Visit Website →

Recent Items

CVE-2026-86197 (VulnCheck)

Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox
Published on 2026-09-05T12:09:10.147000+00:00
Updated on 2026-09-05T12:09:10.147000+00:00

CVE-2026-86196 (VulnCheck)

Grav API Plugin before 1.0.20 Authentication Bypass via Host Header
Published on 2026-09-05T12:09:09.490000+00:00
Updated on 2026-09-05T12:09:09.490000+00:00

CVE-2026-86195 (VulnCheck)

grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag
Published on 2026-09-05T12:09:08.807000+00:00
Updated on 2026-09-05T12:09:08.807000+00:00

CVE-2026-86194 (VulnCheck)

Grav Form Plugin before 9.1.22 Cross-Page Form Execution
Published on 2026-09-05T12:09:08.147000+00:00
Updated on 2026-09-05T12:09:08.147000+00:00

CVE-2026-86193 (VulnCheck)

Grav API Plugin Authentication Bypass via Group-Inherited Super
Published on 2026-09-05T12:09:07.441000+00:00
Updated on 2026-09-05T12:09:07.441000+00:00

CVE-2026-86192 (VulnCheck)

SiYuan before v3.8.2 Information Disclosure via Attribute-View
Published on 2026-09-05T12:09:06.781000+00:00
Updated on 2026-09-05T12:09:06.781000+00:00

CVE-2026-86191 (VulnCheck)

SiYuan before v3.8.2 Private Attribute View Key Enumeration
Published on 2026-09-05T12:09:06.103000+00:00
Updated on 2026-09-05T12:09:06.103000+00:00

CVE-2026-86190 (VulnCheck)

WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter
Published on 2026-09-05T12:09:05.428000+00:00
Updated on 2026-09-05T12:09:05.428000+00:00

CVE-2026-86189 (VulnCheck)

WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
Published on 2026-09-05T12:09:04.748000+00:00
Updated on 2026-09-05T12:09:04.748000+00:00

CVE-2026-86188 (VulnCheck)

AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting
Published on 2026-09-05T12:09:04.086000+00:00
Updated on 2026-09-05T12:09:04.086000+00:00