19432 matches found
CVE-2026-63003
creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:15+00:00| published-proof-of-concept| https://github.com/django-cms/django-cms/security/advisories/GHSA-6x92-6vx4-5fwr...
CVE-2026-61663
creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:13+00:00| published-proof-of-concept| https://github.com/django-cms/django-cms/security/advisories/GHSA-8qj2-c6q4-f399...
CVE-2026-63124
creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:06+00:00| published-proof-of-concept| https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-8cfx-wx3q-mh5q 2026-08-20 23:51:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtkgttee5z2v...
CVE-2026-63202
creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:03+00:00| published-proof-of-concept| https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-4899-mpch-38p3...
CVE-2026-18501
creationtimestamp| type| source ---|---|--- 2026-08-20 20:00:03+00:00| seen| https://t.me/captainsmok3rofficial/449 2026-08-20 20:00:03+00:00| seen| https://t.me/captainsmok3rofficial/447 2026-08-21 00:00:08+00:00| published-proof-of-concept| https://t.me/captainsmok3rofficial/447 2026-08-21...
EUVD-2026-63479
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET§ion=ptestsn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may b...
CVE-2026-77004
Comfast CF-N1-S firmware 2.6.0.1 exposes a command injection flaw in the sprintf function at /cgi-bin/mbox-config?method=SET§ion=ptest_sn. Remote attackers with low privileges can manipulate the sn argument to execute arbitrary commands; a proof-of-concept exploit has been published. No patch...
CVE-2026-76071
creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:06+00:00| seen...
CVE-2026-76800
A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/selectmediapost.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published...
EUVD-2026-63194
A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/selectmediapost.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published...
AZL-97542 CVE-2022-4996 affecting package nghttp2 1.61.0-3
A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...
PT-2026-78882
Name of the Vulnerable Software and Affected Versions DeDeCMS version 3 Description A flaw in the /include/dialog/select media post.php file allows for unrestricted file upload. This occurs when the uploadfile argument is manipulated, enabling a remote attacker to upload files to the server...
PT-2026-79055
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET§ion=ptest sn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may ...
CVE-2026-53957
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:15+00:00| published-proof-of-concept| https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx...
CVE-2026-76048
A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...
CVE-2026-76048 SourceCodester Simple Online Food Ordering System ajax.php login sql injection
A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...
CVE-2026-76048 SourceCodester Simple Online Food Ordering System ajax.php login sql injection
A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...
EUVD-2026-62226
A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...
CVE-2026-75985 TRENDnet Router ping.cgi command injection
A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...
CVE-2026-75985
TRENDnet Router firmware 1.1.02b01 is vulnerable to command injection in /cgi-bin/ping.cgi via the wan_type parameter, exploitable remotely. A proof-of-concept exploit is published on GitHub. CVSS 3.1 rates this HIGH (7.4). No patch version is mentioned in the provided documents. Exploitation sta...