Recent Advisories

Severity ID Title Vendor Product Date Type
NONE FAF4A621-EF5C-

Exploit for CVE-2026-37066_FAF4A621-EF5C-5980-AED9-2374875BEFF0

CVE-2026-37066 Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project...

N/A N/A GITHUBEXPLOIT
NONE D88591AC-1A96-

Cyber-Arena_D88591AC-1A96-51A6-B286-E77A29ADF076

CyberArena - Cybersecurity Challenge Platform CyberArena is an immersive, interactive cybersecurity training platform designed for students, profes...

N/A N/A GITHUBEXPLOIT
NONE B8B07DAE-91EC-

Exploit for CVE-2026-37071_B8B07DAE-91EC-5A54-AEB8-A14E5FEC47EF

CVE-2026-37071 Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an a...

N/A N/A GITHUBEXPLOIT
NONE E546C8C0-498D-

Exploit for CVE-2026-37072_E546C8C0-498D-59B6-84C9-0388422D0261

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php An una...

N/A N/A GITHUBEXPLOIT
NONE 24D4A1C9-6687-

sql_injection_exploit.sh_24D4A1C9-6687-59B5-944C-CBC0F8CD1746

sqlinjectionexploit.sh SQL Injection attack on DVWA Low Security - Cybersecurity Internship Task 3...

N/A N/A GITHUBEXPLOIT
NONE MALWAREBYTES:A1...

A week in security (June 8 – June 14)_MALWAREBYTES:A1CEB0E4C217C2EBFF41B26DA0B035F9

Last week on Malwarebytes Labs: * Stolen iPhones could soon be worth a lot less to thieves * Fake verification pages are stealing Steam accoun...

N/A N/A MALWAREBYTES
NONE THN:9116A77898E...

Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts_THN:9116A77898EC8EE45393221837A936E9

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-L0YMpJQcSqCJeQR6NevaPeBZW1uc13Y3nV37mR6tEuSsuMxWV6RrohLtgsVqG_Ja_kBoZTAMcKXlaG-Ofy...

N/A N/A THN
NONE 9DC195A7-4619-

Exploit for CVE-2026-38812_9DC195A7-4619-59A4-A49B-5B85CCDD8793

text CVE ID CVE-2026-38812 PRODUCT RuoYi VERSION v4.8.2 PROBLEM TYPE SQL Injection DESCRIPTION RuoYi v4.8.2 is vulnerable to SQL Injection via the ...

N/A N/A GITHUBEXPLOIT
NONE 1E3DE00B-953D-

Exploit for CVE-2026-36826_1E3DE00B-953D-5D10-9EA1-764534FCBE4E

CVE-2026-36826: SQL Injection in genesisQL = 1.1.1 Summary genesisQL 1.1.1 is vulnerable to SQL Injection in the checkPassword function. User-suppl...

N/A N/A GITHUBEXPLOIT
NONE 1D940885-262E-

VulnPilot_1D940885-262E-5384-8817-131B4DFEDE9E

VulnPilot VulnPilot is an automation framework for vulnerability disclosure workflows. It coordinates target scouting, environment deployment, code...

N/A N/A GITHUBEXPLOIT