CVE-2026-82539

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

CVE-2026-82488

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

Log4Shell-CVE-2021-44228-

Log4Shell CVE-2021-44228 - SOC Report Analysis Overview This repository contains a comprehensive Security Operations Center SOC analysis of Log4Shell CVE-2021-44228 , one of the most critical vulnerabilities discovered in 2021. The vulnerability affects the Apache Log4j logging library and poses ...

CVE-2026-82486

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82539

A memory corruption vulnerability in the setMacFilterRules function of cstecgi.cgi (MAC Filtering component) in TOTOLINK A720R firmware 4.1.5cu.630_B20250509 allows a remote, authenticated attacker to corrupt memory by manipulating the desc argument. CVSS 3.1 scores the issue 9.1 (Critical) with ...

CVE-2026-82539 TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

EUVD-2026-68181

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

Exploit for CVE-2026-18741

CVE-2026-18741 - Stored XSS in Worksuite SaaS...

CVE-2026-82488 Beetel 450TC3 User Management cross site scripting

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-82488 Beetel 450TC3 User Management cross site scripting

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-82488

A stored cross-site scripting vulnerability in the Beetel 450TC3 router (firmware 01.00.00_01 ) is triggered by manipulating the Username argument in the User Management component. An attacker with low privileges and requiring user interaction can execute scripts in a victim's browser, leading to...

EUVD-2026-68180

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

poc_validator

PoC Validator Problem curl's bug bounty program was closed...

CVE-2020-25273

CVE-2020-25273 Online Bus Booking System 1.0, existe una omisión de autenticación en la pantalla de inicio de sesión de administrador en admin.php mediante inyección SQL en el nombre de usuario o la contraseña. Vendor - SourceCodester Product...

CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82486

A vulnerability in SiteServer SSCMS 7.4.0 affects the Agent Installation Workflow component, where improper access controls are triggered by manipulating the SecurityKey argument. The attack is remotely exploitable but rated as high complexity and difficult to execute . CVSS 3.1 scores it 5.0 (Me...

CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

EUVD-2026-68176

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483 coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...