Jorge González Milla Probo 0.222.2 - IDOR
webapps multiple CVE-2026-63505

Jorge González Milla webpack_devserver 5.2.5 - CSRF
webapps multiple CVE-2026-14620

Gabriel Rodrigues Duplicati 2.2.0.3 - JWT Signing Key Leak
webapps multiple

Mohammad Hossein Sadeghian WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
webapps multiple CVE-2026-3891

Balachandar Gowrisankar Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
webapps multiple CVE-2026-3576

Mohammad Hossein Sadeghian Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure
webapps multiple CVE-2025-60188

Fernando Mengali Win32 - Calc Shellcode
windows

Mina Nageh Salalma ZTE Routers - Unauthenticated Denial of Service
local multiple CVE-2026-34473

Mina Nageh Salalma ZTE ZXHN H188A V6 - Authentication Bypass
local multiple CVE-2026-34472

Mina Nageh Salalma ZTE H298A / H108N - Unauthenticated Credential Exposure
local multiple CVE-2026-34474

Max Gabriel EspoCRM 9.3.3 - SSRF
webapps multiple CVE-2026-33534

Daniil Gordeev MeiG Smart FORGE_SLT711 - OS Command Injection
hardware linux CVE-2026-36356

Daniil Gordeev Realtek rtl819x - Local Privilege
local linux CVE-2026-36355

Gabriel Rodrigues OpenCATS 0.9.7.4 - SQL Injection
webapps multiple

Mustafa Murat Akgül Grav CMS 2.0.0-beta.2 - Remote Code Execution
webapps php CVE-2026-42607

Long Fong Chan Linux Kernel 6.8 - Local Privilege Escalation
local linux