Lucene search
+L

4944544 matches found

GithubExploit
GithubExploit
added 23 minutes ago2 views

Exploit for CVE-2026-16219

CVE-2026-16219: Croogo FileManager defensive lab !Safety: l...

6.5CVSS6.6AI score0.00288EPSS
Exploits1
GithubExploit
GithubExploit
added 25 minutes ago2 views

NginxRift-Poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-20...

9.2CVSS9.1AI score0.61469EPSS
Exploits41
GithubExploit
GithubExploit
added 31 minutes ago3 views

Exploit for CVE-2026-63030

wp2shell-cf-bypass Independent PoC for the WordPress batch ro...

9.8CVSS6.2AI score0.08946EPSS
Exploits43
GithubExploit
GithubExploit
added 44 minutes ago6 views

Exploit for Improper Input Validation in Apache Camel

camel-irc irc.sendTo Header Injection Reproducer CVE-2026-490...

6.5CVSS5.7AI score0.00428EPSS
Exploits1
The Hacker News
The Hacker News
added 53 minutes ago4 views

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery. Some bugs...

9.8CVSS9.5AI score0.01465EPSS
Exploits0
NVD
NVD
added 1 hour ago7 views

CVE-2026-57310

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also...

6.3CVSS
Exploits0References2
NVD
NVD
added 1 hour ago7 views

CVE-2026-57311

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other...

5.3CVSS
Exploits0References2
NVD
NVD
added 1 hour ago6 views

CVE-2026-57309

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in versi...

9.3CVSS
Exploits0References2
NVD
NVD
added 1 hour ago8 views

CVE-2026-16248

A vulnerability was found in Tenda AC10 16.03.10.09multiTDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed fro...

9CVSS
Exploits0References6
NVD
NVD
added 1 hour ago5 views

CVE-2026-16244

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /prescriptionorderreport.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The...

6.5CVSS
Exploits0References6
NVD
NVD
added 1 hour ago7 views

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

7.3CVSS
Exploits0References2
EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-45945

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other...

5.3CVSS5.6AI score
Exploits0References2
Cvelist
Cvelist
added 1 hour ago6 views

CVE-2026-57311 Unrestricted Upload of File with Dangerous Type in Windu CMS

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other...

5.3CVSS
Exploits0References2
CVE
CVE
added 1 hour ago15 views

CVE-2026-57311

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other...

5.3CVSS5.6AI score
Exploits0References2
CVE
CVE
added 1 hour ago7 views

CVE-2026-57310

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also...

6.3CVSS5.4AI score
Exploits0References2
Cvelist
Cvelist
added 1 hour ago7 views

CVE-2026-57310 Weak password hashing in Windu CMS

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also...

6.3CVSS
Exploits0References2
EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-45944

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also...

6.3CVSS5.4AI score
Exploits0References2
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-45943

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in versi...

9.3CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 1 hour ago9 views

CVE-2026-57309 Blind SQL Injection in Windu CMS

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in versi...

9.3CVSS
Exploits0References2
CVE
CVE
added 1 hour ago6 views

CVE-2026-57309

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in versi...

9.3CVSS5.8AI score
Exploits0References2
Rows per page
Query Builder