Protect Web Society

CVE-2026-10193 - OFCMS ComnController ComnController.java query sql injection

Maloy Roy Orko May 31, 2026

CVE ID : CVE-2026-10193 Published : May 31, 2026, 5:16 p.m. | 37 minutes ago Descript…

CVE-2026-10190 - Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service

Maloy Roy Orko May 31, 2026

CVE ID : CVE-2026-10190 Published : May 31, 2026, 4:16 p.m. | 1 hour, 36 minutes ago …

CVE-2026-10123 - TRENDnet TEW-432BRP formSetDomainFilter stack-based overflow

Maloy Roy Orko May 30, 2026

CVE ID : CVE-2026-10123 Published : May 30, 2026, 4:17 p.m. | 1 hour, 35 minutes ago …

CVE-2026-39276 - Emlog Pro PHP Remote Code Execution (RCE)

Maloy Roy Orko May 29, 2026

CVE ID : CVE-2026-39276 Published : May 29, 2026, 4:16 p.m. | 1 hour, 36 minutes ago …

CVE-2026-44462 - Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions

Maloy Roy Orko May 28, 2026

CVE ID : CVE-2026-44462 Published : May 28, 2026, 5:16 p.m. | 35 minutes ago Descript…

CVE-2026-44325 - free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)

Maloy Roy Orko May 27, 2026

CVE ID : CVE-2026-44325 Published : May 27, 2026, 5:16 p.m. | 34 minutes ago Descript…

CVE-2026-47715 - Bugsink: Issue event views can show an event from another project if its UUID is known

Maloy Roy Orko May 26, 2026

CVE ID : CVE-2026-47715 Published : May 26, 2026, 5:16 p.m. | 33 minutes ago Descript…

CVE-2026-9473 - c-rick jimeng-mcp api.ts generateVideo path traversal

Maloy Roy Orko May 25, 2026

CVE ID : CVE-2026-9473 Published : May 25, 2026, 4:15 p.m. | 1 hour, 34 minutes ago D…

CVE-2026-9472 - dazeb markdown-downloader index.ts create_subdirectory path traversal

Maloy Roy Orko May 25, 2026

CVE ID : CVE-2026-9472 Published : May 25, 2026, 4 p.m. | 1 hour, 49 minutes ago Desc…

CVE-2026-9471 - yashpokharna2555 StudentManagementSystem student.php cross site scripting

Maloy Roy Orko May 25, 2026

CVE ID : CVE-2026-9471 Published : May 25, 2026, 3:45 p.m. | 2 hours, 4 minutes ago D…

CVE-2026-27768 - Microsoft SharePoint SQL Injection

Maloy Roy Orko May 25, 2026

CVE ID : CVE-2026-27768 Published : May 25, 2026, 3:39 p.m. | 2 hours, 10 minutes ago …

CVE-2026-9395 - Besen BS20 EV Charging Station BLE/UDP insufficiently protected credentials

Maloy Roy Orko May 24, 2026

CVE ID : CVE-2026-9395 Published : May 24, 2026, 8 p.m. | 1 hour, 49 minutes ago Desc…

CVE-2026-9393 - H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow

Maloy Roy Orko May 24, 2026

CVE ID : CVE-2026-9393 Published : May 24, 2026, 7 p.m. | 49 minutes ago Description …

CVE-2026-9344 - Edimax EW-7438RPn webs formWpsStart stack-based overflow

Maloy Roy Orko May 23, 2026

CVE ID : CVE-2026-9344 Published : May 24, 2026, midnight | 1 hour, 48 minutes ago De…

CVE-2026-9342 - SourceCodester Hospitals Patient Records Management System view_history.php sql injection

Maloy Roy Orko May 23, 2026

CVE ID : CVE-2026-9342 Published : May 23, 2026, 10:15 p.m. | 1 hour, 33 minutes ago …

CVE-2026-28444 - Typebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure

Maloy Roy Orko May 22, 2026

CVE ID : CVE-2026-28444 Published : May 22, 2026, 4 p.m. | 1 hour, 47 minutes ago Des…

CVE-2026-48227 - Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters

Maloy Roy Orko May 21, 2026

CVE ID : CVE-2026-48227 Published : May 21, 2026, 5:10 p.m. | 35 minutes ago Descript…

CVE-2026-39047 - EPSON L14150 Buffer Overflow Remote Code Execution

Maloy Roy Orko May 20, 2026

CVE ID : CVE-2026-39047 Published : May 20, 2026, 4:16 p.m. | 1 hour, 28 minutes ago …

CVE-2026-30117 - Scalar Astro Arbitrary File Upload Vulnerability

Maloy Roy Orko May 19, 2026

CVE ID : CVE-2026-30117 Published : May 19, 2026, 4:16 p.m. | 1 hour, 24 minutes ago …

CVE-2026-26462 - Adobe Offline Hospital Management System Remote Code Execution Vulnerability

Maloy Roy Orko May 18, 2026

CVE ID : CVE-2026-26462 Published : May 18, 2026, 3:16 p.m. | 2 hours, 13 minutes ago …

CVE-2026-8765 - Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal

Maloy Roy Orko May 17, 2026

CVE ID : CVE-2026-8765 Published : May 17, 2026, 10 p.m. | 1 hour, 29 minutes ago Des…

CVE-2026-8507 - Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out of bound (OOB) write flaws

Maloy Roy Orko May 17, 2026

CVE ID : CVE-2026-8507 Published : May 17, 2026, 6:43 p.m. | 46 minutes ago Descripti…

CVE-2026-46720 - Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

Maloy Roy Orko May 17, 2026

CVE ID : CVE-2026-46720 Published : May 17, 2026, 6:16 p.m. | 1 hour, 12 minutes ago …

CVE-2020-37243 - WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS

Maloy Roy Orko May 16, 2026

CVE ID : CVE-2020-37243 Published : May 16, 2026, 4:16 p.m. | 1 hour, 11 minutes ago …

CVE-2026-34253 - Vorbis-tools Ogg123 Buffer Underflow Vulnerability

Maloy Roy Orko May 15, 2026

CVE ID : CVE-2026-34253 Published : May 15, 2026, 3:16 p.m. | 1 hour, 51 minutes ago …

CVE-2025-14972 - Insufficient DPA countermeasure reseeding

Maloy Roy Orko May 15, 2026

CVE ID : CVE-2025-14972 Published : May 15, 2026, 3:16 p.m. | 1 hour, 51 minutes ago …

CVE-2026-42589 - Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection

Maloy Roy Orko May 14, 2026

CVE ID : CVE-2026-42589 Published : May 14, 2026, 4:16 p.m. | 51 minutes ago Descript…

CVE-2026-42281 - MagicMirror²: Unauthenticated SSRF via /cors endpoint

Maloy Roy Orko May 14, 2026

CVE ID : CVE-2026-42281 Published : May 14, 2026, 4:16 p.m. | 51 minutes ago Descript…

CVE-2026-42159 - Flowsint: Stored XSS in description of node

Maloy Roy Orko May 14, 2026

CVE ID : CVE-2026-42159 Published : May 14, 2026, 4:16 p.m. | 51 minutes ago Descript…

CVE-2026-44002 - vm2: Host File Path Disclosure via Stack Trace Information Leak

Maloy Roy Orko May 13, 2026

CVE ID : CVE-2026-44002 Published : May 13, 2026, 6:16 p.m. | 50 minutes ago Descript…

CVE-2026-25431 - WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability

Maloy Roy Orko May 12, 2026

CVE ID : CVE-2026-25431 Published : May 12, 2026, 4:32 p.m. | 33 minutes ago Descript…

CVE-2026-42608 - Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.

Maloy Roy Orko May 11, 2026

CVE ID : CVE-2026-42608 Published : May 11, 2026, 4:17 p.m. | 48 minutes ago Descript…

CVE-2026-45180 - Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids

Maloy Roy Orko May 10, 2026

CVE ID : CVE-2026-45180 Published : May 10, 2026, 8:03 p.m. | 1 hour, 1 minute ago De…

CVE-2026-8191 - Wavlink NU516U1 adm.cgi wifi_region os command injection

Maloy Roy Orko May 09, 2026

CVE ID : CVE-2026-8191 Published : May 9, 2026, 6:15 p.m. | 49 minutes ago Descriptio…

CVE-2026-8188 - Wavlink NU516U1 adm.cgi change_wifi_password os command injection

Maloy Roy Orko May 09, 2026

CVE ID : CVE-2026-8188 Published : May 9, 2026, 4:16 p.m. | 48 minutes ago Descriptio…

CVE-2026-8189 - Wavlink NU516U1 adm.cgi wzdrepeater os command injection

Maloy Roy Orko May 09, 2026

CVE ID : CVE-2026-8189 Published : May 9, 2026, 4:15 p.m. | 49 minutes ago Descriptio…

CVE-2026-44497 - ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

Maloy Roy Orko May 08, 2026

CVE ID : CVE-2026-44497 Published : May 8, 2026, 3:17 p.m. | 1 hour, 46 minutes ago D…

CVE-2025-4386 - Medtronic MyCareLink Patient Monitor Hardware Debug Port

Maloy Roy Orko May 07, 2026

CVE ID : CVE-2025-4386 Published : May 7, 2026, 4:16 p.m. | 47 minutes ago Descriptio…

CVE-2026-7415 - Open MQTT orchestration without read/write ACLs in Yarbo robot firmware

Maloy Roy Orko May 07, 2026

CVE ID : CVE-2026-7415 Published : May 7, 2026, 4:11 p.m. | 52 minutes ago Descriptio…

CVE-2026-7414 - Hardcoded credentials in Yarbo robot firmware

Maloy Roy Orko May 07, 2026

CVE ID : CVE-2026-7414 Published : May 7, 2026, 4:10 p.m. | 53 minutes ago Descriptio…

CVE-2026-7413 - Persistent undocumented backdoor access in Yarbo robot

Maloy Roy Orko May 07, 2026

CVE ID : CVE-2026-7413 Published : May 7, 2026, 4:09 p.m. | 53 minutes ago Descriptio…

CVE-2026-8001 - Google Chrome After Free Vulnerability (Sandbox Escape)

Maloy Roy Orko May 06, 2026

CVE ID : CVE-2026-8001 Published : May 6, 2026, 6:13 p.m. | 42 minutes ago Descriptio…

CVE-2026-23479 - redis-server use-after-free in unblock client flow may allow remote code execution

Maloy Roy Orko May 05, 2026

CVE ID : CVE-2026-23479 Published : May 5, 2026, 5:17 p.m. | 1 hour, 37 minutes ago D…

CVE-2026-7412 - Eclipse BaSyx Java Server SDK Blind HTTP Request Forgery

Maloy Roy Orko May 05, 2026

CVE ID : CVE-2026-7412 Published : May 5, 2026, 4:16 p.m. | 39 minutes ago Descriptio…

CVE-2026-7411 - Eclipse BaSyx Java Server SDK Remote Code Execution (RCE) via Path Traversal

Maloy Roy Orko May 05, 2026

CVE ID : CVE-2026-7411 Published : May 5, 2026, 4:16 p.m. | 39 minutes ago Descriptio…

CVE-2026-39103 - GPAC Buffer Overflow Denial of Service

Maloy Roy Orko May 05, 2026

CVE ID : CVE-2026-39103 Published : May 5, 2026, 4:16 p.m. | 39 minutes ago Descripti…

CVE-2026-42372 - D-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials

Maloy Roy Orko May 04, 2026

CVE ID : CVE-2026-42372 Published : May 4, 2026, 3:53 p.m. | 1 hour, 1 minute ago Des…

CVE-2026-7710 - YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication

Maloy Roy Orko May 03, 2026

CVE ID : CVE-2026-7710 Published : May 3, 2026, 11:15 p.m. | 53 minutes ago Descripti…

CVE-2026-7702 - toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization

Maloy Roy Orko May 03, 2026

CVE ID : CVE-2026-7702 Published : May 3, 2026, 4:15 p.m. | 1 hour, 53 minutes ago De…

CVE-2026-7669 - sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer deserialization

Maloy Roy Orko May 02, 2026

CVE ID : CVE-2026-7669 Published : May 2, 2026, 10:16 p.m. | 1 hour, 52 minutes ago D…

CVE-2026-7668 - MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

Maloy Roy Orko May 02, 2026

CVE ID : CVE-2026-7668 Published : May 2, 2026, 9:16 p.m. | 52 minutes ago Descriptio…

CVE-2026-42473 - MixPHP unserialize() Remote Code Execution Vulnerability

Maloy Roy Orko May 01, 2026

CVE ID : CVE-2026-42473 Published : May 1, 2026, 4:16 p.m. | 1 hour, 49 minutes ago D…