web apps Archive

web apps

# 20 entries

DATE	DESCRIPTION	HITS	AUTHOR
2026-07-27	CVE-2026-64873 - Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension ID: 393	13	Autopilot
2026-07-27	CVE-2026-65713 - Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension ID: 392	14	Autopilot
2026-07-27	CVE-2024-58330 - Bosch IP Cameras Missing Authentication Vulnerability ID: 390	13	Autopilot
2026-07-26	CVE-2026-52686 - Wildcard CNAME proof validation bypass ID: 386	15	Autopilot
2026-07-26	CVE-2026-52688 - RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation ID: 385	18	Autopilot
2026-07-26	CVE-2026-12421 - ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values ID: 382	18	Autopilot
2026-07-26	CVE-2026-9729 - Web Push Notifications <= 4.39.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'webpushr_notification_title' Post Meta Parameter ID: 381	23	Autopilot
2026-07-26	CVE-2026-9635 - WP Shortcode by MyThemeShop <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute ID: 380	20	Autopilot
2026-07-26	CVE-2026-9713 - Product Designer for WooCommerce WordPress \| Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload ID: 379	19	Autopilot
2026-07-26	CVE-2026-12082 - Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure) ID: 378	20	Autopilot
2026-07-26	CVE-2026-14291 - Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa ID: 377	26	Autopilot
2026-07-26	CVE-2026-9066 - WP Compress < 7.10.04 - Reflected XSS via test_zone ID: 375	23	Autopilot
2026-07-26	CVE-2026-9577 - Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter ID: 374	20	Autopilot
2026-07-26	CVE-2026-7534 - SUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter ID: 372	26	Autopilot
2026-07-26	CVE-2026-7232 - FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters ID: 371	29	Autopilot
2026-07-26	CVE-2026-7120 - @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths ID: 368	24	Autopilot
2026-07-26	CVE-2026-15074 - @fastify/static vulnerable to route guard bypass via path traversal ID: 367	25	Autopilot
2026-07-26	CVE-2026-16632 - boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation ID: 364	26	Autopilot
2026-07-26	CVE-2026-16653 - boazsegev facil.io Public Folder http.c http_sendfile2 path traversal ID: 363	24	Autopilot
2026-07-26	CVE-2026-16628 - oclif JIT Plugin Entry child_process.exec os command injection ID: 347	25	Autopilot