CVE-2026-88854: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

MSC-2026-11640

Malicious npm packages impersonating a legitimate ordered-map library. The payload is embedded in the library's runtime API rather than an install script, so it executes when a consuming application calls the affected method instead of at install time, then collects host information and retrieves...

PT-2026-95996

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An authenticated and privileged remote code execution issue exists in the OrdaSoft Joomla Gallery extension. The updateOSGallery function, accessible via the task=update osgallery...

urx v0.11.0

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...

Exploit for CVE-2026-77635

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-79752

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-81648

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-81294

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-13447

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-19952

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-75816

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 — OpenAM Pre-Auth RCE Pre-authentication Remot...

Exploit for CVE-2026-78159

abraxaslabs.tech · github.com/abraxas ·&...

vigolium v0.4.8

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

Exploit for CVE-2026-18937

abraxaslabs.tech · github.com/abraxas ·&...

requestcraft

requestcraft GET and POST, taken apart down to the socket —...

Cross-site Scripting (XSS)

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient server-side HTML escaping in the JSX rendering pipeline. Untrusted values - including array roots, boundary objects, fallback objects, and provid...

Argus

Argus — All-Seeing Vulnerability Intelligence Platform !CI...

Exploit for CVE-2026-75157

CVE-2026-75157 PoC Authorized security research PoC for the A...

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager ARM that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326 , is rated 8.8 out of 10.0 on the CVSS scoring...