PT-2026-57307

Name of the Vulnerable Software and Affected Versions miniOrange OAuth Single Sign On - SSO OAuth Client versions prior to 38.5.9 Description An authentication bypass exists in the miniOrange OAuth SSO WordPress plugin. An unauthenticated remote attacker can exploit an alternate password-recovery...

PT-2026-56799

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...

PT-2026-56868

Name of the Vulnerable Software and Affected Versions mettle sendportal versions prior to 3.0.2 Description An issue in the APIv1 Webhooks component allows remote attackers to bypass authentication. This occurs within the sendgrid/postmark/postal/mailjet functions, where improper manipulation lea...

CVE-2026-1989: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-15190: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and m...

PT-2026-56934

Name of the Vulnerable Software and Affected Versions Pimcore Studio Backend Bundle versions prior to 2025.4.6 Pimcore Studio Backend Bundle versions prior to 2026.1.6 Description An authenticated user can extract the admin password hash and other database content via time-based blind SQL...

ROS-20260709-73-0017

The vulnerability in MediaWiki is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20260709-73-0016

The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260709-73-0031

The vulnerability in Portainer-CE is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

CVE-2026-15117

Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-15126

Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-15123

Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-15123

A vulnerability exists in the DOM components of Google Chrome and Microsoft Edge web browsers. The issue stems from an inappropriate implementation allowing operations to execute beyond the buffer in memory , specifically leading to heap corruption . A remote attacker can exploit this by hosting ...

CVE-2026-15117

A use after free vulnerability exists in the Payments component of Google Chrome and Microsoft Edge browsers (affecting versions prior to 150.0.7871.115). A remote attacker can exploit this by convincing a user to perform specific UI gestures while visiting a crafted HTML page, potentially leadin...

CVE-2026-5923

Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage...

CVE-2026-15105

CVE-2026-15105 affects davenardella snap7 up to 1.4.3. The flaw resides in TS7Worker::PerformFunctionRead (src/core/s7_server.cpp) within the ReadVar Request Handler, causing deserialization. Exploitation requires local-network access and a public exploit has been published. The project was infor...

Cybersecurity-Challenges-Exploits

Cybersecurity Challenges & Exploits A curated collection of c...

ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more...

terasploit

Terasploit Framework An opensource python exploitation fram...

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...