CVE-2026-6179: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...

CVE-2026-34856: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34862: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28553: Undefined Security Weakness

Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-34857: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-36923: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...

CVE-2026-34867: Double Free

Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-30813: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-34863: Out-of-bounds Write

Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-21003: Undefined Security Weakness

Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions...

CVE-2026-34859: Use After Free

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-36937: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/viewdetails.php...

CVE-2026-36942: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manageactivity.php...

SkillCyberPunk

Security Vulnerability Scanner A Claude Code plugin that auto...

web-pentest-tool

🛡️ AutoPenTest — Automated Penetration Testing Tool ⚠️ DI...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: redka, swagger, kyverno-notation-aws, smarter-device-manager, terraform, prometheus-adapter, polaris, cert-manager-csi-driver, terraform-provider-sendgrid, kube-state-metrics, sriov-network-device-plugin, gitness, sftpgo-plugin-geoipfilter, vault-env, authservice,...

Linux Distros Unpatched Vulnerability : CVE-2026-4151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Exploit for Deserialization of Untrusted Data in Facebook React

markdown Summary CVE-2025-55182 Scanner is a high-perfor...

CVE-2026-31262: Exposure of Sensitive Information to an Unauthorized Actor

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

CVE-2026-33092: External Control of System or Configuration Setting

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM macOS before build 42571, Acronis True Image macOS before build 42902...