CVE-2024-2748

A Cross Site Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker to execute unauthorized actions on behalf of an unsuspecting user. A mitigating factor is that user interaction is required. This vulnerability affected GitHub Enterprise Server 3.12.0 a...

CVE-2024-2282

A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component Login Page. The manipulation of the argument useremail leads to sql injection. The attack may be initiated...

GHSA-G623-JCGG-MHMM vulnerabilities

Vulnerabilities for packages: argo-cd...

EUVD-2026-0970

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712...

EUVD-2026-0859

flagd: Multiple Go Runtime CVEs Impact Security and Availability...

EUVD-2026-0916

A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality of the file /admin/system/variableSave.do of the component System Variables Page. Performing a manipulation of the argument Description results in cross site scripting. The attac...

defacemeter

DefaceMeter DefaceMeter is a small, static, browser-based pro...

EUVD-2026-0031

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

EUVD-2026-0313

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0307

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0405

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0469

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0581

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0632

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

PT-2026-1149

CVE-2025-22185 - Apache Tomcat HTTP Request Smuggling CVE ID : CVE-2025-22185 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit...

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin = 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Marcin Dudek dudekmar - CERT.PL in WordPress Plugin PostX versions = 5.0.3...

EUVD-2025-205795

Malicious code in cdd-plugin-for-datawarrior npm...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 React2Shell Dork Scanner ---...

CVE-2025-15099

A vulnerability was identified in simstudioai sim up to 0.5.27. This vulnerability affects unknown code of the file apps/sim/lib/auth/internal.ts of the component CRON Secret Handler. The manipulation of the argument INTERNALAPISECRET leads to improper authentication. It is possible to initiate t...

Linux Distros Unpatched Vulnerability : CVE-2023-54015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have...