2026

WorkOrder CMS 0.1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login by mani

Webgrind 1.1 contains a remote command execution vulnerability that allows unauthenticated attackers to inject OS comman

Tftpd32 SE 4.60 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbit

Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows atta

Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by ma

Explorer32++ 1.3.5.531 contains a buffer overflow vulnerability in Structured Exception Handler (SEH) records that allow

Social-Share-Buttons 2.2.3 contains a critical SQL injection vulnerability in the project_id parameter that allows attac

Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject ma

Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitra

Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote stack-based buffer overflow vulnerability that allows unauthent

Inbit Messenger 4.6.0 - 4.9.0 contains a remote command execution vulnerability that allows unauthenticated attackers to

AimOne Video Converter 2.04 Build 103 contains a buffer overflow vulnerability in its registration form that causes appl

Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerability that allows attacker

Clevo HotKey Clipboard 2.1.0.6 contains an unquoted service path vulnerability in the HKClipSvc service that allows loca

e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to overrid

CONTPAQi AdminPAQ 14.0.0 contains an unquoted service path vulnerability in the AppKeyLicenseServer service running with

Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for exte

WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload mal

Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers

Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute ar

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attack

TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable fi

Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows

Connectify Hotspot 2018 contains an unquoted service path vulnerability in its ConnectifyService executable that allows

BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows lo

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo p

WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipula

Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard

Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execu

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with

Audio Conversion Wizard v2.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code b

WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitra

Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local a

Tdarr 2.00.15 contains an unauthenticated remote code execution vulnerability in its Help terminal that allows attackers

VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrar

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows loca

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server

PTPublisher 2.3.4 contains an unquoted service path vulnerability in the PTProtect service that allows local attackers t

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. A

ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code

ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload p

Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows atta

Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows

Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts thr

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upl

e107 CMS 3.2.1 contains an upload restriction bypass vulnerability that allows authenticated administrators to upload ma

e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulner

Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute

Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local