CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...

CVE-2026-20180

Cisco ISE RCE: Advanced Exploitation and Remediation Analysis 📋 Table of Contents 1. Executive Summary 2. Attack Surface Analysis 3. Exploitation Vectors 4. Advanced Evasion Techniques 5. Systemic Impact on Zero Trust Architectures 6. Remediation Strategy 7. Forensic Investigation 8. References 🎯...

CVE-2026-107337

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2025-56243

CVE-2025-56243 - Reflected XSS in PuneethReddyHC / Event Management System v1.0 Title: Reflected Cross-Site Scripting XSS via eventid parameter in register.php Vendor / Repository: PuneethReddyHC / event-management Affected Version: 1.0 branch/tag master at the time of testing Reporter: Hafiz...

cve-2026-24858

CVE-2026-24858 PoC helper CVE-2026-24858 - Administrative FortiCloud SSO authentication bypass This repository contains a conservative Python helper for scanning Fortinet web management indicators and an optional explicit payload sender. The exploit/payload sender is disabled by default and...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — AppleSEPKeyStore Use-After-Free CVE-2026-20637 · Enfilade · enfilade.io Component: AppleKeyStore Impact: An app may be able to cause unexpected system termination. Description: A use after free issue was addressed with improved memory management. —Apple Security Content, iOS 26.3...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrator+ Arbitrary File Upload via 'mdjmemailuploadfile' Parameter The WordPress MDJM Event Management plugin version 1.7.8.3 and prior contains an arbitrary file upload vulnerability that allows authenticated administrators to upload maliciou...

CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication

CVE-2026-30824 — Flowise NVIDIA NIM Authentication Bypass Checker and Exploit A proof-of-concept checker and exploit for CVE-2026-30824 , a critical authentication bypass vulnerability in Flowise that exposes NVIDIA NIM API endpoints without authentication. Vulnerability Overview CVE-2026-30824 i...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

HotelDruid-CVE-2021-42949

CVE-2021-42949 The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks. The session id is dynamically created at each login using the following generalized syntax...

EUVD-2026-95120

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2026-6274

CVE-2026-6274: Redline WR3200 Authentication Bypass English | Turkish This repository contains the technical details and Proof of Concept PoC for CVE-2026-6274. The vulnerability exists in Redline WR3200 routers prior to firmware v7.1.8 and allows an attacker to bypass authentication and change t...

CVE-disclosures

CVE-2026-3171 & CVE-2026-3170 – Archana M Official vulnerability disclosures by Archana M. 🔹 CVE-2026-3171 Product: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Vulnerability Type: Cross-Site Scripting CWE-79 Affected File: /queue.php Attack Vector: Remote User...

CVE-2026-7229-SQLI

Authenticated SQL Injection in Coaching Management System Allows Database Dump Description A SQL Injection vulnerability exists in the Coaching Management System in PHP. The complaintreply parameter in the admin reply functionality is not properly sanitized before being used in SQL queries. An...

CVE-2026-6184-stored-XSS

Stored XSS in News Title - Simple Content Management System PHP Description A Stored Cross-Site Scripting XSS vulnerability exists in Simple Content Management System PHP. The News Title field in the admin panel does not sanitize user input before storing it in the database and reflecting it on t...

CVE-2026-6182-SQLI-auth

Bypass dell'Autenticazione tramite SQL Injection - Simple Content Management System PHP Descrizione Esiste una vulnerabilità di SQL Injection nella pagina di login dell'amministratore di Simple Content Management System PHP. Il parametro user non viene sanitizzato prima di essere passato alla que...

CVE-2021-43129

CVE-2021-43129 Vulnerability in D2L Brightspace’s Learning Management SystemLMS Vulnerability Type: CWE-668: Exposure of Resource to Wrong Sphere Vendor of Product: Desire2Learn/D2L Affected Product Code Base: D2L Brightspace’s Learning Management SystemLMS Tested version: 20.21.7 D2L announced...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

CVE-2026-7222-XSS

Stored Cross-Site Scripting XSS in Coaching Management System Leads to Account Takeover Product Coaching Management System in PHP Code-Projects.org https://code-projects.org/coaching-management-system-in-php-with-source-code/ Affected Components /modules/student/complaint.php Complaint Submission...

POC-CVE-2026-23520

CVE-2026-23520 — Arcane Lifecycle Label RCE OS Command Injection in Arcane Docker Management 1.13.0 Overview Arcane is a modern, web-based Docker management platform. Versions prior to 1.13.0 are vulnerable to an authenticated Remote Code Execution RCE via OS command injection in the updater...