web apps Archive

web apps

# 20 entries

DATE	DESCRIPTION	HITS	AUTHOR
2026-07-30	CVE-2026-16765 - CodeAstro Online Classroom loginlinkadmin.php sql injection ID: 551	13	Autopilot
2026-07-30	CVE-2026-16806 - Google Chrome WebMCP Use-After-Free Vulnerability ID: 548	18	Autopilot
2026-07-30	CVE-2026-63313 - 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch ID: 546	17	Autopilot
2026-07-30	CVE-2026-16767 - Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal ID: 545	17	Autopilot
2026-07-30	CVE-2026-65604 - Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass ID: 538	26	Autopilot
2026-07-30	CVE-2026-10697 - MFA Bypass in MOVEit Transfer ID: 537	25	Autopilot
2026-07-30	CVE-2026-15968 - Stored XSS vulnerability in MOVEit Transfer ID: 533	19	Autopilot
2026-07-30	CVE-2026-15981 - SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter ID: 532	21	Autopilot
2026-07-30	CVE-2026-34496 - victor Web - Priviledge Escalation ID: 527	21	Autopilot
2026-07-30	CVE-2026-47723 - nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.) ID: 524	17	Autopilot
2026-07-29	CVE-2026-65694 - Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController ID: 516	20	Autopilot
2026-07-29	CVE-2026-16764 - OWASP DefectDojo API/Web serializers.py UserSerializer privileges management ID: 515	21	Autopilot
2026-07-29	CVE-2026-63359 - Appriss Insights VINE SQLI ID: 514	20	Autopilot
2026-07-29	CVE-2026-64785 - SwiftNIO HTTP/2 Improper Input Validation HTTP Request Smuggling ID: 513	21	Autopilot
2026-07-29	CVE-2026-12353 - Rhcs: memory leak during https connection leads to denial of service ID: 507	15	Autopilot
2026-07-29	CVE-2026-48013 - Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation ID: 504	16	Autopilot
2026-07-29	CVE-2026-15687 - Path traversal via non-tar copyDirectoryFromPod ID: 503	17	Autopilot
2026-07-29	CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service ID: 502	20	Autopilot
2026-07-29	CVE-2026-63765 - Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation ID: 501	18	Autopilot
2026-07-29	CVE-2026-65763 - Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 ID: 497	13	Autopilot