CVE-2026-57143

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:53+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf...

CVE-2026-56835

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:12+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr...

CVE-2026-57118

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp...

CVE-2026-57122

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...

CVE-2026-57124

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:31+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w 2026-07-23 17:02:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r 2026-09-14...

CVE-2026-57130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c969-5x3p-vq3v 2026-09-14 16:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvii7bt4nn2z 2026-09-14...

CVE-2026-57145

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:46+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47 2026-07-23 17:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u 2026-09-14...

CVE-2026-57148

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:41+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f38v-77qj-h4jq 2026-07-23 17:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz5u56b2v 2026-09-15...

CVE-2026-57209

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:38+00:00| published-proof-of-concept| https://github.com/dadrus/heimdall/security/advisories/GHSA-4jgr-pg2m-m988...

CVE-2026-59871

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:05+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp 2026-07-22 12:01:14+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmqeztj2n 2026-09-29...

CVE-2021-24508

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:05+00:00| seen| https://t.me/crackvaultde/1222 2026-07-20 21:00:05+00:00| published-proof-of-concept| https://t.me/crackvaultde/1223 2026-07-21 00:00:11+00:00| seen| https://t.me/crackvaultde/1222 2026-07-21 00:00:11+00:00|...

EUVD-2026-46063

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element...

CVE-2026-60027

The CVE concerns the Joomla extension Quix Page Builder Pro (pre-6.2.1 per CVE listing) and describes an unauthenticated path traversal vulnerability via form elements. An unauthenticated frontend user can traverse paths and read arbitrary files, requiring a published page containing a Form eleme...

CVE-2026-16229

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit h...

EUVD-2026-45410

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialedexec.go. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published...

PT-2026-61077

Name of the Vulnerable Software and Affected Versions itsourcecode Courier Management System versions prior to 1.1 Description A flaw in the /index.php endpoint allows remote attackers to perform cross-site scripting XSS by manipulating the page argument. Cross-site scripting is a technique where...

PT-2026-61053

Name of the Vulnerable Software and Affected Versions Croogo CMS versions prior to 4.0.8 Description A path traversal flaw exists in the Admin File Manager component. The issue resides in the isEditable function within the FileManager/src/Utility/FileManager.php file. This flaw allows a remote...

CVE-2026-16133

A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...

EUVD-2026-45393

A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...

CVE-2026-16075

A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function OpenApiRoute.getchatsessions of the file astrbot/dashboard/routes/openapi.py of the component session-listing Endpoint. This manipulation of the argument Username causes authorization bypass. It is...