Loginzumba/json-serializer zumba/json-serializer < 3.2.3 RCE
15 March 2026 at 17:26
Topic: zumba/json-serializer zumba/json-serializer
Normal view
Received — 16 March 2026
⏭
CXSECURITY Database RSS Feed - CXSecurity.com
-
CXSECURITY Database RSS Feed - CXSecurity.com
- zumba/json-serializer zumba/json-serializer < 3.2.3 RCE
-
-
- Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak
-
Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak
15 March 2026 at 17:25
Topic: Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak # CVE: ...
-
- Frappe Framework < 14.99.0 and < 15.84.0 Unauthenticated SQL Injection
-
Frappe Framework < 14.99.0 and < 15.84.0 Unauthenticated SQL Injection
14 March 2026 at 23:34
Topic: Frappe Framework
-
- PyJWT < 2.12.0 crit header bypass / Insufficient crit validation
-
PyJWT < 2.12.0 crit header bypass / Insufficient crit validation
14 March 2026 at 23:33
Topic: PyJWT
Received — 12 March 2026
⏭
CXSECURITY Database RSS Feed - CXSecurity.com
-
- WeGIA < = 3.6.4 Unauthenticated Admin Authentication Bypass
-
WeGIA < = 3.6.4 Unauthenticated Admin Authentication Bypass
8 March 2026 at 16:39
Topic: WeGIA
-
- NocoDB < = 0.301.2 User Enumeration via Password Reset Endpoint
-
NocoDB < = 0.301.2 User Enumeration via Password Reset Endpoint
8 March 2026 at 16:39
Topic: NocoDB
Craft CMS 4.x & 5.x RCE via Blocklist Bypass
8 March 2026 at 16:38
Topic: Craft CMS 4.x & 5.x RCE via Blocklist Bypass Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: Craft CMS 4.x & 5.x RCE via Blocklist Bypass # CVE: CVE-2026-28783 # Date: 2025-11-...
-
- pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
-
pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
8 March 2026 at 16:38
Topic: pac4j-jwt
-
- WeGIA < = 3.6.4 Remote Code Execution via OS Command Injection
-
WeGIA < = 3.6.4 Remote Code Execution via OS Command Injection
3 March 2026 at 21:45
Topic: WeGIA
-
- MaxSite CMS < = 109.1 unauthenticated RCE via run_php plugin
-
MaxSite CMS < = 109.1 unauthenticated RCE via run_php plugin
2 March 2026 at 22:12
Topic: MaxSite CMS
-
- OpenClaw tools.exec.safeBins < = 2026.2.22 Remote Code Execution
-
OpenClaw tools.exec.safeBins < = 2026.2.22 Remote Code Execution
2 March 2026 at 22:11
Topic: OpenClaw tools.exec.safeBins
-
- Statamic CMS < 5.73.11 & < 6.4.0 Stored XSS via SVG Upload Leading to Privilege Escalation
-
Statamic CMS < 5.73.11 & < 6.4.0 Stored XSS via SVG Upload Leading to Privilege Escalation
2 March 2026 at 22:11
Topic: Statamic CMS
-
- OpenStack Vitrage < 12.0.1 / 13.0.1 Eval Injection Remote Code Execution
-
OpenStack Vitrage < 12.0.1 / 13.0.1 Eval Injection Remote Code Execution
2 March 2026 at 22:11
Topic: OpenStack Vitrage
Tenda F453 v1.0.0.3 frmL7ImForm Buffer Overflow
2 March 2026 at 22:11
Topic: Tenda F453 v1.0.0.3 frmL7ImForm Buffer Overflow Risk: Low Text:#!/usr/bin/env python3 # Exploit Title: Tenda F453 frmL7ImForm Buffer Overflow # CVE: CVE-2026-3380 ...
-
- MLX < = 0.29.3 - Heap-based Buffer Overflow in .npy Parser
-
MLX < = 0.29.3 - Heap-based Buffer Overflow in .npy Parser
26 February 2026 at 19:38
Topic: MLX
-
- Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
-
Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
26 February 2026 at 19:38
Topic: Azure AI Language Conversations Authoring SDK
-
- FileBrowser ≤ v2.57.0 - Path-Based Access Control Bypass via Multiple Leading Slashes in URL (Authenticated Authorization Byp
-
FileBrowser ≤ v2.57.0 - Path-Based Access Control Bypass via Multiple Leading Slashes in URL (Authenticated Authorization Byp
23 February 2026 at 23:19
Topic: FileBrowser ≤ v2.57.0 - Path-Based Access Control Bypass via Multiple Leading Slashes in URL (Authenticated Authorization Byp Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: FileBrowser Access Control Bypass via Multiple Leading Slashes # CVE: CVE-2026-25890 ...
-
- LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key
-
LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key
23 February 2026 at 23:18
Topic: LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: LangGraph SQLite Checkpoint SQL Injection PoC # CVE: CVE-2025...
-
- Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
-
Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
19 February 2026 at 22:05
Topic: Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE Risk: Low Text:#!/usr/bin/env python3 # Exploit Title: Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE # Exploit Author: Moham...
