WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

CVE-2025-14502 Vulnerability Analysis Report Vulnerability Overview Vulnerability Type : Local File Inclusion LFI Affected Versions : News and Blog Designer Bundle 1.1 and all earlier versions Severity : High Attack Complexity : Low no authentication required Vulnerability Principle Analysis 1...

vulnerability-poc

Vulnerability PoC Repository Curated Proof-of-Concept PoC code, test labs, and prevention rules for high-severity CVEs — built for authorized security testing, penetration testing, CTF challenges, and security research. Maintained by the SeekersLab team. Every entry ships with detection-only PoC...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Exploit Author: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

CVE-2025-65482-XXE-

CVE-2025-65482 XXE XML External Entity Injection XXE in XDocReport Bug Definition XML External Entity Injection Vulnerability Overview XML External Entity Injection XXE is a vulnerability in the processing of XML formatted data, where a user injects XML data that references an external file or...

CVE-2025-26054

CVE-2025-26054 CVE-2025-26054 Author: Rohan Deshpande Stored Cross Site Scripting Summary Stored XSS Cross-Site Scripting is a security vulnerability that occurs when an attacker injects malicious scripts into a web application, which are then stored on the server and served to users. When users...

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC

Open5GS NRF Denial of Service CVE-2025-41067 & CVE-2025-41068 This repository contains Proof-of-Concept PoC exploit scripts for two high-severity vulnerabilities discovered in NewPlane's Open5GS. These vulnerabilities can be triggered by an attacker to cause a Denial of Service DoS in the NRF...

CVE-2026-8054

1. Vulnerability Overview CVE-2026-8054 is a high-severity pre-authentication SQL injection vulnerability Pre-auth SQL Injection in the dotCMS Core Publish Audit API. The vulnerability is officially tracked as Security Incident SI-75 and was formally disclosed at the end of May 2026. Since...

CVE-2026-5513

CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie Overview...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – SMTP Header Injection in Contact Form Program Code Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender = request.form'email'...

Linux Distros Unpatched Vulnerability : CVE-2026-85049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libheif - None Ubuntu Linux - Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read CVE-2026-84450 Not...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit Program Code Python Zigbee simulation root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid:...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

EUVD-2026-70710

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85048

Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85053

CVE-2026-85053 is an improper resource exposure vulnerability in the CacheStorage component of Google Chrome prior to 152.0.7977.82 . A remote attacker can execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page , per Chromium's assessment. The flaw carri...

CGA-6899-V5V7-96P9

Bulletin has no description...

Fragnesia-CVE-2026-46300

🔴 Fragnesia — CVE-2026-46300 Privilege escalation in the Linux kernel · CVSS 7.8 · Disclosed on May 14, 2026 Awareness repository only. This repository does not contain exploit code. Its purpose is to inform system administrators, engineers, and security teams about the nature of the vulnerabilit...

Linux Distros Unpatched Vulnerability : CVE-2026-80229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations...