Vulnerabilities Database - CXSecurity.com

Frigate NVR 0.16.3 Remote Code Execution

jduardo2704 — Sat, 23 May 2026 05:00:22 +0000

Topic: Frigate NVR 0.16.3 Remote Code Execution Risk: High Text:# Exploit Title: Frigate NVR 0.16.3 - Remote Code Execution # Date: 2026-02-05 # Exploit Author: jduardo2704 # Vendor Homep...

Linux nf_tables 6.19.3 Local Privilege Escalation

Aviral Srivastava — Sat, 23 May 2026 05:00:13 +0000

Topic: Linux nf_tables 6.19.3 Local Privilege Escalation Risk: Medium Text: * Exploit Title: Linux Kernel 3.16 – 6.19.3 nf_tables RCU UAF LPE * CVE: CVE-2026-23231 * Date: 20...

ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery (SSRF)

Tamil Mathi T. — Sat, 23 May 2026 04:59:56 +0000

Topic: ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery (SSRF) Risk: Low Text:# Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF) # Date: 2026-03-25 # Exploit Author: Ta...

Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300)

nu11secur1ty — Sat, 23 May 2026 04:59:49 +0000

Topic: Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300) Risk: Medium Text:# Titles:** Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300) # Author:** nu11secur1t...

SUSE Manager 4.3.15 Code Execution

Wiktor Maj — Sat, 23 May 2026 04:59:19 +0000

Topic: SUSE Manager 4.3.15 Code Execution Risk: High Text:# Exploit Title: SUSE Manager 4.3.15 - Code Execution # Date: 29.01.2026 # Exploit Author: Wiktor Maj # Vendor Homepage: htt...

Apache HertzBeat 1.8.0 Remote Code Execution

Brett Gervasoni — Tue, 19 May 2026 21:17:49 +0000

Topic: Apache HertzBeat 1.8.0 Remote Code Execution Risk: High Text:# Exploit Title: Apache HertzBeat 1.8.0 - Remote Code Execution # Google Dork: N/A # Date: 2026-03-09 # Exploit Author: Bre...

JuzaWeb CMS 3.4.2 Authenticated Remote Code Execution

Sardor Shoakbarov — Tue, 19 May 2026 21:17:25 +0000

Topic: JuzaWeb CMS 3.4.2 Authenticated Remote Code Execution Risk: High Text:# Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution # Date: 2026-01-10 # Exploit Author: Sardor Shoakbar...

GUnet OpenEclass E-learning platform < 4.2 Remote Code Execution (RCE)

Ashif Iqubal — Tue, 19 May 2026 21:16:06 +0000

Topic: GUnet OpenEclass E-learning platform < 4.2 Remote Code Execution (RCE) Risk: High Text:# Exploit Title: GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE) # Date: 2026-01-08 # Exploit Autho...

Windows Snipping Tool NTLMv2 Hash Hijack

nu11secur1ty — Tue, 19 May 2026 21:15:57 +0000

Topic: Windows Snipping Tool NTLMv2 Hash Hijack Risk: Medium Text:# Exploit Title: Windows Snipping Tool - NTLMv2 Hash Hijack # Date: 2026-04-22 # Exploit Author: nu11secur1ty # Video Demo...

telnetd 2.7 Buffer Overflow

Jeff Barron — Wed, 13 May 2026 19:41:02 +0000

Topic: telnetd 2.7 Buffer Overflow Risk: High Text:# Exploit Title: telnetd 2.7 - Buffer Overflow # Google Dork: N/A # Date: 2026-04-03 # Exploit Author: Jeff Barron (jeffaf) ...

Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)

nu11secur1ty — Wed, 13 May 2026 19:40:49 +0000

Topic: Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) Risk: Medium Text:# Titles: Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) # Author: nu11secur1ty # Date: 2...

Event Booking Calendar-5.0 Cross-site scripting (reflected)

nu11secur1ty — Wed, 13 May 2026 19:40:38 +0000

Topic: Event Booking Calendar-5.0 Cross-site scripting (reflected) Risk: Low Text:## Titles: Event Booking Calendar-5.0 Cross-site scripting (reflected) ## Author: nu11secur1ty ## Date: 5/13/2026 ## Vendor...

Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)

nu11secur1ty — Wed, 13 May 2026 19:40:32 +0000

Topic: Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) Risk: High Text:# Titles:** Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) # Author:** nu11secur1ty # Date:** 2026...

Ninja Forms Uploads Unauthenticated PHP File Upload

Sélim Lanouar — Wed, 13 May 2026 19:40:20 +0000

Topic: Ninja Forms Uploads Unauthenticated PHP File Upload Risk: High Text:# Exploit Title: Ninja Forms Uploads - Unauthenticated PHP File Upload # Date: 2026-04-09 # Exploit Author: ...

Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket Hijacking (CSWSH)

Hazar Taspinar — Wed, 13 May 2026 19:38:15 +0000

Topic: Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket Hijacking (CSWSH) Risk: Medium Text:# Exploit Title: Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH) # Date: 2026-02-26 # Exploit Aut...

Erugo 0.2.14 Remote Code Execution (RCE)

Abdul Moiz — Mon, 04 May 2026 20:19:59 +0000

Topic: Erugo 0.2.14 Remote Code Execution (RCE) Risk: High Text:# Exploit Title: Erugo < = 0.2.14 - Authenticated Remote Code Execution (RCE) # Date: 2026-02-02 # Exploit Author: Abdul Moiz ...

Linux Kernel Local Privilege Escalation via Memory Handling and Access Control Weakness

RERO — Mon, 04 May 2026 20:19:47 +0000

Topic: Linux Kernel Local Privilege Escalation via Memory Handling and Access Control Weakness Risk: Medium Text:A privilege escalation vulnerability class affecting the Linux kernel has been analyzed under controlled local test environment...

Linux Kernel proc_readdir_de() 6.18-rc5 Local Privilege Escalation

Aviral Srivastava — Mon, 04 May 2026 20:18:26 +0000

Topic: Linux Kernel proc_readdir_de() 6.18-rc5 Local Privilege Escalation Risk: Medium Text: * Exploit Title: Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation * CVE: CVE-2025-40271 * ...

Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate pri

Sarang Tumne — Sun, 26 Apr 2026 21:07:36 +0000

Topic: Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate pri Risk: Medium Text:Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate pri...

Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation

Mohammed Idrees Banyamer — Sun, 26 Apr 2026 21:07:24 +0000

Topic: Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: Samsung ONE - Integer Overflow in CircleConst Tensor Size Calculation # CVE: CVE-2026...

solaredge-CSRF-OOB-Injection

nu11secur1ty — Sun, 26 Apr 2026 21:07:15 +0000

Topic: solaredge-CSRF-OOB-Injection Risk: Medium Text:# Titles: solaredge-CSRF-OOB-Injection # Author: nu11secur1tyAI # Date: 2026-04-26 # Vendor: SolarEdge Technologies Ltd. # ...

Trojan-Spy.Win32.Small / Remote Command Execution

malvuln — Wed, 22 Apr 2026 21:54:00 +0000

Topic: Trojan-Spy.Win32.Small / Remote Command Execution Risk: Medium Text:Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2026 Original source: https://malvuln.com/advisory/8c15ec5f0137d097...

Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation

Xavi Beltran — Wed, 22 Apr 2026 21:53:21 +0000

Topic: Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation Risk: Medium Text:# Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation # Exploit Details: https://xavi...

Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange (IKE) Service (CVE-2026-33824)

RERO — Sun, 19 Apr 2026 20:47:26 +0000

Topic: Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange (IKE) Service (CVE-2026-33824) Risk: High Text:CVE-2026-33824 is a critical remote code execution vulnerability affecting the Windows Internet Key Exchange (IKE) service, whi...

WordPress Madara Local File Inclusion

Beatriz Fresno Naumova — Tue, 14 Apr 2026 19:07:10 +0000

Topic: WordPress Madara Local File Inclusion Risk: Medium Text:# Exploit Title: WordPress Madara Local File Inclusion # Date: November 1, 2025 # Exploit Author: Beatriz Fresno Naumova # ...

FortiWeb 8.0.2 Remote Code Execution

Mohammed Idrees Banyamer — Tue, 14 Apr 2026 19:06:52 +0000

Topic: FortiWeb 8.0.2 Remote Code Execution Risk: High Text:# Exploit Title: FortiWeb 8.0.2 - Remote Code Execution # Date: 2025-11-22 # Author: Mohammed Idrees Banyamer # Author Coun...

Easy File Sharing Web Server v7.2 Buffer Overflow

Donwor — Tue, 14 Apr 2026 19:06:29 +0000

Topic: Easy File Sharing Web Server v7.2 Buffer Overflow Risk: High Text:# Exploit title: Easy File Sharing Web Server v7.2 - Buffer Overflow # Date: 16/10/2025 # Exploit Author: Donwor # X: @real_...

NetBT e-Fatura Privilege Escalation

Seccops — Tue, 14 Apr 2026 19:05:59 +0000

Topic: NetBT e-Fatura Privilege Escalation Risk: Medium Text:# Exploit Title: NetBT e-Fatura - Privilege Escalation # Author: Seccops # Discovery Date: 2025-10-03 # Vendor: https://net-...

Docker Desktop 4.44.3 Unauthenticated API Exposure

OilSeller2001 — Thu, 09 Apr 2026 20:53:26 +0000

Topic: Docker Desktop 4.44.3 Unauthenticated API Exposure Risk: High Text:# Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure # Date: 2025-10-06 # Exploit Author: OilSeller2001 # ...

MaNGOSWebV4 4.0.6 Reflected XSS

CodeSecLab — Thu, 09 Apr 2026 20:52:55 +0000

Topic: MaNGOSWebV4 4.0.6 Reflected XSS Risk: Low Text:# Exploit Title: MaNGOSWebV4 4.0.6 - Reflected XSS # Date: 2024-10-26 # Exploit Author: CodeSecLab # Vendor Homepage: http...

Grafana 11.6.0 SSRF

Beatriz Fresno Naumova — Thu, 09 Apr 2026 20:52:38 +0000

Topic: Grafana 11.6.0 SSRF Risk: Medium Text:# Exploit Title: Grafana 11.6.0 - SSRF # FOFA: app="Grafana" # Date: 2-11-2025 # Exploit Author: Beatriz Fresno Naumova #...

OctoPrint 1.11.2 File Upload

prabhatverma.addada — Thu, 09 Apr 2026 20:52:26 +0000

Topic: OctoPrint 1.11.2 File Upload Risk: High Text:# Exploit Title: OctoPrint 1.11.2 - File Upload # Date: 2025-09-28 # Exploit Author: prabhatverma.addada # Vendor Homepage:...

esm-dev 136 Path Traversal

Byte Reaper — Thu, 09 Apr 2026 20:52:12 +0000

Topic: esm-dev 136 Path Traversal Risk: Medium Text:# Exploit Title: esm-dev 136 - Path Traversal # Date: 2025-07-11 # Exploit Author: Byte Reaper #Vendor Homepage: https://g...

Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5)

Antonius — Sat, 04 Apr 2026 16:01:28 +0000

Topic: Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5) Risk: High Text:Title : CVE-2026-23416 - Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5) Exploit Poc : https://github.com...

astrojs/vercel < = 10.0.0 - Unauthenticated x-astro-path Header Path Override

Mohammed Idrees Banyamer — Fri, 03 Apr 2026 20:23:39 +0000

Topic: astrojs/vercel < = 10.0.0 - Unauthenticated x-astro-path Header Path Override Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: @astrojs/vercel < = 10.0.0 - Unauthenticated x-astro-path Header Path Override ...

Microsoft SQL Server Privilege Elevation Through

Emad Al-Mousa — Fri, 03 Apr 2026 20:23:17 +0000

Topic: Microsoft SQL Server Privilege Elevation Through Risk: Medium Text:Title: Microsoft SQL Server Privilege Elevation Through ##MS_DatabaseManager## Role [CVE-2025-24999] Product: Database Manufa...

FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass

offensiveee — Tue, 31 Mar 2026 19:40:02 +0000

Topic: FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow

Mohammed Idrees Banyamer — Tue, 31 Mar 2026 19:38:48 +0000

Topic: Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow Risk: Medium Text:# Exploit Title: Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow # CVE: CVE-2026-5004 # Date: 2026-03-29 ...

esiclivre 0.2.2 SQL Injection

Bryan — Thu, 26 Mar 2026 08:58:54 +0000

Topic: esiclivre 0.2.2 SQL Injection Risk: Medium Text:# CVE-2026-30655 — SQL Injection in esiclivre (password reset) ## Summary A SQL injection vulnerability exists in the pas...

Payara Server Cross Site Scripting

DeepSecurity Research — Thu, 26 Mar 2026 08:56:48 +0000

Topic: Payara Server Cross Site Scripting Risk: Low Text:# XSS to Admin account takeover (CVE-2025-14340) A Cross-Site Scripting vulnerability in Payara’s Administration Rest Inte...