Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2026-01-07
High
River_Past_Video_Cleaner - Buffer Overflow (SEH)
 Local Achilles
High
MP3 Convert Lord V1.0 Local Seh Exploit
 Local Achilles
Low
mrrb.bg-APP - XSS-Reflected
 Remote nu11secur1ty
Med.
SigInt-Hombre v1 / dynamic Suricata detection rules from real-time threat feeds
 Remote malvuln
2025-12-28
Low
Wordpress (Easy Hide Login) plugin Stored XSS
 Remote Mr.Falcon
Low
Birth Chart Compatibility WordPress Plugin 2.0 Full Path Disclosure
 CVE Remote Byte Reaper
2025-12-27
Low
PMB SIGB 7.x - SQL Injection
 Remote DZ Mind Injector
Low
RosarioSIS 6.7.2 Cross Site Scripting (XSS)
 CVE CWE Remote CodeSecLab
High
River_Past_Audio_Converter - Buffer Overflow (SEH)
 Local Achilles
Low
ESLockDecryptor: Tool for decrypt ES File Explorer encrypted files (.eslock)
 Local Piotr Kniaz
2025-12-24
Med.
Backdoor.Win32.Poison.jh / Insecure Permissions
 Local malvuln
Med.
Backdoor.Win32.Netbus.170 / Insecure Credential Storage
 Local malvuln
Med.
promchimexport - SQL Injection
 Remote javad rashidi
High
Ultimate Interactive Exploitation Framework for CVE-2025-55182 (React2Shell)
 CVE Remote nu11secur1ty
2025-12-21
Med.
openSIS Community Edition 8.0 SQL Injection
 CVE CWE Remote CodeSecLab
Med.
cmkoo - SQL Injection
 Remote javad rashidi
High
HEUR.Backdoor.Win32.Poison.gen / Arbitrary Code Execution
 Local malvuln
High
Backdoor.Win32.ControlTotal.t / Insecure Credential Storage / MVID-2025-0702
 Local malvuln
2025-12-17
Med.
Summar Employee Portal 3.98.0 Authenticated SQL Injection
 CVE CWE Remote Peter Gabaldon
Med.
dotCMS 25.07.02-1 Authenticated Blind SQL Injection
 CVE CWE Remote Matan Sandori
Med.
Soosyze CMS 2.0 Brute Force Login
 CVE CWE Remote Beatriz Fresno Naumova
2025-12-14
Med.
Windows LNK File UI Misrepresentation Remote Code Execution
 CVE Remote nu11secur1ty
High
Microsoft Windows Media Player WMDRM 'RES://' URI Arbitrary Code Execution Vulnerability
 Remote Eduardo Braun Prado
Low
phpMyFAQ 3.1.7 Reflected Cross-Site Scripting (XSS)
 CVE CWE Remote CodeSecLab
High
Pluck 4.7.7-dev2 PHP Code Execution
 CVE Remote CodeSecLab
Med.
R.s.W - Sql Injection
 Remote Itqchi
Med.
NetBT e-Fatura 'InboxProcessor' Unquoted Service Path Privilege Escalation
 CVE CWE Local Seccops
2025-12-09
High
Mbed TLS 3.6.4 Use-After-Free
 CVE Remote Byte Reaper
Med.
BigAnt Office Messenger 5.6.06 SQL Injection
 CVE CWE Remote Nicat Abbasov
Med.
phpIPAM 1.5.1 SQL Injection
 CVE CWE Remote CodeSecLab
High
Flask 3.0.0 CookApp - Multiple Unauthenticated RCE Vulnerabilities
 Remote Local nu11secur1ty
High
Flask 3.1.2 CookApp - Multiple - RCE-Unauthenticated-access
 Remote Local nu11secur1ty
High
XWiki Platform 15.10.10 Metasploit Module for Remote Code Execution (RCE)
 CVE Remote Maksim Rogov
2025-12-01
Med.
cr-led - SQL Injection
 Remote javad rashidi
Med.
MonstaFTP Unauthenticated File Upload
 CVE CWE Remote ibrahimsql
Med.
My Admin (Powered By Learning Impact) - SQL Injection Authentication Bypass
 CWE Remote 6ickzone
2025-11-24
High
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446
 CVE Remote nu11secur1ty
High
Royal Elementor Addons - Unauthenticated Remote Code Execution
 CVE CWE Remote ibrahimsql
Med.
Oracle WebLogic Server and allows remote code execution
 CVE Remote nu11secur1ty
2025-11-19
Med.
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446
 Remote nu11secur1ty
2025-11-17
High
Fortinet FortiWeb Auth. Bypass
 CVE Remote nu11secur1ty
2025-11-13
Med.
Logitech Streamlabs Desktop 1.19.6 (overlay) CPU Exhaustion
 Remote Local LiquidWorm
Med.
is-localhost-ip 2.0.0 - SSRF via Restrictions bypass
 Remote nu11secur1ty
Low
moew.government.bg Cross-site scripting (reflected)
 Remote nu11secur1ty
2025-11-07
Low
hop.bg | web app | Cross-site scripting (reflected)
 Remote nu11secur1ty
Med.
3kits template via imgGallery.php SQL Injection id parameter
 Remote Hossein_0xB
2025-11-04
Low
ModernShop - RXSS
 CVE CWE Remote CraCkEr
Med.
3kits template SQL Injection via imgGallery.php id parameter
 Remote Hossein_0xB
High
Desktop Window Manager (DWM) Core Library — Heap-based Buffer Overflow (sanitized evidence)
 CVE Local nu11secur1ty
2025-11-01
High
Exim tls-openssl.c — Use-After-Free: unauthenticated Remote Code Execution
 CVE CWE Remote CyberSploit
Low
Wisenshop - Stored XSS
 CVE CWE Remote CraCkEr
High
Flowise 3.0.4 Remote Code Execution
 CVE Remote nltt0
2025-10-29
Low
RiteCMS 3.1.0 Cross Site Scripting
 Remote Chokri Hammedi
Med.
GeoVision ASManager Windows Application 6.1.2.0 Credentials Disclosure
 CVE Remote Giorgi Dograshvili
Low
Swagger UI 1.0.3 Cross-Site Scripting (XSS)
 CVE CWE Remote ByteReaper0
2025-10-27
High
WordPress Backup Migration 1.3.7: Remote Command Execution
 CVE Remote DANG
2025-10-24
High
Vvveb CMS 1.0.5 Remote Code Execution
 Remote Maksim
2025-10-23
Med.
Cleartext Storage of Sensitive Information in Memory in Easywork Enterprise
 Remote Ivan
2025-10-21
Med.
Fedora Gnome Privilege Escalation
 Local Tavis Ormandy
Med.
greenlife-Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
Copyright 2026, cxsecurity.com

 

Back to Top