CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload This application built by Mayurik Pharmacy management system project in PHP has been developed to improve the accuracy and efficiency of pharmaceutical stores through security and management. In short, it is a product inventory applicatio...

sklad

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

EUVD-2026-101988

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and...

CVE-2026-39997 Unauthenticated Remote Input Injection in QNAP HD Station's remotepad

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and...

system_bt_AOSP10_r33_CVE-2022-20229

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

EUVD-2026-101985

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-53882

A path traversal vulnerability exists in Virtualization Station due to improper link resolution before file access (CWE-59) during the VM Import process. A remote attacker with a valid user account can exploit this flaw to compromise system security. The vulnerability is addressed in Virtualizati...

EUVD-2026-101982

An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...

CVE-2026-53882 Path Traversal in Virtualization Station VM Import

An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...

EUVD-2026-101981

An unix symbolic link symlink following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuMagie 2.9.2 a...

EUVD-2026-101979

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-41545

The QuMagie application is affected by a relative path traversal vulnerability. An attacker who has obtained an administrator account can exploit this flaw to access and read the contents of unexpected files or system data . The vulnerability has been addressed in QuMagie version 2.9.1 and later....

CVE-2026-41545 WebSocket timelapse path traversal and command injection

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

EUVD-2026-101978

An unix symbolic link symlink following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync...

CVE-2026-41541

The Qsync Central application is vulnerable to a Unix symbolic link (symlink) following vulnerability (CWE-61) within qsyncsrv.cgi . A remote attacker who has obtained a user account can exploit this flaw to compromise the system's security. Remediation is available in versions 5.0.0.7 , 5.1.0.3 ...

CVE-2026-41541 Symlink creation in qsyncsrv.cgi

An unix symbolic link symlink following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync...

CVE-2026-34015

A path traversal vulnerability (CWE-22) exists in the upload.php component of Video Station . An authenticated remote attacker with a user account can exploit this flaw to read the contents of unexpected files or system data. The vulnerability is mitigated in Video Station version 5.8.8 and later...

EUVD-2026-101976

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...