Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.2 CVE-2026-12490

Bypass of client certificate verification with transfer over TLS_CVE-2026-12490

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no...

NLnet Labs NSD 4.10.1 CVE
HIGH 7.2 CVE-2026-12246

Out of bounds stack write with crafted APL RR_CVE-2026-12246

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite...

NLnet Labs NSD 4.14.0 CVE
HIGH 8.7 CVE-2026-12245

Denial of DNS over TLS service by any DoT client_CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be tri...

NLnet Labs NSD 4.13.0 CVE
HIGH 8.7 CVE-2026-12244

Heap overflow and crash with crafted SVCB RR_CVE-2026-12244

If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted S...

NLnet Labs NSD 4.14.0 CVE
MEDIUM 5.5 CVE-2026-56129

CVE-2026-56129_CVE-2026-56129

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A l...

Dynabook Inc. Generic IO & Memory Access driver all versions CVE
HIGH 7.5 CVE-2026-12937

Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter_CVE-2026-12937

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection vi...

themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin CVE
NONE 404F4C76-2BDC-

poc-csharp-aspnetcore_404F4C76-2BDC-55A7-B4CC-6F3482077AF1

poc-csharp-aspnetcore A sample ASP.NET Core C application used as a target for evaluating security scanning tools SAST, SCA/SBOM, and secrets scann...

N/A N/A GITHUBEXPLOIT
HIGH 8.1 F078596F-EF09-

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple_F078596F-EF09-5AD1-A7D9-223B4CA40A59

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes...

N/A N/A GITHUBEXPLOIT
NONE C19F23D2-6794-

WebPentest_C19F23D2-6794-52D2-9EB6-2833F0E74D9F

🕷️ WebPentest — Web Application Penetration Testing Tool Automated web vulnerability scanner: SQL Injection, XSS, Directory Bruteforcing, Security ...

N/A N/A GITHUBEXPLOIT
NONE AE798A73-94B1-

Website-Vulnerability–Scan_AE798A73-94B1-543D-9EB0-DF84B735FDFF

Website-Vulnerability--Scan AN EASY TO USE PYTHON WEB SCANNER THAT IDENTIFIES SECURTY VULNERABILYTIES LIKE : SQL, injection, XSS, and missing heade...

N/A N/A GITHUBEXPLOIT