Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 DF2E3CB4-78E1-

Exploit for CVE-2026-1555_DF2E3CB4-78E1-50A5-8D6D-0BAD9ED75E23

CVE-2026-1555: Unauthenticated Arbitrary File Upload in WebStack WordPress Theme Proof of Concept PoC Credits | | | |---|---| | PoC Author: | Secur...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 THN:8375823B34D...

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication_THN:8375823B34DF93A93B46E3192643E1ED

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7NRzSRKbGdsTj1TIWcks4nX5u6n1U2vl5hxJ8KKFZ-JCAKlMQPXQNHA1i0otd63wcKJoZbeEc3oVa9o4uYN...

N/A N/A THN
NONE DE042206-2F9D-

Web-kit-exploit-test_DE042206-2F9D-5911-A266-79D3C324E08D

No description provided...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 B20223AD-B178-

Exploit for CVE-2026-6279_B20223AD-B178-5271-9BDA-0376DF827CFA

CVE-2026-6279...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 9362E5FB-8A5E-

Exploit for CVE-2026-48907_9362E5FB-8A5E-5D90-AEE0-44FA2E7F560E

CVE-2026-48907 Description هذا الملف CVE-2025-9209.py هو أداة استغلال جماعي تعمل على استهداف ثغرة CVE-2025-9209. الوظائف الأساسية: تفحص قائمة مواقع...

N/A N/A GITHUBEXPLOIT
NONE WIRED:B6A7A3320...

The FCC Wants to Kill Burner Phones_WIRED:B6A7A3320F201953AE03CB69723D6E08

Plus: AI bug hunting fuels Microsoft’s biggest-ever Patch Tuesday, ShinyHunters ransomware gang exploits an Oracle zero-day, and more.

N/A N/A WIRED
HIGH 7.2 CVE-2026-5513

Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie_CVE-2026-5513

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-cus...

ladela Online Scheduling and Appointment Booking System – Bookly CVE
NONE C5449C27-7E72-

vader-toctou_C5449C27-7E72-529E-BB3B-A2BECFAFBE53

OPERATION VADER — TOCTOU EXPLOITATION SYLLABUS OPERATIONS ORDER 001-26 VADER Classification: UNCLASSIFIED // ACADEMIC USE ONLY DTG: 130600Z JUN 202...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 1B1A3142-CD90-

Exploit for Improper Access Control in Getgrav Grav-Plugin-Admin_1B1A3142-CD90-5BA0-A772-AC630842FD7C

CVE-2021-21425 - GravCMS Unauthenticated RCE Unauthenticated Remote Code Execution exploit for GravCMS Custom command python3 exploit.py -t http://...

N/A N/A GITHUBEXPLOIT
HIGH 7.8 A0F6718E-3F97-

Exploit for Code Injection in Exiftool_Project Exiftool_A0F6718E-3F97-524C-8420-8BD056FE6751

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded exploit for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 ...

N/A N/A GITHUBEXPLOIT