CVE-2026-23812: Channel Accessible by Non-Endpoint

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or...

CVE-2019-25498: Improper Neutralization of Special Elements used in an SQL Command

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landinglocation parameter. Attackers can send POST requests to the searched endpoint with malicious SQL payloads to bypass authenticatio...

WordPress ACF 0.9.1.1 Vulnerability Scanner

WordPress ACF plugin version 0.9.1.1 non‑intrusive vulnerability scanner that performs version checks...

CVE-2026-23811: Channel Accessible by Non-Endpoint

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 L2 communication restrictions between clients and redirect traffic at Layer 3 L3. In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable...

CVE-2025-59785: Improper Validation of Syntactic Correctness of Input

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges...

CVE-2026-20031: Uncaught Exception

A vulnerability in the HTML Cascading Style Sheets CSS module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit th...

XSS-SCANNER

...

laravel-honeypot

Laravel Threat Detection Know who's attacking your Laravel...

CVE-2025-66680: Improper Link Resolution Before File Access

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

CVE-2025-63911: Improper Neutralization of Special Elements used in an OS Command

Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability...

CVE-2026-26892: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /managecarrier.php...

CVE-2026-26886: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...

CVE-2026-24103: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18multi...

CVE-2025-14456: Use of a Broken or Risky Cryptographic Algorithm

IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...

CVE-2024-55027: Cleartext Storage of Sensitive Information

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uactemp.db...

CVE-2026-25590: Improper Neutralization of Input During Web Page Generation

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in task jobs. This vulnerability is fixed in 1.6.6...

CVE-2026-26884: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/viewappointment.php...

CVE-2026-26890: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageproduct.php...

CVE-2025-70821: Improper Neutralization of Special Elements used in an SQL Command

renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component...

CVE-2026-1713: Authentication Bypass by Primary Weakness

IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD...