Protect Web Society

CVE-2026-34573 - Parse Server: GraphQL complexity validator exponential fragment traversal DoS

Maloy Roy Orko March 31, 2026

CVE ID : CVE-2026-34573 Published : March 31, 2026, 4:16 p.m. | 1 hour, 28 minutes ago Descripti…

CVE-2026-21712 - Node.js IDN Malformed URL Crash Vulnerability

Maloy Roy Orko March 30, 2026

CVE ID : CVE-2026-21712 Published : March 30, 2026, 4:16 p.m. | 17 minutes ago Description : A f…

CVE-2026-34005 - Xiongmai DVR/NVR Command Injection Vulnerability

Maloy Roy Orko March 29, 2026

CVE ID : CVE-2026-34005 Published : March 29, 2026, 5:16 p.m. | 1 hour, 15 minutes ago Descripti…

CVE-2026-5002 - PromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection

Maloy Roy Orko March 28, 2026

CVE ID : CVE-2026-5002 Published : March 28, 2026, 5:16 p.m. | 1 hour, 13 minutes ago Descriptio…

CVE-2026-4999 - z-9527 admin isImg Check upload.js uploadFile path traversal

Maloy Roy Orko March 28, 2026

CVE ID : CVE-2026-4999 Published : March 28, 2026, 3:16 p.m. | 1 hour, 13 minutes ago Descriptio…

CVE-2026-28369 - Undertow: undertow: request smuggling via malformed http request headers

Maloy Roy Orko March 27, 2026

CVE ID : CVE-2026-28369 Published : March 27, 2026, 5:16 p.m. | 1 hour, 12 minutes ago Descripti…

CVE-2026-33742 - Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes

Maloy Roy Orko March 26, 2026

CVE ID : CVE-2026-33742 Published : March 26, 2026, 9:17 p.m. | 1 hour, 10 minutes ago Descripti…

CVE-2026-32531 - WordPress Kunco theme < 1.4.5 - Local File Inclusion vulnerability

Maloy Roy Orko March 25, 2026

CVE ID : CVE-2026-32531 Published : March 25, 2026, 5:17 p.m. | 1 hour, 8 minutes ago Descriptio…

CVE-2026-33484 - Langflow has Unauthenticated IDOR on Image Downloads

Maloy Roy Orko March 24, 2026

CVE ID : CVE-2026-33484 Published : March 24, 2026, 2:16 p.m. | 1 hour, 25 minutes ago Descripti…

CVE-2026-4591 - kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection

Maloy Roy Orko March 23, 2026

CVE ID : CVE-2026-4591 Published : March 23, 2026, 3:15 p.m. | 1 hour, 7 minutes ago Description…

CVE-2026-33292 - AVideo has Authorization Bypass via Path Traversal in HLS Endpoint Allows Streaming Private/Paid Videos

Maloy Roy Orko March 22, 2026

CVE ID : CVE-2026-33292 Published : March 22, 2026, 5:17 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2026-4529 - D-Link DHP-1320 SOAP redirect_count_down_page stack-based overflow

Maloy Roy Orko March 21, 2026

CVE ID : CVE-2026-4529 Published : March 21, 2026, 11:16 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2026-4528 - trueleaf ApiFlow URL Validation http_proxy.service.ts validateUrlSecurity server-side request forgery

Maloy Roy Orko March 21, 2026

CVE ID : CVE-2026-4528 Published : March 21, 2026, 10:02 p.m. | 17 minutes ago Description : A v…

CVE-2026-2756 - OmniPEMF NeoRhythm BLE missing authentication

Maloy Roy Orko March 21, 2026

CVE ID : CVE-2026-2756 Published : March 21, 2026, 5:32 p.m. | 47 minutes ago Description : A se…

CVE-2026-4492 - Tenda A18 Pro formSetQosBand set_qosMib_list stack-based overflow

Maloy Roy Orko March 20, 2026

CVE ID : CVE-2026-4492 Published : March 20, 2026, 5:02 p.m. | 1 hour, 15 minutes ago Descriptio…

CVE-2026-30404 - wgcloud SSRF

Maloy Roy Orko March 19, 2026

CVE ID : CVE-2026-30404 Published : March 19, 2026, 4:16 p.m. | 1 hour, 23 minutes ago Descripti…

CVE-2025-55040 - MuraCMS CSRF Form Definition Upload Vulnerability

Maloy Roy Orko March 18, 2026

CVE ID : CVE-2025-55040 Published : March 18, 2026, 4:16 p.m. | 23 minutes ago Description : The…

CVE-2026-4319 - code-projects Simple Food Order System add-item.php sql injection

Maloy Roy Orko March 17, 2026

CVE ID : CVE-2026-4319 Published : March 17, 2026, 5:02 p.m. | 1 hour, 11 minutes ago Descriptio…

CVE-2025-53517 - Cisco None Vulnerability

Maloy Roy Orko March 16, 2026

CVE ID : CVE-2025-53517 Published : March 16, 2026, 5:16 p.m. | 1 hour, 22 minutes ago Descripti…

CVE-2026-4181 - D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

Maloy Roy Orko March 15, 2026

CVE ID : CVE-2026-4181 Published : March 15, 2026, 4:02 p.m. | 2 hours, 8 minutes ago Descriptio…

CVE-2026-4179 - stm32: usb: Infinite while loop in Interrupt Handler

Maloy Roy Orko March 14, 2026

CVE ID : CVE-2026-4179 Published : March 14, 2026, 9:51 p.m. | 2 hours, 15 minutes ago Descripti…

CVE-2026-0849 - crypto: ATAES132A response length allows stack buffer overflow

Maloy Roy Orko March 14, 2026

CVE ID : CVE-2026-0849 Published : March 14, 2026, 9:05 p.m. | 1 hour ago Description : Malforme…

CVE-2026-4092 - Google Apps Script Path Traversal Remote Code Execution Vulnerability

Maloy Roy Orko March 13, 2026

CVE ID : CVE-2026-4092 Published : March 13, 2026, 4:20 p.m. | 1 hour, 17 minutes ago Descriptio…

CVE-2019-25534 - Netartmedia PHP Car Dealer SQL Injection via features parameter

Maloy Roy Orko March 12, 2026

CVE ID : CVE-2019-25534 Published : March 12, 2026, 4:16 p.m. | 1 hour, 21 minutes ago Descripti…

CVE-2026-30741 - OpenClaw Agent Platform Remote Code Execution

Maloy Roy Orko March 11, 2026

CVE ID : CVE-2026-30741 Published : March 11, 2026, 4:16 p.m. | 1 hour, 12 minutes ago Descripti…

CVE-2026-26738 - SpaceSniffer Buffer Overflow Remote Code Execution

Maloy Roy Orko March 10, 2026

CVE ID : CVE-2026-26738 Published : March 10, 2026, 4:20 p.m. | 1 hour, 16 minutes ago Descripti…

CVE-2025-70025 - Benkeen Generatedata Cross-Site Scripting (XSS)

Maloy Roy Orko March 10, 2026

CVE ID : CVE-2025-70025 Published : March 10, 2026, 4:20 p.m. | 1 hour, 16 minutes ago Descripti…

CVE-2026-3845 - "Firefox for Android Audio/Video Playback Heap Buffer Overflow"

Maloy Roy Orko March 10, 2026

CVE ID : CVE-2026-3845 Published : March 10, 2026, 4:20 p.m. | 1 hour, 16 minutes ago Descriptio…

CVE-2026-3846 - Mozilla Firefox CSS Parsing and Computation Same-Origin Policy Bypass

Maloy Roy Orko March 10, 2026

CVE ID : CVE-2026-3846 Published : March 10, 2026, 4:20 p.m. | 1 hour, 16 minutes ago Descriptio…

CVE-2024-14027 - xattr: switch to CLASS(fd)

Maloy Roy Orko March 09, 2026

CVE ID : CVE-2024-14027 Published : March 9, 2026, 4:16 p.m. | 1 hour, 2 minutes ago Description…

CVE-2026-3745 - code-projects Student Web Portal profile.php sql injection

Maloy Roy Orko March 08, 2026

CVE ID : CVE-2026-3745 Published : March 8, 2026, 4:16 p.m. | 59 minutes ago Description : A vul…

CVE-2026-29779 - UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle

Maloy Roy Orko March 07, 2026

CVE ID : CVE-2026-29779 Published : March 7, 2026, 4:15 p.m. | 56 minutes ago Description : Upti…

CVE-2026-1799 - Apache Apache HTTP Server Cross-Site Scripting

Maloy Roy Orko March 06, 2026

CVE ID : CVE-2026-1799 Published : March 6, 2026, 3:16 p.m. | 1 hour, 36 minutes ago Descriptio…

CVE-2025-64166 - Mercurius: Incorrect Content-Type parsing can lead to CSRF attack

Maloy Roy Orko March 05, 2026

CVE ID : CVE-2025-64166 Published : March 5, 2026, 4:16 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2026-28783 - Craft has a Twig Function Blocklist Bypass

Maloy Roy Orko March 04, 2026

CVE ID : CVE-2026-28783 Published : March 4, 2026, 5:16 p.m. | 33 minutes ago Description : Cr…

CVE-2025-62814 - Samsung Exynos Denial of Service Vulnerability

Maloy Roy Orko March 03, 2026

CVE ID : CVE-2025-62814 Published : March 3, 2026, 4:16 p.m. | 1 hour, 28 minutes ago Descripti…

CVE-2025-47384 - Reachable Assertion in FW

Maloy Roy Orko March 02, 2026

CVE ID : CVE-2025-47384 Published : March 2, 2026, 5:16 p.m. | 31 minutes ago Description : Tr…

CVE-2026-3400 - Tenda AC15 TextEditingConversion stack-based overflow

Maloy Roy Orko March 01, 2026

CVE ID : CVE-2026-3400 Published : March 2, 2026, 12:16 a.m. | 1 hour, 28 minutes ago Descripti…

CVE-2026-3398 - Tenda F453 httpd AdvSetWan fromAdvSetWan buffer overflow

Maloy Roy Orko March 01, 2026

CVE ID : CVE-2026-3398 Published : March 1, 2026, 10:16 p.m. | 1 hour, 28 minutes ago Descripti…