CVE-2026-90000 to CVE-2026-90999

185 CVEs with public proof-of-concept exploits.

• CVE-2026-904871 PoCXuxueli xxl-job JobGroupController.java privileges management
• CVE-2026-904881 PoCXuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection
• CVE-2026-904891 PoCXuxueli xxl-job insert cross site scripting
• CVE-2026-904901 PoClenve vhr MailReceiver deserialization
• CVE-2026-904911 PoCsanjevirau gsubs Electron index.js showQuerySuccessPage code injection
• CVE-2026-904931 PoCTonec Internet Download Manager Kernel Driver idmwfp.sys access control
• CVE-2026-904951 PoCFengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection
• CVE-2026-904961 PoCFengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
• CVE-2026-904971 PoCFengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting
• CVE-2026-904981 PoClenve vhr vhr.sql default credentials
• CVE-2026-904991 PoClenve vhr Password Update pass HrInfoController.updatePass improper authorization
• CVE-2026-905001 PoClenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
• CVE-2026-905011 PoClenve vhr HrMapper.xml HrInfoController.updateHr privileges management
• CVE-2026-905021 PoCstilleshan ServerStatus Stats Generation main.cpp cross site scripting
• CVE-2026-905041 PoCvvbbnn00 WARP-Clash-API authorized missing authentication
• CVE-2026-905051 PoCvvbbnn00 WARP-Clash-API doUpdateLicenseKey race condition
• CVE-2026-905061 PoCvvbbnn00 WARP-Clash-API Save Account Job race condition
• CVE-2026-905071 PoCvvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control
• CVE-2026-905081 PoCChengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization
• CVE-2026-905091 PoCdromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials
• CVE-2026-905101 PoCdromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
• CVE-2026-905111 PoCGongShengyue OnlineBooks listSplit BooksServlet.java sql injection
• CVE-2026-905141 PoCSourceCodester School Registration and Fee System save_stud.php sql injection
• CVE-2026-905151 PoCSourceCodester School Registration and Fee System delete_stud.php sql injection
• CVE-2026-905161 PoCSourceCodester School Registration and Fee System pay_report.php sql injection
• CVE-2026-905171 PoCPHPGurukul Bank Locker Management System view-assign-locker.php authorization
• CVE-2026-905181 PoCPHPGurukul Bank Locker Management System sidebar.php access control
• CVE-2026-905191 PoCPHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload
• CVE-2026-905201 PoCjaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization
• CVE-2026-905211 PoCjaychouchannel Tourism-Management-System CRUD MenpiaodingdanController.java authorization
• CVE-2026-905221 PoCjaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery
• CVE-2026-905231 PoCjaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management
• CVE-2026-905241 PoCjaychouchannel Tourism-Management-System Update Endpoint missing authentication
• CVE-2026-905251 PoCitsourcecode Sales and Inventory System cust_pos_trans.php sql injection
• CVE-2026-905261 PoCSourceCodester School Registration and Fee System save_class.php sql injection
• CVE-2026-905651 PoCRizwan17 inventory-management-system dashboard.php access control
• CVE-2026-905661 PoCRizwan17 inventory-management-system Registration register.php createUserAccount improper authorization
• CVE-2026-905721 PoCdavenardella snap7 s7_micro_client.cpp opUpload memory corruption
• CVE-2026-905731 PoCGPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference
• CVE-2026-905741 PoCitsourcecode Sales and Inventory System emp_transac.php add sql injection
• CVE-2026-905751 PoCPHPGurukul Small CRM Login Success login.php unserialize deserialization
• CVE-2026-905761 PoCGPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference
• CVE-2026-905771 PoCGPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow
• CVE-2026-905781 PoCGPAC MP4Box list.c gf_list_count use after free
• CVE-2026-905791 PoCcheshire-cat-ai Cheshire Cat AI custom_auth_handler.py _authorize_http_key missing authentication
• CVE-2026-905801 PoCFlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery
• CVE-2026-905811 PoCcym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection
• CVE-2026-905821 PoCevanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption
• CVE-2026-905841 PoCTooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources
• CVE-2026-905941 PoCwxiaoqi Spring-Cloud-Platform Permission Service PermissionService.java PermissionService.checkUserPermission authorization
• CVE-2026-905951 PoCwxiaoqi Spring-Cloud-Platform OnlineController.java OnlineController.getOnlineInfo authorization
• CVE-2026-905971 PoCitsourcecode Sales and Inventory System sup_edit1.php sql injection
• CVE-2026-905981 PoCjaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization
• CVE-2026-905991 PoCRizwan17 inventory-management-system process.php cross-site request forgery
• CVE-2026-906001 PoCitsourcecode Sales and Inventory System inv_edit1.php sql injection
• CVE-2026-906041 PoCTotolink A3002MU Anchor Tag cross site scripting
• CVE-2026-906051 PoCTotolink A3002MU boa formFilter buffer overflow
• CVE-2026-906061 PoCTotolink A3002MU boa formIpv6Setup buffer overflow
• CVE-2026-906071 PoCTotolink A3002MU boa formNewSchedule buffer overflow
• CVE-2026-906081 PoCTotolink A3002MU boa formPortFw buffer overflow
• CVE-2026-906091 PoCGPAC MP4Box vrml_tools.c null pointer dereference
• CVE-2026-906101 PoCGPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read
• CVE-2026-906111 PoCGPAC MP4Box loader_xmt.c xmt_parse_element assertion
• CVE-2026-906121 PoCGPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion
• CVE-2026-906131 PoCGPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion
• CVE-2026-906151 PoCSourceCodester Class and Exam Timetabling System subject1.php cross site scripting
• CVE-2026-906171 PoCGH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection
• CVE-2026-906181 PoCGH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection
• CVE-2026-906191 PoC0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection
• CVE-2026-906201 PoC0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication
• CVE-2026-906211 PoCipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection
• CVE-2026-906221 PoCGNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference
• CVE-2026-906231 PoCandreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation
• CVE-2026-906481 PoCwasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table…
• CVE-2026-906811 PoCMatthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds
• CVE-2026-906821 PoCMatthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow
• CVE-2026-906831 PoCGPAC MP4Box base_scenegraph.c gf_node_unregister assertion
• CVE-2026-906841 PoCGPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion
• CVE-2026-906851 PoCGPAC MP4Box lsr_dec.c lsr_exec_command_list assertion
• CVE-2026-906861 PoCGPAC MP4Box loader_bt.c gf_bt_report memory corruption
• CVE-2026-906871 PoCGPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free
• CVE-2026-906901 PoC0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection
• CVE-2026-906911 PoC0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal
• CVE-2026-906941 PoCSourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting
• CVE-2026-906951 PoCSourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting
• CVE-2026-906961 PoCSourceCodester Inventory Management System Product Management products_handler.php cross site scripting
• CVE-2026-906971 PoCSourceCodester Inventory Management System invoice.php authorization
• CVE-2026-906981 PoCmemcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds
• CVE-2026-906991 PoCD-Link DWR-M920 formPinManageSetup sub_41E60C os command injection
• CVE-2026-907001 PoCitsourcecode Sales and Inventory System pro_edit1.php sql injection
• CVE-2026-907011 PoCsubhajitkhan online-clinic-management-system listdoctor.php sql injection
• CVE-2026-907021 PoCD-Link DWR-M921 formDiskFormat system os command injection
• CVE-2026-907031 PoCD-Link DWR-M921 formDiskCreateShare system os command injection
• CVE-2026-907041 PoCD-Link DWR-M921 formDiskPartition system command injection
• CVE-2026-907051 PoCD-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
• CVE-2026-907061 PoCD-Link DWR-M921 formWsc os command injection
• CVE-2026-907081 PoCYot CMS Cookie global.php login sql injection
• CVE-2026-907091 PoCYot CMS Admin Console admin.php eval code injection
• CVE-2026-907101 PoCtaisan tarzan-cms Theme Download Function ThemeService.java openConnection server-side request forgery
• CVE-2026-907121 PoCGitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service
• CVE-2026-907131 PoCvllm-project vLLM tiktoken vocab File mod.rs new denial of service
• CVE-2026-907141 PoCmarcobambini Gravity JSON parser gravity_json.c memory corruption
• CVE-2026-907151 PoCmarcobambini Gravity udp json-parser gravity_json.c integer overflow
• CVE-2026-907161 PoCmarcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds
• CVE-2026-907761 PoCNodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsing
• CVE-2026-907811 PoCalsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()
• CVE-2026-907821 PoCS2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()
• CVE-2026-907841 PoCDvidelabs flatcc semantics.c fb_clear_parser memory leak
• CVE-2026-907851 PoCDvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion
• CVE-2026-907861 PoCDvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion
• CVE-2026-907871 PoCSoarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management
• CVE-2026-907881 PoCmagicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
• CVE-2026-907891 PoCitsourcecode Leave Management System login.php sql injection
• CVE-2026-907911 PoCGPAC MP4Box base_scenegraph.c gf_node_unregister use after free
• CVE-2026-907921 PoCGPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference
• CVE-2026-907931 PoCGPAC MP4Box base_scenegraph.c gf_node_get_name use after free
• CVE-2026-907941 PoCGPAC MP4Box vrml_tools.c gf_sg_script_load use after free
• CVE-2026-907951 PoCitsourcecode Loan Management System navbar.php cross site scripting
• CVE-2026-907961 PoCitsourcecode Leave Management System index.php sql injection
• CVE-2026-908011 PoCGNU Binutils ld cache.c cache_bwrite buffer overflow
• CVE-2026-908021 PoCGNU Binutils ld libbfd.c bfd_putl64 null pointer dereference
• CVE-2026-908031 PoCGNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow
• CVE-2026-908041 PoCGNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
• CVE-2026-908051 PoCsubhajitkhan online-clinic-management-system doctorlogin.php sql injection
• CVE-2026-908071 PoCnanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
• CVE-2026-908101 PoCcosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization
• CVE-2026-908111 PoCcosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure
• CVE-2026-908121 PoCcosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
• CVE-2026-908131 PoCcosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize
• CVE-2026-908141 PoCcosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery
• CVE-2026-908151 PoCFFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds
• CVE-2026-908175 PoCsAn unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in…
• CVE-2026-908181 PoCnetease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request…
• CVE-2026-908241 PoCGPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow
• CVE-2026-908251 PoCGPAC MP4Box base_scenegraph.c gf_node_unregister use after free
• CVE-2026-908261 PoCGPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds
• CVE-2026-908271 PoCGPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
• CVE-2026-908281 PoCGNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
• CVE-2026-908291 PoCGNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference
• CVE-2026-908301 PoCGNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference
• CVE-2026-908311 PoCGNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption
• CVE-2026-908351 PoCmichaelliao itranswarp Page Content Rendering Markdown.java Markdown.toHtml cross site scripting
• CVE-2026-908401 PoCPHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication
• CVE-2026-908411 PoCPHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection
• CVE-2026-908421 PoCPHPGurukul Blood Donor Management System Login_Model.php cleartext storage in file
• CVE-2026-908431 PoCSabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection
• CVE-2026-908441 PoCPHPGurukul Daily Expense Tracker System Login index.php sql injection
• CVE-2026-908451 PoCPHPGurukul Daily Expense Tracker System sidebar.php cross site scripting
• CVE-2026-908461 PoCPHPGurukul Daily Expense Tracker System forgot-password.php sql injection
• CVE-2026-908472 PoCsEFM ipTIME C200E System Setup iux_set.cgi os command injection
• CVE-2026-908491 PoCSourceCodester College Notes Gallery Management System login.php sql injection
• CVE-2026-908501 PoCPHPGurukul Hostel Management System manage-students.php cross site scripting
• CVE-2026-908511 PoCPHPGurukul Hostel Management System checklogin.php access control
• CVE-2026-908521 PoCluben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free
• CVE-2026-908561 PoCSourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management
• CVE-2026-908571 PoCSourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload
• CVE-2026-908581 PoCsubhajitkhan online-clinic-management-system adminappview.php session_start authorization
• CVE-2026-908761 PoCSourceCodester Online Faculty Clearance System delete_requirement.php sql injection
• CVE-2026-908771 PoCSourceCodester Online Faculty Clearance System update_requirement_status.php sql injection
• CVE-2026-908781 PoCvllm-project vLLM Jinja Template Rendering completions resource consumption
• CVE-2026-908791 PoCzyx0814 FilePress Publish search.php sql injection
• CVE-2026-908801 PoCD-Link DSL-3782 Diagnostics Diagnostics.asp system command injection
• CVE-2026-908811 PoCD-Link DIR-882 CGI Binary dllog.cgi main information disclosure
• CVE-2026-908981 PoCBifrost unauthenticated remote code execution via MCP stdio client registration
• CVE-2026-909071 PoCJoomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3
• CVE-2026-909221 PoCPaid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch
• CVE-2026-909231 PoCAutopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion
• CVE-2026-909391 PoCnovel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint
• CVE-2026-909401 PoCnovel-plus through 5.3.3 Default Cache Management Password in the Front Portal
• CVE-2026-909411 PoCnovel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint
• CVE-2026-909421 PoCCasdoor through 4.4.0 Private Key Exposure via Certificate Endpoints
• CVE-2026-909501 PoCPaid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form
• CVE-2026-909511 PoCPaid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment
• CVE-2026-909521 PoCWP Edit Password Protected 2.0.0 - 2.0.6 - Unauthenticated Site-Wide Access Mode Bypass via REST API
• CVE-2026-909531 PoCImage Optimizer by Elementor < 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure via Discarded REST Permission…
• CVE-2026-909721 PoCWP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion
• CVE-2026-909741 PoCWP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update
• CVE-2026-909761 PoCClean Login < 1.19 - Unauthenticated Account Creation with Registration Disabled
• CVE-2026-909771 PoCClean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison
• CVE-2026-909781 PoCFilter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check
• CVE-2026-909841 PoCGenerate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form Field
• CVE-2026-909851 PoCWPC Smart Compare for WooCommerce < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure via woosc_load
• CVE-2026-909871 PoCEasy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price
• CVE-2026-909881 PoCRequest a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum
• CVE-2026-909891 PoCTainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints