Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.4 B4B4CA7A-D754-

Exploit for OS Command Injection in Devcode Openstamanager_B4B4CA7A-D754-5C31-B526-5E199D0B91D5

CVE-2025-69212 OpenSTAManager --check Vulnerability Check bash Auto-detect plugin and verify vulnerability python3 exploit.py -t http://target.com ...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 0EB7005F-1AF8-

Nessus-CVE-POC-Finder_0EB7005F-1AF8-5D82-BFB3-0885D0E7AA8B

Nessus-CVE-POC-Finder Python script to parse .nessus file, extract CVE numbers, and search for exploits using "searchsploit". Usage usage: Nessus-C...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 DCB07824-2947-

Exploit for Improper Authentication in Oracle E-Business_Suite_DCB07824-2947-51F9-8738-1630098A0772

CVE-2026-46817 Proof of Concept Oracle E-Business Suite File Transmission Path Traversal --- ⚠️ LEGAL DISCLAIMER THIS SOFTWARE IS PROVIDED FOR EDUC...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 CVE-2026-8402

SQLi in Exagate’s SYSGUARD 6001_CVE-2026-8402

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Eksagate Electronic Engineering and Computer ...

Eksagate Electronic Engineering and Computer Industry Trade Inc. SYSGUARD 6001 2.0.2 CVE
CRITICAL 9.3 CVE-2026-53690

SQL Injection in Redeight CMS_CVE-2026-53690

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The ...

Redeight Redeight CMS 1.0 CVE
CRITICAL 9.3 CVE-2026-14162

Advantech｜Hospital Quering Management – Missing Authentication_CVE-2026-14162

Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access...

Advantech Hospital Quering Management CVE
CRITICAL 9.5 CVE-2026-44946

SAML Authentication Replay in Rancher_CVE-2026-44946

A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, po...

SUSE Rancher 2.14.0 CVE
CRITICAL 10 THN:92496BE41BB...

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer_THN:92496BE41BBB472864D9FF3429DE96A7

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEid1CxvsX2dPrKoA1VzJ6PUhwrXxvSC4ehRmgyaRRCJlP_MFSeOxvwrT2ODJSbQx3E-7bBwBG4YpP3CQGLz...

N/A N/A THN
CRITICAL 9.8 CVE-2026-9711

EventON – WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter_CVE-2026-9711

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full) is vulnerable to SQL Injection via the WordPress 'search' paramet...

EventON EventON (Pro) - WordPress Virtual Event Calendar Plugin CVE
CRITICAL 9.3 CVE-2026-12076

SQL Injection in Raytha CMS_CVE-2026-12076

Raytha CMS is vulnerable to SQL Injection within the OData filter parsing pipeline. The vulnerability allows a remote, unauthenticated attacker to...

Raytha Raytha 1.5.2 CVE