Protect Web Society

CVE-2022-50992 - Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet

Maloy Roy Orko April 30, 2026

CVE ID : CVE-2022-50992 Published : April 30, 2026, 5:16 p.m. | 1 hour, 26 minutes ago Descripti…

CVE-2026-6914 - MD5 checksum creation may cause availability loss

Maloy Roy Orko April 29, 2026

CVE ID : CVE-2026-6914 Published : April 29, 2026, 5:16 p.m. | 24 minutes ago Description : Comp…

CVE-2026-0206 - SonicOS Stack-based Buffer Overflow Vulnerability

Maloy Roy Orko April 29, 2026

CVE ID : CVE-2026-0206 Published : April 29, 2026, 5:16 p.m. | 24 minutes ago Description : A po…

CVE-2026-0205 - SonicOS Path Traversal Vulnerability

Maloy Roy Orko April 29, 2026

CVE ID : CVE-2026-0205 Published : April 29, 2026, 5:16 p.m. | 24 minutes ago Description : A po…

CVE-2026-0204 - SonicOS Unauthenticated Access Control Bypass

Maloy Roy Orko April 29, 2026

CVE ID : CVE-2026-0204 Published : April 29, 2026, 5:16 p.m. | 24 minutes ago Description : A vu…

CVE-2026-7290 - JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection

Maloy Roy Orko April 28, 2026

CVE ID : CVE-2026-7290 Published : April 28, 2026, 4:30 p.m. | 2 hours, 3 minutes ago Descriptio…

CVE-2026-41464 - ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php

Maloy Roy Orko April 27, 2026

CVE ID : CVE-2026-41464 Published : April 27, 2026, 3:10 p.m. | 50 minutes ago Description : Pro…

CVE-2026-41463 - ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php

Maloy Roy Orko April 27, 2026

CVE ID : CVE-2026-41463 Published : April 27, 2026, 3:09 p.m. | 51 minutes ago Description : Pro…

CVE-2026-41462 - ProjeQtor < 12.4.4 Unauthenticated SQL Injection via Login

Maloy Roy Orko April 27, 2026

CVE ID : CVE-2026-41462 Published : April 27, 2026, 3:08 p.m. | 52 minutes ago Description : Pro…

CVE-2026-7134 - code-projects Online Lot Reservation System edithousepic.php unrestricted upload

Maloy Roy Orko April 27, 2026

CVE ID : CVE-2026-7134 Published : April 27, 2026, 3 p.m. | 1 hour ago Description : A vulnerabi…

CVE-2026-7055 - Tenda F456 httpd VirtualSer fromVirtualSer buffer overflow

Maloy Roy Orko April 26, 2026

CVE ID : CVE-2026-7055 Published : April 26, 2026, 6 p.m. | 1 hour, 59 minutes ago Description :…

CVE-2026-7053 - Tenda F456 httpd L7Prot frmL7ProtForm buffer overflow

Maloy Roy Orko April 26, 2026

CVE ID : CVE-2026-7053 Published : April 26, 2026, 4 p.m. | 1 hour, 59 minutes ago Description :…

CVE-2026-6986 - Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification

Maloy Roy Orko April 25, 2026

CVE ID : CVE-2026-6986 Published : April 25, 2026, 5:16 p.m. | 42 minutes ago Description : A se…

CVE-2026-6985 - Cesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop

Maloy Roy Orko April 25, 2026

CVE ID : CVE-2026-6985 Published : April 25, 2026, 5:16 p.m. | 42 minutes ago Description : A we…

CVE-2026-6989 - Tenda F453 Telnet Service telnet TendaTelnet command injection

Maloy Roy Orko April 25, 2026

CVE ID : CVE-2026-6989 Published : April 25, 2026, 5:15 p.m. | 43 minutes ago Description : A vu…

CVE-2026-6988 - Tenda HG10 Boa Service formRouting formRoute buffer overflow

Maloy Roy Orko April 25, 2026

CVE ID : CVE-2026-6988 Published : April 25, 2026, 5 p.m. | 58 minutes ago Description : A flaw …

CVE-2025-59308 - Mahara Impersonation Vulnerability

Maloy Roy Orko April 24, 2026

CVE ID : CVE-2025-59308 Published : April 24, 2026, 4:16 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2026-31533 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

Maloy Roy Orko April 23, 2026

CVE ID : CVE-2026-31533 Published : April 23, 2026, 3:11 p.m. | 2 hours, 38 minutes ago Descript…

CVE-2026-39087 - Ntfy Arbitrary Code Execution Vulnerability

Maloy Roy Orko April 23, 2026

CVE ID : CVE-2026-39087 Published : April 23, 2026, 4:16 p.m. | 19 minutes ago Description : An …

CVE-2025-50229 - Jizhicms SQL Injection Vulnerability

Maloy Roy Orko April 23, 2026

CVE ID : CVE-2025-50229 Published : April 23, 2026, 4:16 p.m. | 19 minutes ago Description : Jiz…

CVE-2026-40517 - radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names

Maloy Roy Orko April 22, 2026

CVE ID : CVE-2026-40517 Published : April 22, 2026, 10:16 p.m. | 1 hour, 24 minutes ago Descript…

CVE-2026-33609 - LDAP DN injection

Maloy Roy Orko April 22, 2026

CVE ID : CVE-2026-33609 Published : April 22, 2026, 2:16 p.m. | 1 hour, 23 minutes ago Descripti…

CVE-2026-38835 - Tenda W30E Command Injection Vulnerability

Maloy Roy Orko April 21, 2026

CVE ID : CVE-2026-38835 Published : April 21, 2026, 5:16 p.m. | 49 minutes ago Description : Ten…

CVE-2025-66954 - Buffalo Link Station Authentication Bypass

Maloy Roy Orko April 20, 2026

CVE ID : CVE-2025-66954 Published : April 20, 2026, 5:16 p.m. | 1 hour, 4 minutes ago Descriptio…

CVE-2026-6560 - H3C Magic B0 aspForm Edit_BasicSSID buffer overflow

Maloy Roy Orko April 19, 2026

CVE ID : CVE-2026-6560 Published : April 19, 2026, 7:16 a.m. | 1 hour, 26 minutes ago Descriptio…

CVE-2026-6559 - Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting

Maloy Roy Orko April 19, 2026

CVE ID : CVE-2026-6559 Published : April 19, 2026, 6:16 a.m. | 26 minutes ago Description : A we…

CVE-2026-6056 - CVE-2021-1234: Apache Struts Unvalidated Deserialization Vulnerability

Maloy Roy Orko April 18, 2026

CVE ID : CVE-2026-6056 Published : April 18, 2026, 11:16 p.m. | 1 hour, 25 minutes ago Descripti…

CVE-2025-65104 - Firebird: Information leak vulnerability in firebird3 client when used with newer server

Maloy Roy Orko April 17, 2026

CVE ID : CVE-2025-65104 Published : April 17, 2026, 6:16 p.m. | 24 minutes ago Description : Fir…

CVE-2026-40518 - ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

Maloy Roy Orko April 17, 2026

CVE ID : CVE-2026-40518 Published : April 17, 2026, 5:17 p.m. | 1 hour, 23 minutes ago Descripti…

CVE-2026-33804 - @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option

Maloy Roy Orko April 16, 2026

CVE ID : CVE-2026-33804 Published : April 16, 2026, 3:17 p.m. | 53 minutes ago Description : @fa…

CVE-2026-30656 - "Fio NULL Pointer Dereference Vulnerability"

Maloy Roy Orko April 16, 2026

CVE ID : CVE-2026-30656 Published : April 16, 2026, 3:17 p.m. | 53 minutes ago Description : A N…

CVE-2026-30459 - Daylight Studio FuelCMS Password Reset Token Disclosure

Maloy Roy Orko April 16, 2026

CVE ID : CVE-2026-30459 Published : April 16, 2026, 3:17 p.m. | 53 minutes ago Description : An …

CVE-2026-20059 - Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

Maloy Roy Orko April 15, 2026

CVE ID : CVE-2026-20059 Published : April 15, 2026, 5:17 p.m. | 59 minutes ago Description : A v…

CVE-2026-32225 - Windows Shell Security Feature Bypass Vulnerability

Maloy Roy Orko April 14, 2026

CVE ID : CVE-2026-32225 Published : April 14, 2026, 4:58 p.m. | 1 hour ago Description : None S…

CVE-2025-63743 - Snipe-IT Cross-Site Scripting (XSS)

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2025-63743 Published : April 13, 2026, 4:16 p.m. | 53 minutes ago Description : Cro…

CVE-2025-31991 - HCL DevOps Velocity is susceptible to brute-force attacks

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2025-31991 Published : April 13, 2026, 4:16 p.m. | 53 minutes ago Description : Rat…

CVE-2026-6190 - itsourcecode Construction Management System employees.php sql injection

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2026-6190 Published : April 13, 2026, 4:15 p.m. | 54 minutes ago Description : A vu…

CVE-2026-6189 - SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2026-6189 Published : April 13, 2026, 4 p.m. | 1 hour, 9 minutes ago Description : …

CVE-2026-40393 - Mesa WebGPU Out-of-Bounds Memory Access Vulnerability

Maloy Roy Orko April 12, 2026

CVE ID : CVE-2026-40393 Published : April 12, 2026, 7:16 p.m. | 1 hour, 52 minutes ago Descripti…

CVE-2026-6107 - 1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting

Maloy Roy Orko April 11, 2026

CVE ID : CVE-2026-6107 Published : April 12, 2026, 1:16 a.m. | 1 hour, 52 minutes ago Descriptio…

CVE-2026-6106 - 1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting

Maloy Roy Orko April 11, 2026

CVE ID : CVE-2026-6106 Published : April 11, 2026, 10:15 p.m. | 53 minutes ago Description : A v…

CVE-2026-31845 - Rukovoditel CRM Zadarma Telephony API Reflected XSS

Maloy Roy Orko April 11, 2026

CVE ID : CVE-2026-31845 Published : April 11, 2026, 6:26 p.m. | 42 minutes ago Description : A p…

CVE-2026-35601 - Vikunja has an iCalendar Property Injection via CRLF in CalDAV Task Output

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35601 Published : April 10, 2026, 4:08 p.m. | 57 minutes ago Description : Vik…

CVE-2026-35600 - Vikunja has HTML Injection via Task Titles in Overdue Email Notifications

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35600 Published : April 10, 2026, 4:07 p.m. | 59 minutes ago Description : Vik…

CVE-2026-35599 - Vikunja has an Algorithmic Complexity DoS in Repeating Task Handler

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35599 Published : April 10, 2026, 4:05 p.m. | 1 hour ago Description : Vikunja…

CVE-2026-35598 - Vikunja has Missing Authorization on CalDAV Task Read

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35598 Published : April 10, 2026, 4:04 p.m. | 1 hour, 2 minutes ago Descriptio…

CVE-2026-39983 - FTP Command Injection via CRLF in basic-ftp

Maloy Roy Orko April 09, 2026

CVE ID : CVE-2026-39983 Published : April 9, 2026, 6:17 p.m. | 46 minutes ago Description : basi…

CVE-2024-1490 - Wago: Vulnerability in WBM through Open VPN

Maloy Roy Orko April 09, 2026

CVE ID : CVE-2024-1490 Published : April 9, 2026, 11:16 a.m. | 1 hour, 45 minutes ago Descriptio…

CVE-2026-21388 - Unbounded Request Body Read in MS Teams Plugin Webhook Endpoint

Maloy Roy Orko April 09, 2026

CVE ID : CVE-2026-21388 Published : April 9, 2026, 10:09 a.m. | 52 minutes ago Description : Mat…

CVE-2026-34722 - Zammad is missing authorization in ticket create endpoint

Maloy Roy Orko April 08, 2026

CVE ID : CVE-2026-34722 Published : April 8, 2026, 6:13 p.m. | 47 minutes ago Description : Zamm…

CVE-2026-35604 - File Browser share links remain accessible after Share/Download permissions are revoked

Maloy Roy Orko April 07, 2026

CVE ID : CVE-2026-35604 Published : April 7, 2026, 5:16 p.m. | 31 minutes ago Description : File…

CVE-2026-34208 - SandboxJS: Sandbox integrity escape

Maloy Roy Orko April 06, 2026

CVE ID : CVE-2026-34208 Published : April 6, 2026, 4:16 p.m. | 31 minutes ago Description : Sand…

CVE-2026-5527 - Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key

Maloy Roy Orko April 04, 2026

CVE ID : CVE-2026-5527 Published : April 5, 2026, 12:16 a.m. | 29 minutes ago Description : A we…

CVE-2026-5526 - Tenda 4G03 Pro httpd access control

Maloy Roy Orko April 04, 2026

CVE ID : CVE-2026-5526 Published : April 4, 2026, 10:15 p.m. | 29 minutes ago Description : A se…

CVE-2016-20054 - Nodcms Cross Site Request Forgery via admin endpoints

Maloy Roy Orko April 04, 2026

CVE ID : CVE-2016-20054 Published : April 4, 2026, 8:16 p.m. | 28 minutes ago Description : Nodc…

CVE-2026-25118 - immich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albums

Maloy Roy Orko April 03, 2026

CVE ID : CVE-2026-25118 Published : April 3, 2026, 4:16 p.m. | 25 minutes ago Description : immi…

CVE-2026-34523 - SillyTavern: Path traversal allows file existence oracle

Maloy Roy Orko April 02, 2026

CVE ID : CVE-2026-34523 Published : April 2, 2026, 6:16 p.m. | 23 minutes ago Description : Sill…

CVE-2026-2265 - Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization

Maloy Roy Orko April 01, 2026

CVE ID : CVE-2026-2265 Published : April 1, 2026, 5:28 p.m. | 1 hour, 8 minutes ago Description …