Topic: Windows Defender (MsMpEng.exe) Race Condition -> LPE / SYSTEM / Use-After-Free -> Crash Risk: Medium Text:# Titles: Windows Defender (MsMpEng.exe) Race Condition -> LPE / SYSTEM / Use-After-Free -> Crash # Author: nu11secur1ty # Da...

Topic: D-Link DSL2600U rom-0 Admin Password Disclosure Risk: High Text:# Exploit Title: D-Link DSL2600U - 'rom-0' Admin Password Disclosure # Date: 2026-05-02 # Exploit Author: Amir Hossein Jamshi...

Topic: KNX visualisering - Broken Access Control Risk: Medium Text:# Exploit Title: KNX visualisering - Broken Access Control # Date: 6/10/2026 # Exploit Author: parsa rezaie khiabanloo # Ven...

Topic: PHP Link Directory (phpLD) 2.1.3 - SQL Injection, IDOR, CSRF Risk: High Text:Title: PHP Link Directory (phpLD) 2.1.x Multiple Vulnerabilities Product: PHP Link Directory (phpLD) Vendor: N...

Topic: OpenEMR 7.0.2 Arbitrary File Read Risk: High Text:# Exploit Title: OpenEMR 7.0.2 - Arbitrary File Read # Google Dork: intitle:"OpenEMR" inurl:"interface/login/login.php" # D...

Topic: ZTE ZXHN H188A V6 Authentication Bypass Risk: Low Text:# Exploit Title: ZTE ZXHN H188A V6 - Authentication Bypass # Date: 2026-05-20 # Exploit Author: Mina Nageh Salalma (Monx Res...

Topic: phpLD 2.1.3 (EOL) has authenticated SQLi in admin/dir_validate.php (CATEGORY_ID) and admin ORDER BY (sort), unauthenticated IDO Risk: Medium Text:Title: PHP Link Directory (phpLD) 2.1.x Multiple Vulnerabilities Product: PHP Link Directory (phpLD) Vendor: N...

Topic: Tenable Terrascan Server

Topic: Lenovo LegionSpace 1.7.11.2 DAService Unquoted Service Path Risk: Medium Text:# Exploit Title: Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path # Exploit Author: CENACIF-MX # Discovery Dat...

Topic: ZTE H298A / H108N Unauthenticated Credential Exposure Risk: Medium Text:# Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure via ETHCheat Parameter # Date: 2026-05-20 # Exploit...

Topic: WordPress Contest Gallery 28.1.4 Unauthenticated Blind SQL Injection Risk: Medium Text:# Exploit Title: WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection # Google Dork: N/A # Date: 2026-06-0...

Topic: BrandIT Consultancy - Blind Sql Injection Risk: Medium Text:********************************************************* #Exploit Title: BrandIT Consultancy - Blind Sql Injection #Date: 20...

Topic: Association Management Script - Multiple Vulnerabilities (IDOR, SQLi, Stored XSS) Risk: High Text:# Exploit Title: Association Web Script - Multiple Vulnerabilities # Date: 06.06.2026 # Author: Xasthur # Contact: https://t...

Topic: Canvas Breach: Symbiotic Dual-Virus Model & Origin Parity Evidence Risk: Medium Text:CRITICAL EVIDENCE: I have identified 100% logic parity between the initial Canvas exploit and the official "recovery" vector. ...

Topic: Open ISES Tickets

Topic: ePati Antikor NGFW 2.0.1301 Authentication Bypass Risk: Medium Text:# Exploit Title: ePati Antikor NGFW 2.0.1301 - Authentication Bypass # Date: 2026-04-13 # Exploit Author: [SADIK ERTÜRK] ...

Topic: Windows Shell LNK Spoofing to NTLMv2 Hash Capture Risk: Medium Text:# Titles: CVE-2026-32202 - Windows Shell LNK Spoofing to NTLMv2 Hash Capture # Author: nu11secur1ty # Date: 2026-05-27 # Ven...

Topic: Apache HTTP Server 2.4.66 mod_http2 Double-Free Denial of Service Risk: Medium Text:# Exploit Title: Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service # Google Dork: intext:"Apache/2.4.66" "...

Topic: Grav CMS 2.0.0-beta.2 Remote Code Execution Risk: High Text:# Exploit Title: Grav CMS

Topic: Frigate NVR 0.16.3 Remote Code Execution Risk: High Text:# Exploit Title: Frigate NVR 0.16.3 - Remote Code Execution # Date: 2026-02-05 # Exploit Author: jduardo2704 # Vendor Homep...