Exploit for CVE-2026-60137

wp2shell CVE-2026-6303...

CVE-2026-16076 AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chatsend of the file astrbot/dashboard/routes/openapi.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to...

EUVD-2026-45355

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chatsend of the file astrbot/dashboard/routes/openapi.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to...

CVE-2026-16076

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chatsend of the file astrbot/dashboard/routes/openapi.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to...

EUVD-2026-45353

A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function OpenApiRoute.getchatsessions of the file astrbot/dashboard/routes/openapi.py of the component session-listing Endpoint. This manipulation of the argument Username causes authorization bypass. It is...

CVE-2026-16075

A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function OpenApiRoute.getchatsessions of the file astrbot/dashboard/routes/openapi.py of the component session-listing Endpoint. This manipulation of the argument Username causes authorization bypass. It is...

CVE-2026-16075 AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization

A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function OpenApiRoute.getchatsessions of the file astrbot/dashboard/routes/openapi.py of the component session-listing Endpoint. This manipulation of the argument Username causes authorization bypass. It is...

share-poc-XRing-O1

CVE-2026-43499 GhostLock – XRing O1 Exploit Research Targ...

Exploit for CVE-2026-63030

No d...

TP-Link-Archer-BE900-v2

No d...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4shell-scanner A dependency-free, defensive scanner for...

PT-2026-60968

Name of the Vulnerable Software and Affected Versions nextlevelbuilder GoClaw versions prior to 3.13.3 Description Improper authorization occurs within the isSafeBin function located in the internal/tools/exec approval.go file. This flaw allows a remote attacker to bypass authorization checks...

PT-2026-60973

Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1 Description An issue in the Swarm RPC Receiver component allows for incorrect authorization. The flaw exists within the handle rpc request function located in the claw/services/swarm/swarm.c file and can ...

PT-2026-60970

A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2. Affected by this issue is the function ToolsInvokeHandler.ServeHTTP of the file internal/http/tools invoke.go of the component Invoke Endpoint. This manipulation causes missing authorization. The attack can be initiated...

PT-2026-60980

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A SQL injection flaw exists in the /prescriptionrecord.php endpoint. This issue occurs when the delid variable is manipulated, allowing a remote attacker to execute arbitrary SQL...

PT-2026-60985

Name of the Vulnerable Software and Affected Versions CartoDB carto-api-client version 0.5.29 Description A remote attack is possible through the manipulation of the column argument within the addFilter function located in the src/filters.ts file. This leads to prototype pollution, which is the...

PT-2026-60991

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A security flaw allows remote attackers to perform cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in t...

PT-2026-60992

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web fetch/web fetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit ha...

PT-2026-60997

A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/access control.go of the component First Run Setup. Performing a manipulation of the argument allowed cidrs results in authentication bypass using alternate...

PT-2026-60919

Name of the Vulnerable Software and Affected Versions AstrBot versions prior to 4.25.6 Description An authorization bypass exists in the session-listing endpoint. The issue resides in the OpenApiRoute.get chat sessions function within the astrbot/dashboard/routes/open api.py file. A remote attack...