3033 matches found
CVE-2017-18019
CVE-2017-18019 Under Construction : Please come back later...
CVE-2014-8609-exploit
CVE-2014-8609-exploit During the study of pending intent exploitation, I created my PoC application of CVE-2014-8609 Reference: 1. https://seclists.org/fulldisclosure/2014/Nov/81 2. https://github.com/locisvv/Vulnerable-CVE-2014-8609...
Premium Addons for Elementor - Unauthenticated Information Disclosure
Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...
CVE-2025-4686
CVE-2025-4686 The official publication by USOM is expected...
CVE-2025-2404
CVE-2025-2404 Official publication by USOM is expected...
EUVD-2026-87657
Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In sso.authenticate, when no existing user matches the incoming SSO subject, the server looks up pending user invites by the IdP-asserted email address alone — without validatin...
CVE-2025-5319
CVE-2025-5319 Official publication by USOM is pending...
CVE-2026-100527
OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pending-authentication capacity. Attackers can hold every pending slot by maintaining silent WebSocket upgrades, preventing paired extensions...
CVE-2026-100527 OpenClaw before 2026.8.2 Denial of Service via Browser Relay
OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pending-authentication capacity. Attackers can hold every pending slot by maintaining silent WebSocket upgrades, preventing paired extensions...
CVE-2026-Pending-Claude-Desktop-RCE
This repository does not have a README...
CVE-2026-65828 Zammad: Pending upload deletion bypass via legacy attachment endpoint
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroyform action on AttachmentsController deletes UploadCache Store records based solely on a user-supplied formid without verifying that the requesting user owns those records. An authenticated...
tugtainer-PoC
Summary CVE status: requested, pending assignment. This finding is published as GHSA-crjc-6vc7-xrfh. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-tugtainer-PoC and this banner is replaced with the CVE link...
supernote-obsidian-plugin-PoC
Summary CVE status: requested, pending assignment. This finding is published as GHSA-3gx3-r874-5pp4. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-supernote-obsidian-plugin-PoC and this banner is replaced with the CVE link...
pasteguard-PoC
PasteGuard: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-q94x-p9rc-q89f. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-pasteguard-PoC and this banner is replaced with the CVE link...
linux-entra-sso-PoC
Summary CVE status: requested, pending assignment. This finding is published as GHSA-g9vc-5j77-f2cm. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-linux-entra-sso-PoC and this banner is replaced with the CVE link...
zotlit-PoC
ZotLit: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-4qh7-66xv-h329. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-zotlit-PoC and this banner is replaced with the CVE link...
crw-PoC
crw: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-5jp3-339h-vxqw. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-crw-PoC and this banner is replaced with the CVE link...
CVE-2019-12796
CVE-2019-12796 This repository will contain information regarding CVE-2019-12796 once it is made public...