Author: Mohammed Idrees Banyamer

Country:

Reported research: 51

Advisories

Risk
Topic & Details
Med.
7-Zip <= 26.02 - Mark-of-the-Web (MotW) Bypass via RAR5 Alternate Data Stream Name Collision (CVE assigned)
 Local | 2026-07-03
Med.
NodeBB <= 4.13.2 ActivityPub attributedTo Local UID Spoof (CVE assigned)
 Remote | 2026-07-03
High
vm2 <= 3.11.3 - NodeVM Builtin Denylist Bypass (CVE assigned)
 Remote | 2026-06-22
Low
SiYuan <= 3.5.9 Remote Code Execution via Malicious Bazaar Package (CVE assigned)
 Remote | 2026-06-22
Med.
Tenable Terrascan Server <= v1.18.3 SSRF and Local File Read (CVE assigned)
 Remote | 2026-06-06
Med.
Open ISES Tickets < 3.44.2 - Hardcoded MySQL Credentials (CVE assigned)
 Remote | 2026-05-27
Med.
NiceGUI 3.6.1 Path Traversal (CVE assigned)
 Local | 2026-05-19
Low
Green Hills INTEGRITY RTOS IPCOMShell TELNET Format String Vulnerability - Realistic Full Chain Attack on F-16 Avionics (Ground Maintenance Scenario) (CVE assigned)
 Remote | 2026-05-04
Med.
Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation (CVE assigned)
 Local | 2026-04-26
Med.
OpenClaw < 2026.3.28 Discord Text Approval Authorization Bypass (CVE assigned)
 Remote | 2026-04-22
High
FortiWeb 8.0.2 Remote Code Execution (CVE assigned)
 Remote | 2026-04-14
Med.
astrojs/vercel <= 10.0.0 - Unauthenticated x-astro-path Header Path Override (CVE assigned)
 Remote | 2026-04-03
Med.
Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow (CVE assigned)
 Remote | 2026-03-31
Med.
SiYuan <= v3.6.1 Note unauthenticated arbitrary file read (path traversal) (CVE assigned)
 Remote | 2026-03-26
High
Tenda AC21 V1.0 V16.03.08.16 - Stack Buffer Overflow in SetNetControlList (CVE assigned)
 Remote | 2026-03-26
Med.
WWBN AVideo <= 26.0 - Authenticated SQL Injection (CVE assigned)
 Remote | 2026-03-26
Med.
Discourse <= 2026.2.1 Authenticated Missing Authorization (CVE assigned)
 Remote | 2026-03-21
Med.
Kanboard <= 1.2.50 Authenticated SQL Injection (CVE assigned)
 Remote | 2026-03-18
High
Glances <= 4.5.2 OS Command Injection via Mustache Template Fields (CVE assigned)
 Remote | 2026-03-18
High
LB-LINK BL-WR9000 V2.4.9 - Stack-based Buffer Overflow in /goform/get_hidessid_cfg (CVE assigned)
 Remote | 2026-03-17
High
LB-LINK BL-WR9000 V2.4.9 - Unauthenticated / Post-Auth Stack-based Buffer Overflow (CVE assigned)
 Remote | 2026-03-17
High
zumba/json-serializer zumba/json-serializer < 3.2.3 RCE (CVE assigned)
 Remote | 2026-03-15
Med.
Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak (CVE assigned)
 Remote | 2026-03-15
Med.
Frappe Framework <14.99.0 and <15.84.0 Unauthenticated SQL Injection (CVE assigned)
 Remote | 2026-03-14
Low
PyJWT < 2.12.0 crit header bypass / Insufficient crit validation (CVE assigned)
 Remote | 2026-03-14
High
WeGIA <= 3.6.4 Unauthenticated Admin Authentication Bypass (CVE assigned)
 Remote | 2026-03-08
High
NocoDB <= 0.301.2 User Enumeration via Password Reset Endpoint (CVE assigned)
 Remote | 2026-03-08
Med.
Craft CMS 4.x & 5.x RCE via Blocklist Bypass (CVE assigned)
 Remote | 2026-03-08
High
pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT (CVE assigned)
 Remote | 2026-03-08
High
WeGIA <= 3.6.4 Remote Code Execution via OS Command Injection (CVE assigned)
 Remote | 2026-03-03

Do you know.. we can display your:

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)

Let's us know! submit@cxsec.org

Copyright 2026, cxsecurity.com

 

Back to Top