[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass
miniOrange 5.4.
advisories
20 articles
[webapps] EasyAppointments 1.5.1 - Blind SQL Injection
EasyAppointments 1.5.
[webapps] Payload CMS 3.72.0 - Blind SQL Injection
Payload CMS 3.72.
[webapps] Bludit CMS - Stored XSS
Bludit CMS - Stored XSS
[webapps] Grav CMS 2.0.7 - RCE
Grav CMS 2.0.
[webapps] Wolf CMS 0.8.3.1 - RCE v
Wolf CMS 0.8.
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)
One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used ...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-81578 PaperCu...
ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the abili...
ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exp...
ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exp...
ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exp...
ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exp...
ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)
[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Linksys E1200_2.0.
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.
[webapps] CubeCart 6.7.4 - SQL injection
CubeCart 6.7.
[webapps] CubeCart 6.7.4 - SQL
CubeCart 6.7.
[webapps] CubeCart 6.7.4 - Stored XSS
CubeCart 6.7.
[webapps] CubeCart 6.7.4 - Cross-Site Scripting
CubeCart 6.7.