Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 87C9F950-698A-

Exploit for Stack-based Buffer Overflow in Microsoft_87C9F950-698A-5A31-A619-957FBA51CBE0

CVE-2026-41089 - Security Buffer Overflow Quick Usage bash python3 exploit.py -t "C:\\Path\\To\\Target" -o demo.zip --data-file payload.exe Exploit...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 088050CB-EA94-

-CyberPentest-Plugin-Claude-Code_088050CB-EA94-5CF8-B3D0-6CAF60984803

🔐 CyberPentest Plugin — Claude Code Plugin de pentest offensif intégré à Claude Code. Lance nmap, sqlmap, nuclei, gobuster et recherche automatiqu...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 CVE-2026-42684

WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability_CVE-2026-42684

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injectio...

Ahmad WP Job Portal n/a CVE
CRITICAL 9.8 24F04D01-BD33-

Exploit for CVE-2026-8206_24F04D01-BD33-5E2E-AD1D-CA3966227567

CVE-2026-8206 - Kirki WordPress Plugin Mass Exploit Mass exploitation tool for CVE-2026-8206 – a critical vulnerability in the Kirki WordPress plug...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 CVE-2026-34906

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia_CVE-2026-34906

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpo...

Simple SA Wirtualna Uczelnia CVE
CRITICAL 9.8 CVE-2025-53209

WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability_CVE-2025-53209

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS PRO: fro...

Themeisle Masteriyo LMS PRO n/a CVE
CRITICAL 9.8 ACB372C1-16C6-

Exploit for Missing Authentication for Critical Function in Coreweave Marimo_ACB372C1-16C6-5ED3-B493-7F4AE7C5E504

CVE-2026-39987 - a full PTY shell Unauthenticated Stored Cross-Site Scripting Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Avai...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.9 92F10C51-99EC-

Exploit for Improper Control of Dynamically-Managed Code Resources in Nocobase_92F10C51-99EC-5FAC-AF95-11D0B6BFF73A

CVE-2026-34156 – NocoBase Sandbox Escape RCE -orange Authenticated Remote Code Execution in NocoBase versions ≤ 2.0.26 via workflow sandbox escape....

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 CC7CD69F-1974-

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector_CC7CD69F-1974-569F-950F-4CDEA50F0227

CVE-2026-23744 --- Description MCPJam inspector is a local-first development platform for MCP servers. The versions =1.4.2 are vulnerable to remote...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 CVE-2026-8206

Kirki 6.0.0 – 6.0.6 – Unauthenticated Privilege Escalation via ‘handle_forgot_password’_CVE-2026-8206

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in ...

themeum Kirki – Freeform Page Builder, Website Builder & Customizer 6.0.0 CVE