Author: nu11secur1ty

Country: bg

Reported research: 294

Advisories

Risk
Topic & Details
Med.
Windows Shell LNK Spoofing to NTLMv2 Hash Capture
 Remote | 2026-05-27
Med.
Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300)
 Local | 2026-05-23
Med.
Windows Snipping Tool NTLMv2 Hash Hijack (CVE assigned)
 Remote | 2026-05-19
Med.
Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)
 Local | 2026-05-13
Low
Event Booking Calendar-5.0 Cross-site scripting (reflected)
 Remote | 2026-05-13
High
Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)
 Local | 2026-05-13
Med.
solaredge-CSRF-OOB-Injection
 Remote | 2026-04-26
High
Windows RRAS Remote Code Execution Vulnerability (CVE-2026-26111) - SE-RCE Exploit
 Remote | 2026-03-21
Med.
Windows Notepad App (Store Version) - Remote/Local Code Execution via Markdown Link (CVE assigned)
 Remote | 2026-03-02
High
Icinga for Windows 1.13.3 - 'key_maker.py' Incorrect Default Permissions Private Key Exposure (CVE assigned)
 Local | 2026-02-26
Low
Icinga for Windows 1.13.3 - Incorrect Default Permissions Private Key Exposure (CVE assigned)
 Local | 2026-02-23
High
Google Chrome < 145.0.7632.75 - CSSFontFeatureValuesMap Use-After-Free (CVE assigned)
 Remote | 2026-02-23
High
Windows 11 25H2 Hyper-V CVE-2026-21248 Heap Overflow + Ghost Patch Exploit Framework (CVE assigned)
 Local | 2026-02-14
High
BoidCMS v1.0.1-authenticated-file-upload-RCE
 Remote | 2026-02-05
High
BoidCMS v2.0.0-authenticated-file-upload-RCE
 Remote | 2026-02-02
Low
BoidCMS v2.1.2 Apache .htaccess Rule Bypass Leading to Information Disclosure
 Remote | 2026-01-29
High
Telnet Argument Injection Privilege Escalation - RCE (CVE assigned)
 Remote | 2026-01-25
Low
ahu.mlsp.government.bg-XSS-Reflected-CRITICAL Cross-site scripting
 Remote | 2026-01-20
Low
mrrb.bg-APP - XSS-Reflected
 Remote | 2026-01-07
High
Ultimate Interactive Exploitation Framework for CVE-2025-55182 (React2Shell) (CVE assigned)
 Remote | 2025-12-24
Med.
Windows LNK File UI Misrepresentation Remote Code Execution (CVE assigned)
 Remote | 2025-12-14
High
Flask 3.0.0 CookApp - Multiple Unauthenticated RCE Vulnerabilities
 Remote Local | 2025-12-09
High
Flask 3.1.2 CookApp - Multiple - RCE-Unauthenticated-access
 Remote Local | 2025-12-09
High
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446 (CVE assigned)
 Remote | 2025-11-24
Med.
Oracle WebLogic Server and allows remote code execution (CVE assigned)
 Remote | 2025-11-24
Med.
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446
 Remote | 2025-11-19
High
Fortinet FortiWeb Auth. Bypass (CVE assigned)
 Remote | 2025-11-17
Med.
is-localhost-ip 2.0.0 - SSRF via Restrictions bypass
 Remote | 2025-11-13
Low
moew.government.bg Cross-site scripting (reflected)
 Remote | 2025-11-13
Low
hop.bg | web app | Cross-site scripting (reflected)
 Remote | 2025-11-07

Do you know.. we can display your:

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)

Let's us know! submit@cxsec.org

Copyright 2026, cxsecurity.com

 

Back to Top