disclosures

Cylance Vulnerability Research - Disclosure Repository This is a repository to hold all of Cylance's Vulnerability Research team's public vulnerability disclosures. The public key for our Vulnerability Research Team e-mail is below: -----BEGIN PGP PUBLIC KEY BLOCK-----...

Photon OS 5.0: Libtiff PHSA-2026-5.0-91-0815

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0815. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

cve-research

CVE Research Notes and code from going through public CVEs th...

PT-2026-46352

Unauthenticated Local File Inclusion in Mission = 1.22 versions...

PT-2026-46357

Unauthenticated Local File Inclusion in Quirky = 1.23 versions...

PT-2026-46370

Unauthenticated Local File Inclusion in Gunslinger = 1.7 versions...

PT-2026-46361

Unauthenticated Local File Inclusion in Gamic = 1.15 versions...

PT-2026-46360

Unauthenticated Cross Site Scripting XSS in Grand Car Rental = 3.7 versions...

PT-2026-46336

Unauthenticated Local File Inclusion in Corbesier = 1.15.0 versions...

PT-2026-46355

Unauthenticated Local File Inclusion in Dom = 1.24 versions...

PT-2026-46344

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...

PT-2026-46332

Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme = 1.2.2 versions...

PT-2026-46380

Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...

PT-2026-46363

Unauthenticated Local File Inclusion in Printo = 1.11 versions...

PT-2026-46350

Unauthenticated Local File Inclusion in Kelly Young = 1.1.0 versions...

PT-2026-46339

Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...

PT-2026-46376

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

PT-2026-46354

Unauthenticated Local File Inclusion in Gat = 1.16 versions...

PT-2026-46379

Unauthenticated Local File Inclusion in ITactics = 1.0 versions...

PT-2026-46343

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...