Recent Advisories

Severity ID Title Vendor Product Date Type
NONE FAF4A621-EF5C-

Exploit for CVE-2026-37066_FAF4A621-EF5C-5980-AED9-2374875BEFF0

CVE-2026-37066 Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project...

N/A N/A GITHUBEXPLOIT
NONE D88591AC-1A96-

Cyber-Arena_D88591AC-1A96-51A6-B286-E77A29ADF076

CyberArena - Cybersecurity Challenge Platform CyberArena is an immersive, interactive cybersecurity training platform designed for students, profes...

N/A N/A GITHUBEXPLOIT
NONE B8B07DAE-91EC-

Exploit for CVE-2026-37071_B8B07DAE-91EC-5A54-AEB8-A14E5FEC47EF

CVE-2026-37071 Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an a...

N/A N/A GITHUBEXPLOIT
NONE E546C8C0-498D-

Exploit for CVE-2026-37072_E546C8C0-498D-59B6-84C9-0388422D0261

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php An una...

N/A N/A GITHUBEXPLOIT
NONE 24D4A1C9-6687-

sql_injection_exploit.sh_24D4A1C9-6687-59B5-944C-CBC0F8CD1746

sqlinjectionexploit.sh SQL Injection attack on DVWA Low Security - Cybersecurity Internship Task 3...

N/A N/A GITHUBEXPLOIT
MEDIUM 4.4 E2CF04E5-7B2B-

Exploit for CVE-2026-48849_E2CF04E5-7B2B-56AE-BB11-79D1448AB6ED

CVE-2026-48849 - Stored XSS, HTML Injection & CSS Injection in Roundcube Webmail Overview This repository contains a Proof-of-Concept PoC for CVE-2...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 FB7C6A6C-C89F-

Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os_FB7C6A6C-C89F-5CF5-BC7F-79EAF5F42258

CVE-2026-0257 testing...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.2 90F0A8EE-51A7-

Exploit for CVE-2026-42945_90F0A8EE-51A7-5AC2-8C97-EEBEED5A9E9B

CVE-2026-42945 — NGINX Rift Critical heap buffer overflow in NGINX's ngxhttprewritemodule, present since 2008 version 0.6.27. Allows unauthenticate...

N/A N/A GITHUBEXPLOIT
HIGH 8.1 D84F8A25-5F36-

Exploit for CVE-2026-10795_D84F8A25-5F36-52AC-B454-01D5ECE7059F

CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC Authentication Bypass Chained to Plugin Installation Executive Summary This repository con...

N/A N/A GITHUBEXPLOIT
NONE 9DC195A7-4619-

Exploit for CVE-2026-38812_9DC195A7-4619-59A4-A49B-5B85CCDD8793

text CVE ID CVE-2026-38812 PRODUCT RuoYi VERSION v4.8.2 PROBLEM TYPE SQL Injection DESCRIPTION RuoYi v4.8.2 is vulnerable to SQL Injection via the ...

N/A N/A GITHUBEXPLOIT