cve-2018-6574

This repository does not have a README...

CVE-2023-22515

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center, a Broken Access Control vulnerability. Attlassian has provided a CVSS base score of 10.0 One line poc cat file.txt| while read host do;do curl -skL...

CVE-2018-25031

CVE-2018-25031 CVE-2018-25031 exploits tests Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. HowTo Find the documentation endpoint a...

oss-bounty-program

ProjectDiscovery OSS Bounty Program Purpose The ProjectDiscovery OSS Bounty Program exists to democratize security by rewarding meaningful contributions from the global community. Our tools are used by researchers, defenders, and builders worldwide. This program ensures that anyone, anywhere, can...

CVE-2026-64531

CVE-2026-64531 — OVSwrap Linux kernel Open vSwitch module local privilege escalation normal user → root PoC. Exploits the integer wraparound of the 16-bit nlalen field to escalate from a normal user all the way to root. Vulnerability Summary When the nested action stream generated by OVS exceeds...

CVE-2026-72528

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack...

EUVD-2026-101940

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack...

CVE-2026-72528

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack...

CVE-2026-72528

The Handmade Marketplace App - Creema by CREEMA LTD. is susceptible to an open redirect vulnerability (CWE-601). By accessing a specially crafted URL, an attacker can cause the app to display a malicious website within the user's screen. This could lead to the user becoming a victim of a phishing...

CVE-2026-72528

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix crates

Summary Vulnerabilites were discovered in the gix family of crates used by the cargo package manager in IBM Open SDK for Rust on AIX 1.94.0.1 and 1.96.0.0. Vulnerability Details CVEID:CVE-2026-82248 DESCRIPTION: gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the...

CVE-2026-110934

Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa...

CVE-2026-110933

Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7...

CVE-2026-110934

The Samsung Open Source Vyond project contains an improper validation of array index vulnerability (CWE-129). This flaw allows for Input Data Manipulation . The vulnerability affects versions of Vyond prior to commit be6e297b0c4836e20d73b2f8a40a561ea496ebaa . According to the provided metrics, th...

CVE-2026-110934

Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa...

CVE-2026-110934

Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa...

CVE-2026-110933

Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7...

CVE-2026-110933

The Samsung Open Source Vyond component is vulnerable to an uncaught exception vulnerability, which facilitates Input Data Manipulation . This issue specifically affects versions of Vyond prior to the commit fb10a5c8b833df7f152d4a563a61d6090a1790d7 . The vulnerability is associated with CWE-248 ....

CVE-2026-110933

Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7...

"Handmade Marketplace App - Creema" vulnerable to open redirect

Overview "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains the following vulnerability. Open redirect CWE-601 - CVE-2026-72528 Koki Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...