qdPM 9.2 - Directory Traversal

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. id: CVE-2023-45855 info: name: qdPM 9.2 - Directory Traversal author: DhiyaneshDk severity: high description: | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to t...

DedeCMS 5.7.109 - Server-Side Request Forgery

Manipulation of the rssurl parameter in codo.php leads to server-side request forgery in DedeCMS version 5.7.109. id: CVE-2023-3578 info: name: DedeCMS 5.7.109 - Server-Side Request Forgery author: ritikchaddha severity: critical description: | Manipulation of the rssurl parameter in codo.php lea...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

CVE-2021-32724-Target

CVE-2021-32724 Целевой репозиторий эксплойта /!\ Этот репозиторий настроен с уязвимой версией Check Spelling Workflow /!\ Этот репозиторий является целью для эксплойта CVE-2021-32724. Helllo Мир...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration（脆弱性版 vs パッチ適用版 Docker ラボ） ローカルのみで動作する WPvivid Backup & Migration 比較用 Docker ラボ： 脆弱性版: 0.9.123 パッチ適用版: 0.9.124 学習目的（ラボ構築、検証、ログ、メモ）のために作成されています。PoC 関連のものはすべて、このラボ内の localhost 上でのみ 実行することを想定しています。 安全性と適用範囲 これを実行するのは自分のマシン上のみ （localhost + Docker...

grafana-CVE-2024-9264

grafana-CVE-2024-9264 Этот репозиторий содержит информацию об уязвимости CVE-2024-9264. Он также собирает уязвимую версию grafana, которую можно получить из ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0...

EUVD-2026-64834

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

Astra Linux – Vulnerability in ntfs-3g

In NTFS-3G, from version 2021.8.22, ntfsck has a heap-based buffer overflow issue, involving a value of buffer+5123-2. NOTE: The upstream documentation states that ntfsck is deprecated; however, it is still being distributed with some Linux distributions...

CVE-2026-66586

Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...

PT-2026-78942

Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...

EUVD-2026-62496

Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory 6.2.3 - companyName from the request was written unescaped into an XML attribute...

MINI-MGWH-PV97-W83H

Bulletin has no description...

UBUNTU-CVE-2026-76220

GitPython before 3.1.58 contains a command execution vulnerability in the checkunsafeoptions guard that can be bypassed by combining a single-character kwarg with splitsinglecharoptions=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clonefrom to emit a joined toke...

EUVD-2026-62376

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-59940

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

MINI-762H-G653-93FM

Bulletin has no description...

WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability

WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2. A patched version of the package is available...

WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FluentCommunity versions = 2.7.5...