CVE-2026-105985

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

EUVD-2026-93362

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

CVE-2026-39749

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

CVE-2026-32570

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-39749 WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

EUVD-2026-93258

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

CVE-2026-39749 WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

CVE-2026-39749

The WordPress App for Cloudflare® plugin versions

CVE-2026-32570 WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-32570 WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-32570

The Progressify - Progressive Web App (PWA) plugin for WordPress is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

EUVD-2026-93233

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-10580

WordPress - Hippoo Mobile App for WooCommerce = 1.9.4 - Authentication Bypass to Admin Account Takeover Overview This tool is a proof-of-concept exploit for CVE-2026-10580 , an authentication bypass vulnerability affecting the Hippoo Mobile App for WooCommerce WordPress plugin versions = 1.9.4. T...

Web-App-PenTesting

🚀 Quick Start 1. Clone the repository git clone https://github.com/Sarthak4126/Web-App-PenTesting.git cd Web-App-PenTesting/targetapp 2. Install dependencies pip install -r requirements.txt 3. Launch the target application python app.py App runs at: http://127.0.0.1:5000 4. Run the automated...

PT-2026-106823

Name of the Vulnerable Software and Affected Versions @quasar/ssl-certificate versions prior to 2.1.0 @quasar/cli versions prior to 5.0.4 @quasar/app-vite versions prior to 3.3.0 Description The @quasar/ssl-certificate utility caches a combined private key and certificate PEM without applying...

PT-2026-106423

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

PT-2026-106398

Name of the Vulnerable Software and Affected Versions Progressify - Progressive Web App PWA versions prior to 1.6.1 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior...

PT-2026-106708

Name of the Vulnerable Software and Affected Versions Craft CMS version 5.10.13.2 Description An authenticated remote code execution issue exists in the Control Panel action 'app/render-components'. Users with basic Control Panel access can submit request-controlled component classes and property...

PT-2026-106927

Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...