By-Poloss..-..CVE-2026-12432-PoC

CVE-2026-12432: WP Full Stripe Free = 8.4.4 Published : June 26, 2026 Last Updated : June 27, 2026 Researcher : Netwurm - VTDR e.V.i.G. Vulnerability Description The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

CVE-2026-73673

CVE-2026-73673: Netis NC63 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication Original vulnerability research by Özcan Ersan @ozcanpng. This repository documents CVE-2026-73673, discovered and reported by the author. Non-destructive proof-of-concept and evidence...

CVE-2026-101139: Missing Authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CLSA-2026-1790542520 TuxCare security update for undici (1 CVE)

TuxCare rebuilt undici to address 1 CVE. Fixed in 7.28.0-tuxcare.1...

CLSA-2026-1790541935 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.17.1-tuxcare.1...

CLSA-2026-1790541933 TuxCare security update for qs (2 CVEs)

TuxCare rebuilt qs to address 2 CVEs. Fixed in 6.15.3-tuxcare.1...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

CVE-2025-5701

CVE-2025-5701 HyperComments = 1.2.2 - Unauthenticated Subscriber+ Arbitrary Options Update Description The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function...

CLSA-2026-1790520250 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.0.1-tuxcare.1...

PcanExploit

CVE-2024-44610: PEAK PCAN-Ethernet Gateway FD DR Authenticated Root Exploit What is it? This repository contains a Proof-of-Concept PoC exploit that executed code as root on Peak Ethernet gateways. It requires that you know the credentials to the web interface. How to fix it? The vendor has rapid...

WPS-CVE-2022-24934

STAND WITH UKARINE Putin IS CRIMINAL! Warning THIS PROGRAM USE GENERIC WHICH IS INTRODUCED IN GO 1.18, UPGRADE YOUR COMPILER! CVE-2022-24934 Web Server for exploiting this vuln by utilizing wpsupdate.exe Fake WPS Update Server PoC Research Purpose Only. Download file Set the file you want to send...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Affected Software: Notepad++ versions prior to 8.8.9 using the WinGUp updater. Vulnerability Type: Update integrity verification bypass leading to arbitrary code execution. Description: The WinGUp updater fails to properly verify the integrity of update metadata, allowing an attacker who can...

CLSA-2026-1790482357 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 7.2.1-tuxcare.5...

CVE-2024-10557

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: /file/updateprofile.php Vulnerability Description: There is a CSRF vulnerability on this endpoint...

CLSA-2026-1790475892 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 16.2.11-tuxcare.4...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

CVE-2024-11643

CVE-2024-11643 Accessibility by AllAccessible input type="hidden" name="optvalue" value="administrator"...

CLSA-2026-1790466289 TuxCare security update for @angular (3 CVEs)

TuxCare rebuilt 19 @angular packages to address 3 CVEs. Fixed in 6.0.1-tuxcare.6...

CVE-2025-65855

CVE-2025-65855 HelpFlash IoT OTA Update Multiple Vulnerabilities Summary Multiple vulnerabilities in the OTA firmware update mechanism of Netun Solutions HelpFlash IoT allow an attacker with brief physical access to execute arbitrary code. CVE ID: CVE-2025-65855 Severity: HIGH CVSS v3.1 Score: 7....