Image
Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2026-02-15
Low
WordPress Plugin Ajax Upload for Gravity Forms - Arbitrary File Upload
 CVE CWE Remote UnM@SK
Low
Roundcube Webmail DOM-based XSS Exploit via SVG href Attribute
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-14
High
motionEye 0.43.1b4 RCE
 CVE Remote prabhatverma47
High
Siklu EtherHaul Series EH-8010 Remote Command Execution
 CVE CWE Remote semaja2
High
ClipBucket 5.5.0 Arbitrary File Upload
 CVE CWE Remote Mukundsinh Solanki (r0...
High
Windows 11 25H2 Hyper-V CVE-2026-21248 Heap Overflow + Ghost Patch Exploit Framework
 CVE Local nu11secur1ty
Med.
ProgressBar 2 4.5.0 - Unbounded Resource Consumption DoS
 CVE Local cardosource
2026-02-05
High
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
 CVE Remote Beatriz Fresno Naumova
Med.
aiohttp 3.9.1 Directory Traversal
 CVE Remote Beatriz Fresno Naumova
Low
Piranha CMS 12.0 - Stored Cross Site Scripting
 CVE Remote Chidubem Chukwu
2026-02-02
Low
Piranha CMS 12.0 Stored XSS in Text Block
 CVE CWE Remote Chidubem Chukwu
Med.
Django 5.1.13 SQL Injection
 CVE CWE Remote Wafcontrol Security Te...
High
Linux Kernel 5.8 < 5.15.25 - Local Privilege Escalation (DirtyPipe 2)
 CVE Local Max Kellermann
2026-01-26
High
LangChain Core - Serialization Injection to Jinja2 SSTI/RCE
 CVE Remote Mohammed Idrees Banyam...
Low
LayerSlider 7.9.5 – Unauthenticated SQL Injection
 CVE CWE Remote RERO
2026-01-25
High
Telnet Argument Injection Privilege Escalation - RCE
 CVE Remote nu11secur1ty
2026-01-20
Low
Chamillo LMS 1.11.2 Missing Cache Header
 CVE Remote Rivek
2026-01-18
Med.
phpIPAM 1.4 SQL-Injection
 CVE Remote CodeSecLab
2026-01-14
High
n8n Workflow Expression Remote Code Execution
 CVE Remote Lukas Johannes Möller
2026-01-12
Med.
WordPress Quiz Maker 6.7.0.56 SQL Injection
 CVE CWE Remote Rahul Sreenivasan
2025-12-28
Low
Birth Chart Compatibility WordPress Plugin 2.0 Full Path Disclosure
 CVE Remote Byte Reaper
2025-12-27
Low
RosarioSIS 6.7.2 Cross Site Scripting (XSS)
 CVE CWE Remote CodeSecLab
2025-12-24
High
Ultimate Interactive Exploitation Framework for CVE-2025-55182 (React2Shell)
 CVE Remote nu11secur1ty
2025-12-21
Med.
openSIS Community Edition 8.0 SQL Injection
 CVE CWE Remote CodeSecLab
2025-12-17
Med.
Summar Employee Portal 3.98.0 Authenticated SQL Injection
 CVE CWE Remote Peter Gabaldon
Med.
dotCMS 25.07.02-1 Authenticated Blind SQL Injection
 CVE CWE Remote Matan Sandori
Med.
Soosyze CMS 2.0 Brute Force Login
 CVE CWE Remote Beatriz Fresno Naumova
2025-12-14
Med.
Windows LNK File UI Misrepresentation Remote Code Execution
 CVE Remote nu11secur1ty
Low
phpMyFAQ 3.1.7 Reflected Cross-Site Scripting (XSS)
 CVE CWE Remote CodeSecLab
High
Pluck 4.7.7-dev2 PHP Code Execution
 CVE Remote CodeSecLab
Med.
NetBT e-Fatura 'InboxProcessor' Unquoted Service Path Privilege Escalation
 CVE CWE Local Seccops
2025-12-09
High
Mbed TLS 3.6.4 Use-After-Free
 CVE Remote Byte Reaper
Med.
BigAnt Office Messenger 5.6.06 SQL Injection
 CVE CWE Remote Nicat Abbasov
Med.
phpIPAM 1.5.1 SQL Injection
 CVE CWE Remote CodeSecLab
High
XWiki Platform 15.10.10 Metasploit Module for Remote Code Execution (RCE)
 CVE Remote Maksim Rogov
2025-12-01
Med.
MonstaFTP Unauthenticated File Upload
 CVE CWE Remote ibrahimsql
2025-11-24
High
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446
 CVE Remote nu11secur1ty
High
Royal Elementor Addons - Unauthenticated Remote Code Execution
 CVE CWE Remote ibrahimsql
Med.
Oracle WebLogic Server and allows remote code execution
 CVE Remote nu11secur1ty
2025-11-17
High
Fortinet FortiWeb Auth. Bypass
 CVE Remote nu11secur1ty
2025-11-04
Low
ModernShop - RXSS
 CVE CWE Remote CraCkEr
High
Desktop Window Manager (DWM) Core Library — Heap-based Buffer Overflow (sanitized evidence)
 CVE Local nu11secur1ty
2025-11-01
High
Exim tls-openssl.c — Use-After-Free: unauthenticated Remote Code Execution
 CVE CWE Remote CyberSploit
Low
Wisenshop - Stored XSS
 CVE CWE Remote CraCkEr
High
Flowise 3.0.4 Remote Code Execution
 CVE Remote nltt0
2025-10-29
Med.
GeoVision ASManager Windows Application 6.1.2.0 Credentials Disclosure
 CVE Remote Giorgi Dograshvili
Low
Swagger UI 1.0.3 Cross-Site Scripting (XSS)
 CVE CWE Remote ByteReaper0
2025-10-27
High
WordPress Backup Migration 1.3.7: Remote Command Execution
 CVE Remote DANG
2025-10-12
Low
Perfex CRM Chatbot Cross Site Scripting
 CVE Remote Ajansha
2025-10-09
Low
DirectAdmin v1.680 DOM Injection via return-to Parameter
 CVE Remote Scott Sturrock
2025-10-07
High
SugarCRM unauthenticated Remote Code Execution (RCE)
 CVE Remote DANG
2025-10-05
Low
ERPNext 15.67.0 / Frappe 15.72.4 Cross Site Scripting
 CVE Remote Mohammed Aloli
2025-10-01
Low
nopCommerce 4.40.3 - Stored Cross-Site Scripting (XSS)
 CVE Remote Scott Sturrock
Med.
DirectAdmin v1.680 DOM Injection via return-to Parameter (UI Misrepresentation)
 CVE Remote Scott Sturrock
2025-09-30
High
StoryChief Wordpress Plugin 1.0.42 Arbitrary File Upload
 CVE CWE Remote xpl0dec
High
Belkin F9K1009 F9K1010 2.00.04/2.00.09 Hard Coded Credentials
 CVE Remote Byte
2025-09-21
High
aaPanel 7.x.x Remote Command Execution
 CVE Remote Alasdair Gorniak
2025-09-14
High
Sitecore XP Post-Authentication File Upload
 CVE Remote Piotr Bazydlo
2025-09-04
High
GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution
 CVE Remote Giorgi Dograshvili
Low
WordPress Plugin WP Publications <= 1.2 - Admin+ Stored XSS
 CVE Remote Zeynalxan Quliyev, Rav...
Copyright 2026, cxsecurity.com

 

Back to Top