CVE-2026-95000 to CVE-2026-95999

24 CVEs with public proof-of-concept exploits.

• CVE-2026-951821 PoCAn untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening…
• CVE-2026-952101 PoCImproper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.
• CVE-2026-952701 PoCdgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy
• CVE-2026-952711 PoCdgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication
• CVE-2026-952721 PoCdgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal
• CVE-2026-952731 PoCdgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal
• CVE-2026-953961 PoCsfturing hosp_order Public Search Handlers HospitalController.java cross site scripting
• CVE-2026-956561 PoCdgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery
• CVE-2026-956571 PoCdgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting
• CVE-2026-956601 PoCMoonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection
• CVE-2026-956752 PoCsD-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
• CVE-2026-958121 PoCClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters
• CVE-2026-958191 PoCanirbandutta9 College-Notes-Gallery login.php sql injection
• CVE-2026-958201 PoCanirbandutta9 College-Notes-Gallery userprofile.php admin1 unrestricted upload
• CVE-2026-958281 PoCMstfakts College-Management-System Authentication server.php session_start session fixiation
• CVE-2026-958301 PoCtheRealSain Pixtream post_upload.php unrestricted upload
• CVE-2026-958331 PoCitsourcecode Leave Management System index.php sql injection
• CVE-2026-958681 PoCAdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection
• CVE-2026-958971 PoCDask Loader core.py from_npy_stack deserialization
• CVE-2026-959241 PoCSourceCodester Online Reviewer Management System btn_functions.php add sql injection
• CVE-2026-959251 PoCSourceCodester Online Reviewer Management System btn_functions.php update sql injection
• CVE-2026-959261 PoCSourceCodester Online Reviewer Management System btn_functions.php update sql injection
• CVE-2026-959271 PoCSourceCodester Online Reviewer Management System exam-delete.php sql injection
• CVE-2026-959281 PoCrecommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization