mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Update CVE PoCs 2026-08-30
This commit is contained in:
CVE-BOT committed
1 parent
8733c5e2ae
commit
b1ae59882e
34 files changed
+470
-4
No files matched your search
@@ -1,3 +1,3 @@
|
||||
{
|
||||
"cvelist_fetch_time": "2026-08-29T06:47:04.953Z"
|
||||
"cvelist_fetch_time": "2026-08-30T08:08:00.342Z"
|
||||
}
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2024-58315](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58315)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorized code execution during application startup or system reboot.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://packetstormsecurity.com/files/177260/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -13,5 +13,5 @@ Tandoor Recipes is an application for managing recipes, planning meals, and buil
|
||||
- https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-r6rj-h75w-vj8v
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/IIxoskeletonII/DataPrivacy-CVE-2025-23211
|
||||
|
||||
@@ -15,5 +15,5 @@ An out-of-bounds write issue was addressed with improved input validation. This
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
- https://github.com/douglasmun/Douglas-Guidebook
|
||||
|
||||
@@ -613,4 +613,5 @@ No PoCs from references.
|
||||
- https://github.com/yuzu-juice/CVE-2025-29927_demo
|
||||
- https://github.com/zainabkhan9118/Mind-Portal
|
||||
- https://github.com/zs1n/CVE-2025-29927
|
||||
- https://github.com/kuyrathdaro/cve-2025-29927
|
||||
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2025-66293](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/Andrew-max365/JWPort-CVE-TEST
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-66294](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66294)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by unauthenticated attackers. This vulnerability stems from weak regex validation in the cleanDangerousTwig method. This vulnerability is fixed in 1.8.0-beta.27.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/Andrew-max365/JWPort-CVE-TEST
|
||||
@@ -22,3 +22,4 @@ No PoCs from references.
|
||||
- https://github.com/CVEs-Labs/CVE-2026-1357
|
||||
- https://github.com/masterwok/PoC-CVE-2026-1357
|
||||
- https://github.com/masterwok/PoC-CVE-2026-21858
|
||||
- https://github.com/sahmsec/CVE-2026-1357
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-14307](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14307)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served with an HTML content type, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a victim is tricked into submitting a crafted request.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/5f55b592-9113-47d1-8b48-6ba785c0834a/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-14835](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14835)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/f0b869b1-ef43-4540-9ca5-4440e763d307/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-18729](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18729)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/rmhowe425/POC-CVE-2026-18729
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-19722](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19722)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can lead to code execution.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/a61974fc-d9d6-4aee-a624-fc0a6e7b940b/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-19745](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19745)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/drbloop2000/CVE-2026-19745
|
||||
@@ -34,3 +34,4 @@ No PoCs from references.
|
||||
- https://github.com/Daniyal48/ghostlock-vagrant-box
|
||||
- https://github.com/Leeyoonjoo/CVE-2026-42533
|
||||
- https://github.com/0xCyberstan/CVE-2026-42533-POC
|
||||
- https://github.com/FranklinF25/cve-2026-42533
|
||||
@@ -134,3 +134,7 @@ No PoCs from references.
|
||||
- https://github.com/wandawrt01/Root-My-Pixel
|
||||
- https://github.com/imeiplus/pixel-root-2026
|
||||
- https://github.com/Kelsidavis/lg-g710tm-unlock
|
||||
- https://github.com/ReBiliBin/ghostlock-oppo-watch3pro
|
||||
- https://github.com/caramel1205zh/GKI_KernelSU_SUSFS
|
||||
- https://github.com/realthotboyshit/sukisu-
|
||||
- https://github.com/cancelledbit/x9u-501-unlock-kit
|
||||
@@ -51,3 +51,5 @@ No PoCs from references.
|
||||
- https://github.com/BailinT/GKI_KernelSU_SUSFS-hwid
|
||||
- https://github.com/qianmingzi7-coder/tb322fc-r2-kernel-public-build
|
||||
- https://github.com/PuceLi/GKI_KernelSU_SUSFS_Local
|
||||
- https://github.com/caramel1205zh/GKI_KernelSU_SUSFS
|
||||
- https://github.com/realthotboyshit/sukisu-
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-59112](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59112)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/orasmaem/libdigidocpp-vulnerability
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-76585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76585)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/7d539fba-d47e-461d-b40f-1aa8f535d506/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-78364](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78364)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/285b87e1-110f-4192-a098-e64e2eb447a8/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81578](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81578)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/yora1928/PaperCut-CVE-2026-81578-82078
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81660](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81660)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.5.13 does not validate or escape values submitted to some optional web form fields before storing them and outputting them back in an administrative area, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/cfdb4107-6010-4c29-baf3-3111765f48c2/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-81766](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81766)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute arbitrary code in the network-shared Really Simple Security WordPress plugin before 9.8.0 directory, which WordPress otherwise reserves to the network administrator. Exploitation requires the network administrator to have enabled the Really Simple Security WordPress plugin before 9.8.0 administration menu for subsites, which is not the default.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/948d70a2-605e-4a83-8feb-eca4dbb5f948/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-82078](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82078)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/yora1928/PaperCut-CVE-2026-81578-82078
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-82222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82222)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection.
|
||||
|
||||
This issue affects GiveWP: from n/a through 4.16.7.1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/UdinChan/cve-2026-82222-poc
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-82421](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82421)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ltranquility/cve_submit/issues/23
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-82422](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82422)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ltranquility/cve_submit/issues/24
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-82424](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82424)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Bai-public/CVE/issues/8
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-2026-82473](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82473)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade scheduling.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/geo-chen/oss/blob/main/kubeedge.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,45 @@
|
||||
### [CVE-2026-82482](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82482)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component edit_profile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.6.29 mitigates this issue. Upgrading the affected component is recommended.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Leousum/VulnPoC/blob/main/CPG1.6.x/stored_xss_biography.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,45 @@
|
||||
### [CVE-2026-82483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82483)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file db_input.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.6.29 will fix this issue. It is recommended to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Leousum/VulnPoC/blob/main/CPG1.6.x/stored_xss_album_desc.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -19,3 +19,4 @@ No PoCs from references.
|
||||
- https://github.com/Procjevt/CVE-2026-9198
|
||||
- https://github.com/K3ysTr0K3R/CVE-2026-9198
|
||||
- https://github.com/rmhowe425/PoC-CVE-2026-9198
|
||||
- https://github.com/joaovicdev/EXPLOIT-CVE-2026-9198
|
||||
+1
-1
@@ -1 +1 @@
|
||||
[{"cve": "CVE-2026-0006", "desc": "In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/aydin5245/cve-2026-0006", "https://github.com/mobilehackinglab/CVE-2026-0006-openapv-poc"]}, {"cve": "CVE-2026-0013", "desc": "In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/inforcqb/cve-2026-0013-exploit", "https://github.com/XiaoBaiLovesStirring/cve-2026-0013-poc"]}, {"cve": "CVE-2026-0023", "desc": "In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/QM4RS/CVE-2026-0023-Update-Ownership-PoC"]}, {"cve": "CVE-2026-0047", "desc": "In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/mobilehackinglab/CVE-2026-0047-poc"]}, {"cve": "CVE-2026-0049", "desc": "In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/R3n3r0/CVE-2026-0049"]}, {"cve": "CVE-2026-0059", "desc": "In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/paul-goon/bootlicka-POC"]}, {"cve": "CVE-2026-0073", "desc": "In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/SecTestAnnaQuinn/CVE-2026-0073-Android-adbd-authentication-bypass-POC", "https://github.com/adityatelange/poc-CVE-2026-0073", "https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC", "https://github.com/0xBlackash/CVE-2026-0073", "https://github.com/novaek/CVE-2026-0073-Research", "https://github.com/unnaim/adbHijacker", "https://github.com/xqi1337/poc-CVE-2026-0073", "https://github.com/ctn-Qvo/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN", "https://github.com/m00ddy/CVE-2026-0073-Android-client-TLS-auth-bypass", "https://github.com/fredevsec/CVE-2026-0073", "https://github.com/aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass"]}, {"cve": "CVE-2026-0092", "desc": "In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/Majorjayyy1/CVE-2026-0092"]}, {"cve": "CVE-2026-0163", "desc": "In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/sentinel-aidefense/CVE-2026-0163-EXP"]}, {"cve": "CVE-2026-0227", "desc": "A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.", "poc": ["https://github.com/TeeyaR/CVE-2026-0227-Palo-Alto"]}, {"cve": "CVE-2026-0257", "desc": "Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\nPanorama and Cloud NGFW are not impacted by these issues.", "poc": ["https://github.com/sfewer-r7/CVE-2026-0257", "https://github.com/0xBlackash/CVE-2026-0257", "https://github.com/tushargurav28/CVE-2026-0257", "https://github.com/akashsingh0454/CVE-2026-0257-PoC", "https://github.com/Mr-Robot-LP/CVE-2Line truncated
|
||||
[{"cve": "CVE-2026-0006", "desc": "In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/aydin5245/cve-2026-0006", "https://github.com/mobilehackinglab/CVE-2026-0006-openapv-poc"]}, {"cve": "CVE-2026-0013", "desc": "In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/inforcqb/cve-2026-0013-exploit", "https://github.com/XiaoBaiLovesStirring/cve-2026-0013-poc"]}, {"cve": "CVE-2026-0023", "desc": "In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/QM4RS/CVE-2026-0023-Update-Ownership-PoC"]}, {"cve": "CVE-2026-0047", "desc": "In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/mobilehackinglab/CVE-2026-0047-poc"]}, {"cve": "CVE-2026-0049", "desc": "In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/R3n3r0/CVE-2026-0049"]}, {"cve": "CVE-2026-0059", "desc": "In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/paul-goon/bootlicka-POC"]}, {"cve": "CVE-2026-0073", "desc": "In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/SecTestAnnaQuinn/CVE-2026-0073-Android-adbd-authentication-bypass-POC", "https://github.com/adityatelange/poc-CVE-2026-0073", "https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC", "https://github.com/0xBlackash/CVE-2026-0073", "https://github.com/novaek/CVE-2026-0073-Research", "https://github.com/unnaim/adbHijacker", "https://github.com/xqi1337/poc-CVE-2026-0073", "https://github.com/ctn-Qvo/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN", "https://github.com/m00ddy/CVE-2026-0073-Android-client-TLS-auth-bypass", "https://github.com/fredevsec/CVE-2026-0073", "https://github.com/aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass"]}, {"cve": "CVE-2026-0092", "desc": "In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/Majorjayyy1/CVE-2026-0092"]}, {"cve": "CVE-2026-0163", "desc": "In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/sentinel-aidefense/CVE-2026-0163-EXP"]}, {"cve": "CVE-2026-0227", "desc": "A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.", "poc": ["https://github.com/TeeyaR/CVE-2026-0227-Palo-Alto"]}, {"cve": "CVE-2026-0257", "desc": "Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\nPanorama and Cloud NGFW are not impacted by these issues.", "poc": ["https://github.com/sfewer-r7/CVE-2026-0257", "https://github.com/0xBlackash/CVE-2026-0257", "https://github.com/tushargurav28/CVE-2026-0257", "https://github.com/akashsingh0454/CVE-2026-0257-PoC", "https://github.com/Mr-Robot-LP/CVE-2Line truncated
|
||||
+20
@@ -62601,3 +62601,23 @@ CVE-2026-63030 - https://github.com/sahmsec/wp2shell
|
||||
CVE-2026-68929 - https://github.com/Hunt-Benito/your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijack
|
||||
CVE-2026-73570 - https://github.com/virologi-info/Zimbra-security
|
||||
CVE-2026-8206 - https://github.com/HackfutSecRoot/multi_exploit_wp
|
||||
CVE-2025-23211 - https://github.com/IIxoskeletonII/DataPrivacy-CVE-2025-23211
|
||||
CVE-2025-24257 - https://github.com/douglasmun/Douglas-Guidebook
|
||||
CVE-2025-29927 - https://github.com/kuyrathdaro/cve-2025-29927
|
||||
CVE-2025-66293 - https://github.com/Andrew-max365/JWPort-CVE-TEST
|
||||
CVE-2025-66294 - https://github.com/Andrew-max365/JWPort-CVE-TEST
|
||||
CVE-2026-1357 - https://github.com/sahmsec/CVE-2026-1357
|
||||
CVE-2026-18729 - https://github.com/rmhowe425/POC-CVE-2026-18729
|
||||
CVE-2026-19745 - https://github.com/drbloop2000/CVE-2026-19745
|
||||
CVE-2026-42533 - https://github.com/FranklinF25/cve-2026-42533
|
||||
CVE-2026-43499 - https://github.com/ReBiliBin/ghostlock-oppo-watch3pro
|
||||
CVE-2026-43499 - https://github.com/cancelledbit/x9u-501-unlock-kit
|
||||
CVE-2026-43499 - https://github.com/caramel1205zh/GKI_KernelSU_SUSFS
|
||||
CVE-2026-43499 - https://github.com/realthotboyshit/sukisu-
|
||||
CVE-2026-53163 - https://github.com/caramel1205zh/GKI_KernelSU_SUSFS
|
||||
CVE-2026-53163 - https://github.com/realthotboyshit/sukisu-
|
||||
CVE-2026-59112 - https://github.com/orasmaem/libdigidocpp-vulnerability
|
||||
CVE-2026-81578 - https://github.com/yora1928/PaperCut-CVE-2026-81578-82078
|
||||
CVE-2026-82078 - https://github.com/yora1928/PaperCut-CVE-2026-81578-82078
|
||||
CVE-2026-82222 - https://github.com/UdinChan/cve-2026-82222-poc
|
||||
CVE-2026-9198 - https://github.com/joaovicdev/EXPLOIT-CVE-2026-9198
|
||||
@@ -147850,3 +147850,17 @@ CVE-2026-81200 - https://wpscan.com/vulnerability/1a4db76f-7043-4f9e-a584-17151d
|
||||
CVE-2026-81203 - https://github.com/fa11ing1eaf-dev/cve/issues/1
|
||||
CVE-2026-81342 - https://wpscan.com/vulnerability/f6f89b50-3087-4fb6-ba12-93fdc1bcc9ed/
|
||||
CVE-2026-81346 - https://wpscan.com/vulnerability/0fee8405-24c3-470e-b16d-7c839cba6038/
|
||||
CVE-2024-58315 - https://packetstormsecurity.com/files/177260/
|
||||
CVE-2026-14307 - https://wpscan.com/vulnerability/5f55b592-9113-47d1-8b48-6ba785c0834a/
|
||||
CVE-2026-14835 - https://wpscan.com/vulnerability/f0b869b1-ef43-4540-9ca5-4440e763d307/
|
||||
CVE-2026-19722 - https://wpscan.com/vulnerability/a61974fc-d9d6-4aee-a624-fc0a6e7b940b/
|
||||
CVE-2026-76585 - https://wpscan.com/vulnerability/7d539fba-d47e-461d-b40f-1aa8f535d506/
|
||||
CVE-2026-78364 - https://wpscan.com/vulnerability/285b87e1-110f-4192-a098-e64e2eb447a8/
|
||||
CVE-2026-81660 - https://wpscan.com/vulnerability/cfdb4107-6010-4c29-baf3-3111765f48c2/
|
||||
CVE-2026-81766 - https://wpscan.com/vulnerability/948d70a2-605e-4a83-8feb-eca4dbb5f948/
|
||||
CVE-2026-82421 - https://github.com/ltranquility/cve_submit/issues/23
|
||||
CVE-2026-82422 - https://github.com/ltranquility/cve_submit/issues/24
|
||||
CVE-2026-82424 - https://github.com/Bai-public/CVE/issues/8
|
||||
CVE-2026-82473 - https://github.com/geo-chen/oss/blob/main/kubeedge.md
|
||||
CVE-2026-82482 - https://github.com/Leousum/VulnPoC/blob/main/CPG1.6.x/stored_xss_biography.md
|
||||
CVE-2026-82483 - https://github.com/Leousum/VulnPoC/blob/main/CPG1.6.x/stored_xss_album_desc.md
|
||||
Reference in new issue
Block a user