CVE-2022-35499

Technical details for CVE-2022-35499 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-63137

CVE-2026-63137 is reserved; the provided documents contain no public technical details (affected products, impact, or remediation). Monitor for updates from official sources.

CVE-2026-52832

Technical details are not publicly available in the provided documents. No affected products, versions, impact, or fixes are disclosed. Monitor for updates as the CVE status may change.

CVE-2026-69212

Technical details for CVE-2026-69212 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-52614

This CVE corresponds to a concrete PoC in RuoYi v4.8.3 where the code-generation endpoint /tool/gen/createTable improperly filters input. The filterKeyword() logic removes all whitespace and then checks for blacklisted keywords with trailing spaces (e.g., select, insert, drop), allowing a CTAS (C...

CVE-2026-56158

Technical details for CVE-2026-56158 are not publicly available in the provided documents. Monitor for updates as information may be added later.

CVE-2026-54337

Technical details for CVE-2026-54337 are not publicly available in the provided documents. Monitor for updates and new disclosures.

CVE-2026-54520

Technical details for CVE-2026-54520 are not provided in the supplied documents. The entry is reserved with no public details yet. Monitor for updates as information becomes available.

CVE-2026-55494

Technical details for CVE-2026-55494 are not publicly available in the provided documents. Monitor for updates; no information on affected products, root cause, impact, or remediation is available here.

CVE-2026-53582

Technical details are not publicly available in the provided documents for CVE-2026-53582. Monitor for updates and future disclosures; no information on affected products, root cause, impact, or remediation is provided here.

CVE-2026-54597

Technical details for CVE-2026-54597 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-39949

CVE-2026-39949 affects Cacti ≤ 1.2.30. A vulnerability in Cacti’s graph-generation variable substitution engine lets authenticated users with graph-management privileges inject host metadata into RRDtool arguments, enabling remote code execution on the underlying OS. Details are documented by PT-...

CVE-2026-37196

Technical details for CVE-2026-37196 are not publicly available in the provided documents; the entry is reserved. Monitor for updates when details are disclosed.

CVE-2026-39023

Technical details for CVE-2026-39023 are not publicly available in the provided documents; no affected products, roots, or mitigations are disclosed. Monitor for updates.

CVE-2024-33421

CVE-2024-33421 is linked to a concrete vulnerability in the PacketStorm report for Computer Laboratory Management System (CLMS) v1.0. The issue is a Stored Cross-Site Scripting (XSS) vulnerability in CLMS v1.0, affecting the user profile functionality where input in the First Name and Last Name f...

CVE-2024-31509

A SQL Injection vulnerability exists in Computer Laboratory Management System Using PHP and MySQL (LMS) v1.0. The application fails to validate and sanitize user input through the id parameter, allowing an authenticated attacker to manipulate backend SQL queries. Successful exploitation may allow...

CVE-2026-26555

Technical details for CVE-2026-26555 are not publicly provided in the supplied documents. Monitor for updates from CIRCL and the GitHub repo for potential disclosures, PoCs, and remediation guidance.

CVE-2022-42005

CVE-2022-42005 concerns Tesla ODIN/infotainment components where persistence is achieved via svlogd log-rotation. The exploit chain described in the connected GitHub exploit shows root access obtained through the ODIN interface and a subsequent persistence method: replacing the svlogd log-rotatio...

CVE-2026-0211

CVE-2026-0211 is demonstrated as a Nginx QUIC parser dcid_len–based heap buffer overflow. The connected exploit repo shows an RCE/DoS lab targeting Nginx 1.25.3 in a Docker setup, with a defensive patch (CVE-2026-0211-defense.patch) and mitigations (eBPF/XDP, ModSecurity rules). Public details in...

CVE-2024-53667

CVE-2024-53667 is documented in the connected exploit repo as a vulnerability in Struts’ FileUploadInterceptor that can allow path traversal via the multipart field, bypassing sanitization with OGNL parameter manipulation. The exploit relies on sending top.UploadFileName (or uploadFileName[0] in ...