CVE-2026-93000 to CVE-2026-93999

62 CVEs with public proof-of-concept exploits.

• CVE-2026-930001 PoCSPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search
• CVE-2026-933071 PoCO-RAN-SC SMO OAM VES Collector memory allocation
• CVE-2026-933081 PoCO-RAN-SC SMO OAM VES Collector allocation of resources
• CVE-2026-933091 PoCO-RAN-SC SMO OAM VES Collector allocation of resources
• CVE-2026-933101 PoCO-RAN-SC SMO OAM VES Collector allocation of resources
• CVE-2026-933111 PoCFreedesktop Poppler SampledFunction Function.cc integer overflow
• CVE-2026-933121 PoCFreedesktop Poppler JBIG2Stream.cc rewind null pointer dereference
• CVE-2026-933131 PoCFreedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
• CVE-2026-933141 PoCFreedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
• CVE-2026-933391 PoCDitty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute
• CVE-2026-933491 PoCFrictionless OS Command Injection via explore Console Command
• CVE-2026-933531 PoCcopyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers
• CVE-2026-933552 PoCsLiteLLM Weak JWT Authentication via Email-Based User Lookup
• CVE-2026-933632 PoCsPayload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route
• CVE-2026-933992 PoCsOnline Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token…
• CVE-2026-934211 PoCMesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint
• CVE-2026-934531 PoCSOGo before 5.12.11 Password Reset Token Interception via Origin Header
• CVE-2026-934541 PoCAureus ERP through 1.6.0 Stored XSS via Payment Term Note
• CVE-2026-934852 PoCsWordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability
• CVE-2026-935071 PoCWC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content Disclosure
• CVE-2026-935081 PoCWC Fields Factory < 4.1.11 - Subscriber+ Arbitrary Post Meta Manipulation via AJAX
• CVE-2026-935091 PoCWallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount
• CVE-2026-935101 PoCPoints and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_points
• CVE-2026-935111 PoCPremium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification Bypass
• CVE-2026-935282 PoCsNP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Page
• CVE-2026-935311 PoCgedelumbung HospitalManagement cross-site request forgery
• CVE-2026-935321 PoCgedelumbung HospitalManagement Password Change password.php simpan improper authentication
• CVE-2026-935481 PoCFooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation
• CVE-2026-935491 PoCCoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass
• CVE-2026-935501 PoCVeeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_process
• CVE-2026-935771 PoCInteger Overflow or Wraparound in GitLab
• CVE-2026-935801 PoCInPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
• CVE-2026-936051 PoCvm2 NodeVM before 3.12.1 Remote Code Execution via child_process
• CVE-2026-936162 PoCsKEVDirectory Traversal and File upload allows execution of arbitrary script on the Management Server
• CVE-2026-936501 PoCSaleor throttling.py get_client_ip excessive authentication
• CVE-2026-936612 PoCsEvents Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR
• CVE-2026-936621 PoCEvents Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter
• CVE-2026-936742 PoCsLangflow OSS is affected by multiple vulnerabilities
• CVE-2026-937381 PoCTotolink A3002MU formSchedule buffer overflow
• CVE-2026-937391 PoCTotolink A3002MU formWlAc buffer overflow
• CVE-2026-937401 PoCTotolink A3002MU formWlEncrypt buffer overflow
• CVE-2026-937411 PoCTotolink A3002MU formWlWds buffer overflow
• CVE-2026-937421 PoCTotolink A3002MU formWsc command injection
• CVE-2026-939541 PoCgrimmory-tools grimmory Settings API Endpoint AppSettingController.java AppSettingController.getAppSettings authorization
• CVE-2026-939551 PoCgrimmory-tools grimmory Download Endpoint KoboController.java streamFileToResponse authorization
• CVE-2026-939583 PoCsD-Link R95 DHMAPI ssi system os command injection
• CVE-2026-939591 PoCSourceCodester Online Reviewer Management System btn_functions.php sql injection
• CVE-2026-939601 PoCPixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication
• CVE-2026-939621 PoCKamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow
• CVE-2026-939631 PoCitsourcecode Leave Management System controller.php sql injection
• CVE-2026-939641 PoCNginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication
• CVE-2026-939721 PoCSourceCodester Online Reviewer Management System btn_functions.php sql injection
• CVE-2026-939731 PoCSourceCodester Online Reviewer Management System btn_functions.php remove sql injection
• CVE-2026-939741 PoCSourceCodester Online Reviewer Management System btn_functions.php remove sql injection
• CVE-2026-939751 PoCcode-projects Assessment Management User Editing edit-user.php cross site scripting
• CVE-2026-939761 PoCcode-projects Assessment Management add-user.php cross site scripting
• CVE-2026-939771 PoCcode-projects Assessment Management add-single-mark.php cross site scripting
• CVE-2026-939781 PoCcode-projects Internship Management System login.php sql injection
• CVE-2026-939791 PoCcode-projects Internship Management System login.php sql injection
• CVE-2026-939801 PoCcode-projects Internship Management System Admin Login Form login.php sql injection
• CVE-2026-939881 PoCQloApps through 1.7.0 Arbitrary File Read via getEmailHTML
• CVE-2026-939971 PoCSourceCodester Drug Recommendation System edit_symptom.php sql injection