SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

CVE

CVE Advisories and Responsible Disclosure Documents for CloudAware CVE's...

advisories

Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...

CVEs

My publicly published security advisories...

vuln-list-redhat

vuln-list-redhat Red Hat security advisories...

cve-advisories

byteme team...

vulnerability_advisories

Onapsis Security Advisories This repository contains Security Advisories for vulnerabilities reported by the Onapsis Research Labs team Advisories Summary The following table is a summary of the vulnerabilties described in this repository: Vendor| CVE| CVSS| Description| Link to Report...

rustsec

RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...

security-advisories

Security advisories This repository is the authoritative source for security advisories from the Nextcloud project: Advisories after May 2021 are published using GitHub's Security Advisory section Advisories before May 2021 can be found in the archived old/ folder as JSON files...

security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| SSRF on Nextcloud Whiteboard Application via...

security-advisories

Threat Lance Security Advisories Public security advisory repository by Threat Lance. CVE| Title| Severity| Published ---|---|---|--- CVE-2025-50455| EasyAppointments = 1.5.1 Blind SQL Injection via orderby| Critical| TBD...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds This repository contains information, exploits, scripts, etc, that I have made public and it is located at https://github.com/pedrib/PoC. advisories: all my public advisories, research notes, etc Pwn2Own: advisories related to my Pwn2Own participation...

spring-cvss-check

spring-cvss-check Covers 15 official Spring / Tomcat security advisories seven from 2026-08-20 · five from 2026-06-08 · one from 2025-09-15 · two Tomcat from 2026-08-25. For 8 of them, scanners pulling from NVD reportCRITICAL 9.19.8, while the vendor's official rating is LOW / MEDIUM. For the oth...

security-advisories

Security Advisories Public security advisories by Greg Durys. Advisory| Product| Vulnerabilities| Severity ---|---|---|--- Cohesity TranZman| TranZman Migration Appliance| 5 CVEs CWE-78, CWE-434, CWE-269, CWE-327| High pwnlift| rasta-mouse/pwnlift| CVE-2026-56815 CWE-59, CWE-367| High skillable|...

vuln-list-aqua

vuln-list-aqua Security advisories from Aqua Security...

advisories

SBA Research Security Advisories Security advisories published by SBA Research...

security-advisories

security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...