Login
[webapps] Grav CMS 2.0.0-beta.2 - Remote Code Execution
Grav CMS 2.0.0-beta.2 - Remote Code Execution
Reading view
[webapps] Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
[hardware] D-Link DSL2600U - 'rom-0' Admin Password Disclosure
D-Link DSL2600U - 'rom-0' Admin Password Disclosure
[webapps] Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover
Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover
[webapps] cPanel - CRLF Injection
cPanel - CRLF Injection
[local] Linux Kernel 6.8 - Local Privilege Escalation
Linux Kernel 6.8 - Local Privilege Escalation
[webapps] Cockpit 359 - RCE
Cockpit 359 - RCE
[webapps] BookStack 25.12.1 - Denial of Service
BookStack 25.12.1 - Denial of Service
[local] Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
[webapps] solaredge - (CSRF-OOB-Injection)
solaredge - (CSRF-OOB-Injection)
[webapps] FUXA 1.2.9 - RCE
FUXA 1.2.9 - RCE
[local] Windows Snipping Tool - NTLMv2 Hash Hijack
Windows Snipping Tool - NTLMv2 Hash Hijack
[local] Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing
Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing
[local] Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution
Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution
[webapps] WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
[webapps] Apache HertzBeat 1.8.0 - Remote Code Execution
Apache HertzBeat 1.8.0 - Remote Code Execution
[webapps] ePati Antikor NGFW 2.0.1301 - Authentication Bypass
ePati Antikor NGFW 2.0.1301 - Authentication Bypass
[webapps] PJPROJECT 2.16 - Heap Bufferoverflow
PJPROJECT 2.16 - Heap Bufferoverflow
[webapps] Ninja Forms Uploads - Unauthenticated PHP File Upload
Ninja Forms Uploads - Unauthenticated PHP File Upload
[webapps] glances 4.5.2 - command injection
glances 4.5.2 - command injection
