CVE-2018-7935

CVE-2018-7935 POC Obtén una sesión válida primero curl http://192.168.8.1/html/index.html | grep SessionID Instrucciones: Edita exploit.py, inserta el SessionID capturado Estado de la vulnerabilidad: Confirmación recibida y parche publicado...

security-research

Security Research Vulnerability research write-ups. Every entry here corresponds to a fixed, publicly tracked issue — no theoretical findings. Adel Bouachraoui — hydrasecurity.fr/v10/ · LinkedIn · YesWeHack Published...

EUVD-2026-70875

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

CVE-2026-85383

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_del.php. The flaw is triggered by manipulating the ID argument in an unknown function within that file, allowing remote execution with low privileges required . The CVSS v3.1 score is 6...

EUVD-2026-70856

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

CVE-2004-2549

CVE-2004-2549 Punto de Acceso Inalámbrico LAN Nortel Serie 2200 - Denegación de Servicio Publicación de Exploit-db en https://www.exploit-db.com/exploits/23786/ Autor Alex Hernandez, también conocido como @alt3kx...

CVE-2026-72812

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wgwx-479j-23vq 2026-09-04 12:31:49+00:00| seen| https://gist.github.com/alon710/0ef37619359f1c245a80d0fc123877cc...

CVE-2026-72808

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:27+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-v7ph-r5r6-4jcj 2026-09-04 08:32:32+00:00| seen| https://gist.github.com/alon710/4e3a59a46f5538004facf996eb24fc2d...

CVE-2026-72807

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x67c-8pwr-m8g3 2026-09-04 07:31:42+00:00| seen| https://gist.github.com/alon710/428fa3e523bd4efb06d0f15759388e47...

CVE-2026-72806

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6mcf-g667-w3qv 2026-09-04 06:33:11+00:00| seen| https://gist.github.com/alon710/fbf800eaf7af09313d5329c1498b751c...

CVE-2026-72804

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vpjw-wf5h-cgpq 2026-09-04 04:32:14+00:00| seen| https://gist.github.com/alon710/8322b53a1d7bba7f1109796c874a5f4c...

CVE-2026-68585

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pm3w-vxp9-ccwc 2026-09-04 13:04:27+00:00| seen| https://gist.github.com/alon710/0a73f204f4113f41e2621c39634bb023...

CVE-2026-78071

creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:09+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...

CVE-2021-46702

creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:04+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors 2026-09-04 00:00:57+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors...

CVE-2016-0801

creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:04+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors 2026-09-04 00:00:57+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors...

CVE-2026-9335

creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:03+00:00| published-proof-of-concept| Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7VeZEaNBPjsU4IDgEWKiqQ 2026-09-04 00:00:55+00:00| published-proof-of-concept| Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7VeZEaNBPjsU4IDgEWKiqQ...

CVEs

My publicly published security advisories...

EUVD-2026-70279

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

Summary Siyuan's block search endpoint concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes. Through Siyuan's publish service, an unauthenticated visitor is forwarded to the kernel with a reader-role token and can reach POST /api/search/fullTextSearchBloc...