Statement

Statement Regarding the CVE-2021-36593 and CVE-2021-36594, I would like to mention that I only had submitted a request to split the CVE-ID. 2 years ago The CVE-IDs will be published in the coming months as there is currently no available update. We have postponed the publishing process for the ti...

CVE-2014-8609-exploit

CVE-2014-8609-exploit During the study of pending intent exploitation, I created my PoC application of CVE-2014-8609 Reference: 1. https://seclists.org/fulldisclosure/2014/Nov/81 2. https://github.com/locisvv/Vulnerable-CVE-2014-8609...

CVE-2017-18019

CVE-2017-18019 Under Construction : Please come back later...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

CVE-2025-4686

CVE-2025-4686 The official publication by USOM is expected...

CVE-2025-2404

CVE-2025-2404 Official publication by USOM is expected...

CVE-2025-4822

CVE-2025-4822 Official publication by USOM is awaited...

CVE-2025-5319

CVE-2025-5319 Official publication by USOM is pending...

CVE-2026-Pending-Claude-Desktop-RCE

This repository does not have a README...

CVE-2026-111660

waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any member's pending order via the /callback/order/unpaid endpoint. Attackers can submit predictable orderSn values, built from epoch seconds and a sequential counter, to...

CVE-2026-111660 waynboot-mall through 2.0.0 Missing Authentication via /callback/order/unpaid

waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any member's pending order via the /callback/order/unpaid endpoint. Attackers can submit predictable orderSn values, built from epoch seconds and a sequential counter, to...

EUVD-2026-103082

waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any member's pending order via the /callback/order/unpaid endpoint. Attackers can submit predictable orderSn values, built from epoch seconds and a sequential counter, to...

CVE-2026-111660

The waynboot-mall software (through version 2.0.0 ) is vulnerable to a missing authentication flaw (CWE-306) within the /callback/order/unpaid endpoint. This vulnerability allows unauthenticated attackers to cancel any member's pending orders by submitting predictable orderSn values, which are co...

PT-2026-116059

waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any member's pending order via the /callback/order/unpaid endpoint. Attackers can submit predictable orderSn values, built from epoch seconds and a sequential counter, to...

tugtainer-PoC

Summary CVE status: requested, pending assignment. This finding is published as GHSA-crjc-6vc7-xrfh. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-tugtainer-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440 Advisory|...

supernote-obsidian-plugin-PoC

Summary CVE status: requested, pending assignment. This finding is published as GHSA-3gx3-r874-5pp4. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-supernote-obsidian-plugin-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...

pasteguard-PoC

PasteGuard: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-q94x-p9rc-q89f. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-pasteguard-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

zotlit-PoC

ZotLit: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-4qh7-66xv-h329. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-zotlit-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...

linux-entra-sso-PoC

Summary CVE status: requested, pending assignment. This finding is published as GHSA-g9vc-5j77-f2cm. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-linux-entra-sso-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440 Advisory|...

crw-PoC

crw: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-5jp3-339h-vxqw. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-crw-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440 Advisory|...