_rce_reproduction
|
||||
- https://github.com/BLACK-ARCHIVERS/CVE-2024-4577
|
||||
- https://github.com/mrzero-cool/cve-poc-search
|
||||
- https://github.com/11whoami99/CVE-2024-4577
|
||||
- https://github.com/watchtowrlabs/CVE-2024-4577
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4577.yaml
|
||||
|
||||
@@ -112,7 +112,6 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
|
||||
- https://github.com/evilbotnet/ilovemalware
|
||||
- https://github.com/hackingyseguridad/ssha
|
||||
- https://github.com/jasonnorman66994-dot/sovereign-command-center
|
||||
- https://github.com/zgzhang/cve-2024-6387-poc
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52269
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15663](https://www.cve.org/CVERecord?id=CVE-2025-15663)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser of anyone (including an administrator) who views the slider.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/56dd063a-c097-4fed-83bc-99799b4a229d/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-15664](https://www.cve.org/CVERecord?id=CVE-2025-15664)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser of anyone (including an administrator) who views the slider.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/31bfd4c6-32e8-4790-b9a8-949fdaba9454/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-12526](https://www.cve.org/CVERecord?id=CVE-2026-12526)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the update-user action of its front-end Forms module; it only checks a capability when the submitted role is administrator or super_admin. On a site that exposes a publicly reachable front-end form whose user-update action targets an existing administrator (a fixed target, or one mapped to a visitor-submitted field) and maps the password to a visitor-submitted field, an unauthenticated visitor can overwrite that administrator's password and take over the account. The default target is the submitting user, so exploitation depends on the form being configured to target another account.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a4a9eab6-3c10-402c-a635-3ae275b12c1d/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-12865](https://www.cve.org/CVERecord?id=CVE-2026-12865)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Photo Gallery by 10Web WordPress plugin before 1.8.44 does not escape two request parameters before reflecting them into input-attribute values on its admin pages (one on the Shortcode page, one on the Galleries/Albums list page), so an unauthenticated attacker can craft a link that, when opened by a logged-in administrator (or, for the first sink, a contributor), executes arbitrary JavaScript in the victim's authenticated session via an auto-firing onfocus handler. The Galleries/Albums sink renders only when the site has more than 20 galleries/albums (the normal state of a populated install).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a78cc4ca-120e-4b6e-9285-34dcaa0bca77/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,70 @@
|
||||
### [CVE-2026-13753](https://www.cve.org/CVERecord?id=CVE-2026-13753)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/typedefabcd1234ntd/CVE-2026-13753-poc
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-14215](https://www.cve.org/CVERecord?id=CVE-2026-14215)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not require authentication or a valid request token before running the post-booking action chain, allowing an unauthenticated user to trigger booking notifications and integration callbacks for a booking by enumerating its identifier.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/1d4c8417-59e3-41ed-91c0-283133f6cc22/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-15232](https://www.cve.org/CVERecord?id=CVE-2026-15232)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MotoPress Appointment Booking WordPress plugin before 2.4.8 does not perform an authorization or ownership check when handling a user-supplied booking identifier on an unauthenticated endpoint, allowing unauthenticated attackers to permanently delete other users' reservations. This is an incomplete fix of CVE-2026-9180: the deletion remains reachable on sites using payment confirmation, confirmed through version 2.4.7.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b0ffa74d-a03a-4eed-95c7-579360990d7f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-16966](https://www.cve.org/CVERecord?id=CVE-2026-16966)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Solace Extra WordPress plugin before 1.7.0 does not perform any authorization or post-status checks in one of its AJAX actions, allowing unauthenticated visitors to read the content of non-published (draft, pending, private, and trashed) Site Builder parts that WordPress would otherwise not serve.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/44090198-8eb9-4799-aad0-841e80e70aab/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-16983](https://www.cve.org/CVERecord?id=CVE-2026-16983)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/30862f10-a2e6-4536-9a96-bbd8789b954f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-19116](https://www.cve.org/CVERecord?id=CVE-2026-19116)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead to remote code execution when a suitable gadget chain is present on the site.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/019d83bd-24d3-4575-9d0b-55f75fdb0bfa/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-19251](https://www.cve.org/CVERecord?id=CVE-2026-19251)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c840b8fc-3185-4eb9-a33c-1be4b0d2a6b5/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-19453](https://www.cve.org/CVERecord?id=CVE-2026-19453)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after the site owner restores or migrates the site.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/82792fbb-36b3-4a90-a7a3-ddb2573e62f2/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-19704](https://www.cve.org/CVERecord?id=CVE-2026-19704)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthenticated users to inject SQL and read comments they are not entitled to see, including comments awaiting moderation, comments marked as spam or trashed, and comments on private and draft posts.
|
||||
|
||||
The injected text reaches the query as grammar rather than as data and does not yield extraction of arbitrary data, so the confidentiality impact is the disclosed comment content rather than the database at large.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/cc9ab6ca-7ad3-44b7-941c-9302ff990e5d/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-19719](https://www.cve.org/CVERecord?id=CVE-2026-19719)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when a visitor interacts with the affected button.
|
||||
Exploitation requires the Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 to be running a non-default icon display configuration.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c2f7987b-8cac-4c02-97f7-b33bea5b5cc4/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-19723](https://www.cve.org/CVERecord?id=CVE-2026-19723)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with the affected button.
|
||||
Exploitation requires the Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 to be running a non-default icon display configuration.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d4ef9803-bcf8-4d3f-8a41-ea9b215dbafe/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -72,6 +72,7 @@ No PoCs from references.
|
||||
- https://github.com/Collinformatics/HTB-Orion
|
||||
- https://github.com/LKSTA/LKSDIKMEN-Cybersecurity-2026
|
||||
- https://github.com/ridpath/Terrminus-CVE-2026-2406
|
||||
- https://github.com/Ish3ng0m4/CVE-2026-24061-Telnetd
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml
|
||||
|
||||
@@ -40,6 +40,7 @@ No PoCs from references.
|
||||
- https://github.com/ahseven/CVE-2026-33017-PoC-Reverse-Shell
|
||||
- https://github.com/masterwok/PoC-CVE-2025-55182
|
||||
- https://github.com/Lopseg/cve-2026-33067
|
||||
- https://github.com/maxprog-svg/CVE-2026-33017
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33017.yaml
|
||||
|
||||
@@ -33,6 +33,7 @@ marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE
|
||||
- https://github.com/Nxploited/CVE-2026-39987
|
||||
- https://github.com/mki9/CVE-2026-39987_exploit
|
||||
- https://github.com/snehil00121/Public_CVEs_Exploit
|
||||
- https://github.com/Ghxstsec/CVE-2026-39987
|
||||
|
||||
#### Nuclei
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39987.yaml
|
||||
@@ -147,3 +147,4 @@ No PoCs from references.
|
||||
- https://github.com/d1667018881/myroot
|
||||
- https://github.com/hasan-khalil/root-acccess-lib
|
||||
- https://github.com/lkeld/CVE-2026-43499-poc
|
||||
- https://github.com/abdgalaxy36-code/rmgp-complete-handoff
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-74927](https://www.cve.org/CVERecord?id=CVE-2026-74927)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MultiVendorX WordPress plugin before 5.0.15 does not have proper authorisation controls on one of its REST API listing routes, allowing unauthenticated users to retrieve vendor contact and payout details, pending payout amounts, and administrative notes attached to store applications.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c81aa489-0663-40b7-b2ce-f4c8f2edd4b6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77764](https://www.cve.org/CVERecord?id=CVE-2026-77764)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscriber to award the configured gamification points, achievements and ranks to arbitrary users including administrators, and to accrue them without limit.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c272dadd-9fc9-402f-8712-51d16a271e4b/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77782](https://www.cve.org/CVERecord?id=CVE-2026-77782)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing unauthenticated users to read the content of password-protected posts.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/e7a81d62-3fc7-4212-bd77-c559a6065808/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77783](https://www.cve.org/CVERecord?id=CVE-2026-77783)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to disclose the schema and associated content of draft, pending, private, scheduled and password-protected posts.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c10db1c1-3af9-45ed-af83-ce95211d0251/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77784](https://www.cve.org/CVERecord?id=CVE-2026-77784)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing metadata, allowing users with the Author role and above to alter that metadata on content, taxonomy terms and user profiles they do not own, and to remove other users' content from the site's sitemap and search engine index.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/7a6ad8c5-eb7e-4201-8597-479e77863985/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77785](https://www.cve.org/CVERecord?id=CVE-2026-77785)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its content and SEO metadata, allowing users with the Author role and above to read the title, body and metadata of other users' non-public posts.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/7cf8aa8a-7ac2-4e70-a7af-3f23e4ac1824/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77787](https://www.cve.org/CVERecord?id=CVE-2026-77787)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit and to overwrite the titles of posts belonging to other users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/849a4859-e10e-49e6-9c38-265b902507b8/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77788](https://www.cve.org/CVERecord?id=CVE-2026-77788)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with the Author role and above to overwrite arbitrary post and user metadata, including that belonging to higher-privileged users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/c02511a0-9c8b-44cd-b25f-e95cf5f9fef3/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-77792](https://www.cve.org/CVERecord?id=CVE-2026-77792)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/16661d09-6f8f-4f87-93b9-67a2f8b728f7/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-78151](https://www.cve.org/CVERecord?id=CVE-2026-78151)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and integration settings, including those of unpublished forms.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/ae844713-444f-43bc-9e1e-78f46e1545c7/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-79621](https://www.cve.org/CVERecord?id=CVE-2026-79621)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store before including it in the product enquiry notification email sent to the site administrator, allowing unauthenticated attackers to inject arbitrary content into that email, which is delivered when an unrelated visitor later submits a product enquiry.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/9a4c12ff-80d8-400c-abfa-de557ead3b07/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-80467](https://www.cve.org/CVERecord?id=CVE-2026-80467)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, and its safeguard against privileged roles is incomplete, allowing unauthenticated visitors to register an account with elevated capabilities and then escalate it to administrator.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/929f243b-2f1c-4eca-88bc-03b1a86270ed/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81194](https://www.cve.org/CVERecord?id=CVE-2026-81194)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/727903d4-ce0f-4ab4-bbd4-c973091e0b8f/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81195](https://www.cve.org/CVERecord?id=CVE-2026-81195)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/513d2c6e-9b9e-432d-8106-47916252bd55/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81196](https://www.cve.org/CVERecord?id=CVE-2026-81196)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/d11acb84-6dd0-4229-ac30-dba3ad6b9614/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81197](https://www.cve.org/CVERecord?id=CVE-2026-81197)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished (draft, pending and private) courses.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/8738320c-eb44-46b9-b809-b5cb786cb3e4/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81198](https://www.cve.org/CVERecord?id=CVE-2026-81198)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other instructors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/424b3a47-78fe-4c95-a317-c1deaf2b7b0c/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81199](https://www.cve.org/CVERecord?id=CVE-2026-81199)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthenticated attackers to disclose the course counts, points, certificates, quiz and assignment totals of any registered user.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/8dd53f85-5d1b-4e0b-a0f5-8c65d89cefb5/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81426](https://www.cve.org/CVERecord?id=CVE-2026-81426)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/804efc9d-d2b4-46f0-a84f-0ff5fed7d3d6/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81427](https://www.cve.org/CVERecord?id=CVE-2026-81427)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and trigger the customer shipment notification email.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/f7fcf650-6e5e-4629-97ac-a76a5a0551db/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81428](https://www.cve.org/CVERecord?id=CVE-2026-81428)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing authenticated users with the vendor role to modify product variations belonging to other vendors, and to change the status and title of arbitrary posts, via IDOR.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/e573c233-ed24-40a3-a16a-c80317910cce/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81432](https://www.cve.org/CVERecord?id=CVE-2026-81432)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The JetStyleManager for Gutenberg WordPress plugin before 1.3.9 does not have CSRF protection on some of its AJAX actions, allowing attackers to make a logged-in user with the edit_posts capability (Contributor and above) delete or modify custom widget skins via a crafted request, provided they can trick the user into performing an action such as clicking a link.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/ac6c4bce-9783-43ee-9549-41cbb2c3e9ac/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81583](https://www.cve.org/CVERecord?id=CVE-2026-81583)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The My Login WordPress plugin before 7.2.0 does not enforce the network's registration setting when processing site signups on multisite installations, allowing users with a subscriber account, and unauthenticated users on some networks, to create new sites and be granted administrator over them.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/6ced93ee-5629-42a4-9103-44cf99265bd2/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81737](https://www.cve.org/CVERecord?id=CVE-2026-81737)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The FAQ Builder AYS WordPress plugin before 1.8.5 does not sanitize or escape content submitted by unauthenticated visitors before storing it and outputting it in an admin area page, and the escaping it does apply is undone by a subsequent decoding step, leading to Stored XSS which will execute in the context of a logged in administrator.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b8a97781-5c3b-4a89-845e-ee4eb60ea29c/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81807](https://www.cve.org/CVERecord?id=CVE-2026-81807)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject arbitrary HTML attributes into the page and run scripts in the browser of anyone viewing the chat, including administrators.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/7aceefd5-aa09-4828-b375-6a62997fa0c2/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-82182](https://www.cve.org/CVERecord?id=CVE-2026-82182)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query, allowing administrators to perform SQL injection attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/79e58b77-6da8-4569-8ed3-a1ff5ced0991/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-82183](https://www.cve.org/CVERecord?id=CVE-2026-82183)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/bc7c18f2-4e8c-47a3-a972-6162fd27aaca/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -14,3 +14,4 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/gabrielftanaka/CVE-2026-82221
|
||||
- https://github.com/gabrielftanaka/CVE-2026-82221-PoC
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-84059](https://www.cve.org/CVERecord?id=CVE-2026-84059)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://uvxbywu62qm.feishu.cn/wiki/KwSzwcCstioZqKk7PODcIsDAn4W?from=from_copylink
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-84287](https://www.cve.org/CVERecord?id=CVE-2026-84287)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/api_server.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-84288](https://www.cve.org/CVERecord?id=CVE-2026-84288)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acp_adapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-84289](https://www.cve.org/CVERecord?id=CVE-2026-84289)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools of the file tools/mcp_tool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84361](https://www.cve.org/CVERecord?id=CVE-2026-84361)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 client was installed and Composer installed the package from source through composer install or composer update, including --prefer-source, Composer\Util\Perforce passed the address to p4 without validation, causing p4 to run a local command with the privileges of the user or CI account. Packagist.org does not permit Perforce source metadata. This issue is fixed in versions 2.2.30 and 2.10.3.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/Saku0512/CVE-2026-84361-poc
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84423](https://www.cve.org/CVERecord?id=CVE-2026-84423)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor deleted the GitHub issue for this vulnerability without any explanation. Afterwards the vendor was contacted early about this disclosure via email but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/geo-chen/oss/blob/main/casdoor.md#finding-1-unauthenticated-arbitrary-file-upload-via-apiupload-resource
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-84425](https://www.cve.org/CVERecord?id=CVE-2026-84425)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browser_tool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/hackerguopeng/cve/tree/main/CowAgent_Browser_Evaluate_Wait_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,23 @@
|
||||
### [CVE-2026-84427](https://www.cve.org/CVERecord?id=CVE-2026-84427)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/outlookgp/CVE/tree/main/CowAgent_Bash_Output_Buffer_DoS_Report
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,29 @@
|
||||
### [CVE-2026-84430](https://www.cve.org/CVERecord?id=CVE-2026-84430)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update of the file app/home/controller/Index.php of the component edit_personal Endpoint. Such manipulation of the argument position_id leads to dynamically-determined object attributes. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 6.0.3 is able to resolve this issue. Upgrading the affected component is advised.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Angoddess/CVE/blob/main/README.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84431](https://www.cve.org/CVERecord?id=CVE-2026-84431)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in AirAsia MOVE App up to 12.47.1 on Android. This issue affects the function com.airasia.core.utils.RealPathUtil.getRealPath of the component com.airasia.mobile. Performing a manipulation of the argument _display_name results in path traversal. The attack requires a local approach. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://docs.google.com/document/d/19qRCn6NWF2UE4urLXMXKgW555PHhnQiw/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-84437](https://www.cve.org/CVERecord?id=CVE-2026-84437)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address_1 results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Leousum/VulnPoC/blob/main/OpenCart_4.1.0.3/customer-address-stored-xss.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-84438](https://www.cve.org/CVERecord?id=CVE-2026-84438)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/controller/account/edit.php of the component Autocomplete Workflow. This manipulation of the argument firstname causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Leousum/VulnPoC/blob/main/OpenCart_4.1.0.3/customer-name-stored-xss.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-84441](https://www.cve.org/CVERecord?id=CVE-2026-84441)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/unauthenticated_derivative_path_traversal.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-84442](https://www.cve.org/CVERecord?id=CVE-2026-84442)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component com.mapquest.android.ace. The manipulation leads to path traversal. An attack has to be approached locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://docs.google.com/document/d/1NqFuHvwq66hpOfxTWPKlUB1_eMwLvujH/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-84696](https://www.cve.org/CVERecord?id=CVE-2026-84696)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/trulycrisp/psychite
|
||||
- https://github.com/trulycrisp/disksec
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
+3
-3
@@ -1,5 +1,5 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
|
||||
role="img" aria-label="PoC Index, 82,410 CVEs with public proof-of-concept exploits">
|
||||
role="img" aria-label="PoC Index, 82,467 CVEs with public proof-of-concept exploits">
|
||||
<clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
|
||||
<rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
|
||||
<g clip-path="url(#card)" opacity="0.6"><g>
|
||||
@@ -19,10 +19,10 @@
|
||||
<text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
|
||||
|
||||
<text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">170,947</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,004</text>
|
||||
<text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,410</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,467</text>
|
||||
<text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,181</text>
|
||||
|
||||
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
@@ -20,10 +20,10 @@
|
||||
|
||||
<rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
|
||||
<text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">170,947</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,004</text>
|
||||
<text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,410</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,467</text>
|
||||
<text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,181</text>
|
||||
|
||||
|
Before Width: | Height: | Size: 2.7 KiB After Width: | Height: | Size: 2.7 KiB |
+2
-2
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"kev": 1181,
|
||||
"total_cves": 170947,
|
||||
"with_pocs": 82410
|
||||
"total_cves": 171004,
|
||||
"with_pocs": 82467
|
||||
}
|
||||
@@ -1 +1 @@
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
+15
-5
@@ -3562,7 +3562,6 @@ CVE-2018-17182 - https://github.com/likekabin/CVE-2018-17182
|
||||
CVE-2018-17182 - https://github.com/likescam/CVE-2018-17182
|
||||
CVE-2018-17182 - https://github.com/likescam/vmacache_CVE-2018-17182
|
||||
CVE-2018-17207 - https://github.com/cved-sources/cve-2018-17207
|
||||
CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240
|
||||
CVE-2018-17240 - https://github.com/Xewdy444/Netgrave
|
||||
CVE-2018-17246 - https://github.com/mpgn/CVE-2018-17246
|
||||
CVE-2018-17254 - https://github.com/MataKucing-OFC/CVE-2018-17254
|
||||
@@ -26829,8 +26828,19 @@ CVE-2024-55591 - https://github.com/uLl0a/cve-2024-55591-poc
|
||||
CVE-2026-82221 - https://github.com/gabrielftanaka/CVE-2026-82221
|
||||
CVE-2019-5736 - https://github.com/Frichetten/CVE-2019-5736-PoC
|
||||
CVE-2019-5736 - https://github.com/q3k/cve-2019-5736-poc
|
||||
CVE-2024-1086 - https://github.com/Notselwyn/CVE-2024-1086
|
||||
CVE-2024-4577 - https://github.com/11whoami99/CVE-2024-4577
|
||||
CVE-2024-4577 - https://github.com/watchtowrlabs/CVE-2024-4577
|
||||
CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
|
||||
CVE-2026-75604 - https://github.com/rafabd1/CVE-2026-75604-poc
|
||||
CVE-2016-4437 - https://github.com/N0tOd2y/PenForge
|
||||
CVE-2017-18349 - https://github.com/N0tOd2y/PenForge
|
||||
CVE-2019-2725 - https://github.com/N0tOd2y/PenForge
|
||||
CVE-2020-17103 - https://github.com/MaikCyberSec/Threat-Hunting-
|
||||
CVE-2021-44228 - https://github.com/N0tOd2y/PenForge
|
||||
CVE-2023-27997 - https://github.com/abraxas/Fortigate-SSL-VPN-Exploit-Kit
|
||||
CVE-2023-4357 - https://github.com/shihongsu/NetSec-CVE-2023-4357
|
||||
CVE-2024-21762 - https://github.com/abraxas/Fortigate-SSL-VPN-Exploit-Kit
|
||||
CVE-2026-13753 - https://github.com/typedefabcd1234ntd/CVE-2026-13753-poc
|
||||
CVE-2026-24061 - https://github.com/Ish3ng0m4/CVE-2026-24061-Telnetd
|
||||
CVE-2026-33017 - https://github.com/maxprog-svg/CVE-2026-33017
|
||||
CVE-2026-39987 - https://github.com/Ghxstsec/CVE-2026-39987
|
||||
CVE-2026-43499 - https://github.com/abdgalaxy36-code/rmgp-complete-handoff
|
||||
CVE-2026-82221 - https://github.com/gabrielftanaka/CVE-2026-82221-PoC
|
||||
CVE-2026-84361 - https://github.com/Saku0512/CVE-2026-84361-poc
|
||||
@@ -37649,3 +37649,59 @@ CVE-2026-9833 - https://wpscan.com/vulnerability/75792c33-2d9d-46db-a98c-00ec409
|
||||
CVE-2026-83772 - https://uvxbywu62qm.feishu.cn/wiki/ERgywyUVfiUM2lkfVLwc1swknXg?from=from_copylink
|
||||
CVE-2026-84111 - https://github.com/LittleRedBean/CVE/issues/1
|
||||
CVE-2026-84153 - https://github.com/jennfong2002-png/CVE/issues/1
|
||||
CVE-2025-15663 - https://wpscan.com/vulnerability/56dd063a-c097-4fed-83bc-99799b4a229d/
|
||||
CVE-2025-15664 - https://wpscan.com/vulnerability/31bfd4c6-32e8-4790-b9a8-949fdaba9454/
|
||||
CVE-2026-12526 - https://wpscan.com/vulnerability/a4a9eab6-3c10-402c-a635-3ae275b12c1d/
|
||||
CVE-2026-12865 - https://wpscan.com/vulnerability/a78cc4ca-120e-4b6e-9285-34dcaa0bca77/
|
||||
CVE-2026-14215 - https://wpscan.com/vulnerability/1d4c8417-59e3-41ed-91c0-283133f6cc22/
|
||||
CVE-2026-15232 - https://wpscan.com/vulnerability/b0ffa74d-a03a-4eed-95c7-579360990d7f/
|
||||
CVE-2026-16966 - https://wpscan.com/vulnerability/44090198-8eb9-4799-aad0-841e80e70aab/
|
||||
CVE-2026-16983 - https://wpscan.com/vulnerability/30862f10-a2e6-4536-9a96-bbd8789b954f/
|
||||
CVE-2026-19116 - https://wpscan.com/vulnerability/019d83bd-24d3-4575-9d0b-55f75fdb0bfa/
|
||||
CVE-2026-19251 - https://wpscan.com/vulnerability/c840b8fc-3185-4eb9-a33c-1be4b0d2a6b5/
|
||||
CVE-2026-19453 - https://wpscan.com/vulnerability/82792fbb-36b3-4a90-a7a3-ddb2573e62f2/
|
||||
CVE-2026-19704 - https://wpscan.com/vulnerability/cc9ab6ca-7ad3-44b7-941c-9302ff990e5d/
|
||||
CVE-2026-19719 - https://wpscan.com/vulnerability/c2f7987b-8cac-4c02-97f7-b33bea5b5cc4/
|
||||
CVE-2026-19723 - https://wpscan.com/vulnerability/d4ef9803-bcf8-4d3f-8a41-ea9b215dbafe/
|
||||
CVE-2026-74927 - https://wpscan.com/vulnerability/c81aa489-0663-40b7-b2ce-f4c8f2edd4b6/
|
||||
CVE-2026-77764 - https://wpscan.com/vulnerability/c272dadd-9fc9-402f-8712-51d16a271e4b/
|
||||
CVE-2026-77782 - https://wpscan.com/vulnerability/e7a81d62-3fc7-4212-bd77-c559a6065808/
|
||||
CVE-2026-77783 - https://wpscan.com/vulnerability/c10db1c1-3af9-45ed-af83-ce95211d0251/
|
||||
CVE-2026-77784 - https://wpscan.com/vulnerability/7a6ad8c5-eb7e-4201-8597-479e77863985/
|
||||
CVE-2026-77785 - https://wpscan.com/vulnerability/7cf8aa8a-7ac2-4e70-a7af-3f23e4ac1824/
|
||||
CVE-2026-77787 - https://wpscan.com/vulnerability/849a4859-e10e-49e6-9c38-265b902507b8/
|
||||
CVE-2026-77788 - https://wpscan.com/vulnerability/c02511a0-9c8b-44cd-b25f-e95cf5f9fef3/
|
||||
CVE-2026-77792 - https://wpscan.com/vulnerability/16661d09-6f8f-4f87-93b9-67a2f8b728f7/
|
||||
CVE-2026-78151 - https://wpscan.com/vulnerability/ae844713-444f-43bc-9e1e-78f46e1545c7/
|
||||
CVE-2026-79621 - https://wpscan.com/vulnerability/9a4c12ff-80d8-400c-abfa-de557ead3b07/
|
||||
CVE-2026-80467 - https://wpscan.com/vulnerability/929f243b-2f1c-4eca-88bc-03b1a86270ed/
|
||||
CVE-2026-81194 - https://wpscan.com/vulnerability/727903d4-ce0f-4ab4-bbd4-c973091e0b8f/
|
||||
CVE-2026-81195 - https://wpscan.com/vulnerability/513d2c6e-9b9e-432d-8106-47916252bd55/
|
||||
CVE-2026-81196 - https://wpscan.com/vulnerability/d11acb84-6dd0-4229-ac30-dba3ad6b9614/
|
||||
CVE-2026-81197 - https://wpscan.com/vulnerability/8738320c-eb44-46b9-b809-b5cb786cb3e4/
|
||||
CVE-2026-81198 - https://wpscan.com/vulnerability/424b3a47-78fe-4c95-a317-c1deaf2b7b0c/
|
||||
CVE-2026-81199 - https://wpscan.com/vulnerability/8dd53f85-5d1b-4e0b-a0f5-8c65d89cefb5/
|
||||
CVE-2026-81426 - https://wpscan.com/vulnerability/804efc9d-d2b4-46f0-a84f-0ff5fed7d3d6/
|
||||
CVE-2026-81427 - https://wpscan.com/vulnerability/f7fcf650-6e5e-4629-97ac-a76a5a0551db/
|
||||
CVE-2026-81428 - https://wpscan.com/vulnerability/e573c233-ed24-40a3-a16a-c80317910cce/
|
||||
CVE-2026-81432 - https://wpscan.com/vulnerability/ac6c4bce-9783-43ee-9549-41cbb2c3e9ac/
|
||||
CVE-2026-81583 - https://wpscan.com/vulnerability/6ced93ee-5629-42a4-9103-44cf99265bd2/
|
||||
CVE-2026-81737 - https://wpscan.com/vulnerability/b8a97781-5c3b-4a89-845e-ee4eb60ea29c/
|
||||
CVE-2026-81807 - https://wpscan.com/vulnerability/7aceefd5-aa09-4828-b375-6a62997fa0c2/
|
||||
CVE-2026-82182 - https://wpscan.com/vulnerability/79e58b77-6da8-4569-8ed3-a1ff5ced0991/
|
||||
CVE-2026-82183 - https://wpscan.com/vulnerability/bc7c18f2-4e8c-47a3-a972-6162fd27aaca/
|
||||
CVE-2026-84059 - https://uvxbywu62qm.feishu.cn/wiki/KwSzwcCstioZqKk7PODcIsDAn4W?from=from_copylink
|
||||
CVE-2026-84287 - https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report
|
||||
CVE-2026-84288 - https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report
|
||||
CVE-2026-84289 - https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md
|
||||
CVE-2026-84423 - https://github.com/geo-chen/oss/blob/main/casdoor.md#finding-1-unauthenticated-arbitrary-file-upload-via-apiupload-resource
|
||||
CVE-2026-84425 - https://github.com/hackerguopeng/cve/tree/main/CowAgent_Browser_Evaluate_Wait_DoS_Report
|
||||
CVE-2026-84427 - https://github.com/outlookgp/CVE/tree/main/CowAgent_Bash_Output_Buffer_DoS_Report
|
||||
CVE-2026-84430 - https://github.com/Angoddess/CVE/blob/main/README.md
|
||||
CVE-2026-84431 - https://docs.google.com/document/d/19qRCn6NWF2UE4urLXMXKgW555PHhnQiw/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
CVE-2026-84437 - https://github.com/Leousum/VulnPoC/blob/main/OpenCart_4.1.0.3/customer-address-stored-xss.md
|
||||
CVE-2026-84438 - https://github.com/Leousum/VulnPoC/blob/main/OpenCart_4.1.0.3/customer-name-stored-xss.md
|
||||
CVE-2026-84441 - https://github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/unauthenticated_derivative_path_traversal.md
|
||||
CVE-2026-84442 - https://docs.google.com/document/d/1NqFuHvwq66hpOfxTWPKlUB1_eMwLvujH/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/disksec
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/psychite
|
||||
@@ -116778,3 +116778,59 @@ CVE-2026-8467 - https://github.com/advisories/GHSA-55hg-8qxv-qj4p
|
||||
CVE-2026-8723 - https://github.com/advisories/GHSA-q8mj-m7cp-5q26
|
||||
CVE-2026-9769 - https://github.com/advisories/GHSA-v7cf-c9rm-wm3j
|
||||
CVE-2026-84371 - https://github.com/advisories/GHSA-g8qq-57p8-ggw5
|
||||
CVE-2025-15663 - https://wpscan.com/vulnerability/56dd063a-c097-4fed-83bc-99799b4a229d/
|
||||
CVE-2025-15664 - https://wpscan.com/vulnerability/31bfd4c6-32e8-4790-b9a8-949fdaba9454/
|
||||
CVE-2026-12526 - https://wpscan.com/vulnerability/a4a9eab6-3c10-402c-a635-3ae275b12c1d/
|
||||
CVE-2026-12865 - https://wpscan.com/vulnerability/a78cc4ca-120e-4b6e-9285-34dcaa0bca77/
|
||||
CVE-2026-14215 - https://wpscan.com/vulnerability/1d4c8417-59e3-41ed-91c0-283133f6cc22/
|
||||
CVE-2026-15232 - https://wpscan.com/vulnerability/b0ffa74d-a03a-4eed-95c7-579360990d7f/
|
||||
CVE-2026-16966 - https://wpscan.com/vulnerability/44090198-8eb9-4799-aad0-841e80e70aab/
|
||||
CVE-2026-16983 - https://wpscan.com/vulnerability/30862f10-a2e6-4536-9a96-bbd8789b954f/
|
||||
CVE-2026-19116 - https://wpscan.com/vulnerability/019d83bd-24d3-4575-9d0b-55f75fdb0bfa/
|
||||
CVE-2026-19251 - https://wpscan.com/vulnerability/c840b8fc-3185-4eb9-a33c-1be4b0d2a6b5/
|
||||
CVE-2026-19453 - https://wpscan.com/vulnerability/82792fbb-36b3-4a90-a7a3-ddb2573e62f2/
|
||||
CVE-2026-19704 - https://wpscan.com/vulnerability/cc9ab6ca-7ad3-44b7-941c-9302ff990e5d/
|
||||
CVE-2026-19719 - https://wpscan.com/vulnerability/c2f7987b-8cac-4c02-97f7-b33bea5b5cc4/
|
||||
CVE-2026-19723 - https://wpscan.com/vulnerability/d4ef9803-bcf8-4d3f-8a41-ea9b215dbafe/
|
||||
CVE-2026-74927 - https://wpscan.com/vulnerability/c81aa489-0663-40b7-b2ce-f4c8f2edd4b6/
|
||||
CVE-2026-77764 - https://wpscan.com/vulnerability/c272dadd-9fc9-402f-8712-51d16a271e4b/
|
||||
CVE-2026-77782 - https://wpscan.com/vulnerability/e7a81d62-3fc7-4212-bd77-c559a6065808/
|
||||
CVE-2026-77783 - https://wpscan.com/vulnerability/c10db1c1-3af9-45ed-af83-ce95211d0251/
|
||||
CVE-2026-77784 - https://wpscan.com/vulnerability/7a6ad8c5-eb7e-4201-8597-479e77863985/
|
||||
CVE-2026-77785 - https://wpscan.com/vulnerability/7cf8aa8a-7ac2-4e70-a7af-3f23e4ac1824/
|
||||
CVE-2026-77787 - https://wpscan.com/vulnerability/849a4859-e10e-49e6-9c38-265b902507b8/
|
||||
CVE-2026-77788 - https://wpscan.com/vulnerability/c02511a0-9c8b-44cd-b25f-e95cf5f9fef3/
|
||||
CVE-2026-77792 - https://wpscan.com/vulnerability/16661d09-6f8f-4f87-93b9-67a2f8b728f7/
|
||||
CVE-2026-78151 - https://wpscan.com/vulnerability/ae844713-444f-43bc-9e1e-78f46e1545c7/
|
||||
CVE-2026-79621 - https://wpscan.com/vulnerability/9a4c12ff-80d8-400c-abfa-de557ead3b07/
|
||||
CVE-2026-80467 - https://wpscan.com/vulnerability/929f243b-2f1c-4eca-88bc-03b1a86270ed/
|
||||
CVE-2026-81194 - https://wpscan.com/vulnerability/727903d4-ce0f-4ab4-bbd4-c973091e0b8f/
|
||||
CVE-2026-81195 - https://wpscan.com/vulnerability/513d2c6e-9b9e-432d-8106-47916252bd55/
|
||||
CVE-2026-81196 - https://wpscan.com/vulnerability/d11acb84-6dd0-4229-ac30-dba3ad6b9614/
|
||||
CVE-2026-81197 - https://wpscan.com/vulnerability/8738320c-eb44-46b9-b809-b5cb786cb3e4/
|
||||
CVE-2026-81198 - https://wpscan.com/vulnerability/424b3a47-78fe-4c95-a317-c1deaf2b7b0c/
|
||||
CVE-2026-81199 - https://wpscan.com/vulnerability/8dd53f85-5d1b-4e0b-a0f5-8c65d89cefb5/
|
||||
CVE-2026-81426 - https://wpscan.com/vulnerability/804efc9d-d2b4-46f0-a84f-0ff5fed7d3d6/
|
||||
CVE-2026-81427 - https://wpscan.com/vulnerability/f7fcf650-6e5e-4629-97ac-a76a5a0551db/
|
||||
CVE-2026-81428 - https://wpscan.com/vulnerability/e573c233-ed24-40a3-a16a-c80317910cce/
|
||||
CVE-2026-81432 - https://wpscan.com/vulnerability/ac6c4bce-9783-43ee-9549-41cbb2c3e9ac/
|
||||
CVE-2026-81583 - https://wpscan.com/vulnerability/6ced93ee-5629-42a4-9103-44cf99265bd2/
|
||||
CVE-2026-81737 - https://wpscan.com/vulnerability/b8a97781-5c3b-4a89-845e-ee4eb60ea29c/
|
||||
CVE-2026-81807 - https://wpscan.com/vulnerability/7aceefd5-aa09-4828-b375-6a62997fa0c2/
|
||||
CVE-2026-82182 - https://wpscan.com/vulnerability/79e58b77-6da8-4569-8ed3-a1ff5ced0991/
|
||||
CVE-2026-82183 - https://wpscan.com/vulnerability/bc7c18f2-4e8c-47a3-a972-6162fd27aaca/
|
||||
CVE-2026-84059 - https://uvxbywu62qm.feishu.cn/wiki/KwSzwcCstioZqKk7PODcIsDAn4W?from=from_copylink
|
||||
CVE-2026-84287 - https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report
|
||||
CVE-2026-84288 - https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report
|
||||
CVE-2026-84289 - https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md
|
||||
CVE-2026-84423 - https://github.com/geo-chen/oss/blob/main/casdoor.md#finding-1-unauthenticated-arbitrary-file-upload-via-apiupload-resource
|
||||
CVE-2026-84425 - https://github.com/hackerguopeng/cve/tree/main/CowAgent_Browser_Evaluate_Wait_DoS_Report
|
||||
CVE-2026-84427 - https://github.com/outlookgp/CVE/tree/main/CowAgent_Bash_Output_Buffer_DoS_Report
|
||||
CVE-2026-84430 - https://github.com/Angoddess/CVE/blob/main/README.md
|
||||
CVE-2026-84431 - https://docs.google.com/document/d/19qRCn6NWF2UE4urLXMXKgW555PHhnQiw/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
CVE-2026-84437 - https://github.com/Leousum/VulnPoC/blob/main/OpenCart_4.1.0.3/customer-address-stored-xss.md
|
||||
CVE-2026-84438 - https://github.com/Leousum/VulnPoC/blob/main/OpenCart_4.1.0.3/customer-name-stored-xss.md
|
||||
CVE-2026-84441 - https://github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/unauthenticated_derivative_path_traversal.md
|
||||
CVE-2026-84442 - https://docs.google.com/document/d/1NqFuHvwq66hpOfxTWPKlUB1_eMwLvujH/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/disksec
|
||||
CVE-2026-84696 - https://github.com/trulycrisp/psychite
|
||||
Reference in new issue
Block a user