Topic: Chamillo LMS 1.11.2 Missing Cache Header Risk: Low Text:# CVE-2025-69581 An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full se...

Topic: ahu.mlsp.government.bg-XSS-Reflected-CRITICAL Cross-site scripting Risk: Low Text:## Happy New Year, dear friends. The same case: one year, nobody responds to this report! ## Titles: ahu.mlsp.government.bg-XS...

Topic: WordPress Plugin wp-front-user-submit – AJAX Login Username Enumeration Vulnerability Risk: Low Text:Description The WordPress plugin wp-front-user-submit is vulnerable to username enumeration via its unauthenticated AJAX login...

Topic: AVideo Notify.ffmpeg.json.php Unauthenticated Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Topic: phpIPAM 1.4 SQL-Injection Risk: Medium Text:# Exploit Title: phpIPAM 1.4 - SQL Injection # Date: 2025-11-25 # Exploit Author: CodeSecLab # Vendor Homepage: https://git...

Topic: n8n Workflow Expression Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Topic: CarRentalMS 2.0 Cross Site Request Forgery Risk: Low Text:## Description A Cross-Site Request Forgery (CSRF) vulnerability exists in the administrator profile update functionality of...

Topic: LibreChat MCP Stdio Remote Command Execution Risk: High Text:LibreChat MCP Stdio Remote Command Execution Jeremy Brown (jbrown3264/gmail), January 2026 = Summary = LibreChat...

Topic: WordPress Quiz Maker 6.7.0.56 SQL Injection Risk: Medium Text:# Exploit Title: WordPress Quiz Maker 6.7.0.56 - SQL Injection # Date: 2025-12-16 # Exploit Author: Rahul Sreenivasan (Tr0j4n...

Topic: River_Past_Video_Cleaner - Buffer Overflow (SEH) Risk: High Text:# Exploit Title: River_Past_Video_Cleaner - Buffer Overflow (SEH) # Date: 27.12.2025 # Software Link :https://river-past-vide...

Topic: MP3 Convert Lord V1.0 Local Seh Exploit Risk: High Text:# Exploit Title: MP3 Convert Lord V1.0 Local Seh Exploit # Date: 28.12.2025 # Vendor Homepage: http://www.avlord.com/ # Soft...

Topic: mrrb.bg-APP - XSS-Reflected Risk: Low Text:## Titles: mrrb.bg-APP - XSS-Reflected ## Author: nu11secur1ty ## Date: 01/06/2026 ## Vendor: mrrb.bg ## Software: mrrb.bg...

Topic: SigInt-Hombre v1 / dynamic Suricata detection rules from real-time threat feeds Risk: Medium Text:SigInt-Hombre, generates derived Suricata detection rules from live URLhaus threat indicators at runtime and deploy them to th...

Topic: Wordpress (Easy Hide Login) plugin Stored XSS Risk: Low Text:## Description DOM-based Cross-Site Scripting vulnerability in [Easy Hide Login] WordPress plugin allows authenticated admini...

Topic: Birth Chart Compatibility WordPress Plugin 2.0 Full Path Disclosure Risk: Low Text:/* * Exploit Title : Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure * Author : Byte Reaper *...

Topic: PMB SIGB 7.x - SQL Injection Risk: Low Text:Exploit Title: PMB SIGB 7.x - SQL Injection Date: 12-26-2025 Location : Algeria 23000 Exploit Author: DZ Mind Injector Ven...

Topic: RosarioSIS 6.7.2 Cross Site Scripting (XSS) Risk: Low Text:# Exploit Title: RosarioSIS 6.7.2 - Cross Site Scripting (XSS) # Date: 2025-11-25 # Exploit Author: CodeSecLab # Vendor Home...

Topic: River_Past_Audio_Converter - Buffer Overflow (SEH) Risk: High Text:# Exploit Title: River_Past_Audio_Converter - Buffer Overflow (SEH) # Date: 27.12.2025 # Software Link :https://river-past-au...

Topic: ESLockDecryptor: Tool for decrypt ES File Explorer encrypted files (.eslock) Risk: Low Text:ESLockDecryptor is a digital forensics and recovery tool designed to decrypt files locked by ES File Explorer (files with the ....

Topic: Backdoor.Win32.Poison.jh / Insecure Permissions Risk: Medium Text:Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2025 Original source: https://malvuln.com/advisory/3d9821cbe8365724...