miggo - Robuta Search

https://www.miggo.io/vulnerability-database/cve/CVE-2026-49314 CVE-2026-49314: FusionOS Rendering Module DoS | Miggo FusionOS rendering module OOB write via crafted graphical data processing causes memory corruption, resulting in a system crash and denial-of-service (DoS). cve rendering module dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-54614 CVE-2026-54614: cakephp/debug_kit: MailPreview | Miggo ### Impact The `MailPreview` feature of debugkit is vulnerable to arbitrary constructor execution. For an application to be vulnerable the following cve cakephp debug kit miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-82465 CVE-2026-82465: pac4j-saml before 6.5.6 Session | Miggo pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest(). When an IdP sends cve saml session miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-85122 CVE-2026-85122: Easy Form Builder Unauth XSS | Miggo Easy Form Builder unauthenticated Stored XSS via form type confusion injects persistent scripts into the admin dashboard through improper submission validation. form builder cve easy xss miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-80128 CVE-2026-80128: Dell SCG Authentication Bypass | Miggo Dell SCG 5.0 authentication bypass permits a low-privileged remote attacker to circumvent security protection mechanisms through improper credential validation. cve dell scg authentication bypass https://www.miggo.io/vulnerability-database/cve/CVE-2026-71449 CVE-2026-71449: | Miggo : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32:... cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-81296 CVE-2026-81296: WordPress Fluent Forms Pro Add | Miggo fluent forms cve wordpress pro add Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10 Best Live Sex Cam Shows with Free Live Chat | XLoveCam Watch thousands of cam girls get naked on XLoveCam. https://www.miggo.io/vulnerability-database/cve/CVE-2026-93272 CVE-2026-93272: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 | Miggo In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced... cve qcom fix handling lack https://www.miggo.io/vulnerability-database/cve/CVE-2026-93712 CVE-2026-93712: Dancer2 File Route Handler LFI | Miggo Dancer2 path traversal in the File route handler serves any worker-readable file to unauthenticated requests via relative path segments, exposing config.yml. cve file route handler lfi https://www.miggo.io/vulnerability-database/cve/CVE-2026-79395 CVE-2026-79395: Xiongmai IPC Admin Auth Bypass | Miggo Xiongmai IP Camera XM530 auth bypass in Sofia IPC daemon's WS-Security grants privileged ONVIF actions via a SOAP request with admin user and any password. cve ipc admin auth bypass https://www.miggo.io/vulnerability-database/cve/CVE-2026-16649 CVE-2026-16649: Gravity Forms Unauth Stored XSS | Miggo Gravity Forms unauthenticated Stored XSS via Post Body Field injects malicious scripts using an onerror event in a tooltip's aria-label re-parsed as innerHTML. gravity forms stored xss cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-93374 CVE-2026-93374: Chrome Dawn Sandbox Escape RCE | Miggo Google Chrome for Android's Dawn component use-after-free via a crafted HTML page grants remote attackers arbitrary code execution and a sandbox escape. cve chrome dawn sandbox escape https://www.miggo.io/vulnerability-database/cve/CVE-2026-76858 CVE-2026-76858: Netcore NR255 DDNS Stored XSS | Miggo Netcore NR255-V stored XSS in ddns_wan_list_show.cgi executes persistent script in admin context via DDNS configuration injection and unsafe eval() handling. stored xss cve netcore ddns miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-86743 CVE-2026-86743: Snipe-IT Report Auth Bypass | Miggo Snipe-IT auth bypass in asset acceptance reports discloses cross-company inventory and assignee data to authenticated users via unscoped database queries. cve snipe report auth bypass https://www.miggo.io/vulnerability-database/cve/CVE-2026-60702 CVE-2026-60702: | Miggo Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,... cve miggo Sponsored https://www.camsoda.com/?id=robuta&ad_id=300x250_10.gif Free Live Sex Cams, Cam Girls, Adult Chat, and Pornstar Cams | Camsoda Join Camsoda for the hottest live cam girls! Free HD webcam shows, private sessions, and real-time chat with sexy models. Watch live now and enjoy! https://www.miggo.io/vulnerability-database/cve/CVE-2026-87533 CVE-2026-87533: Chrome DevTools Use-After-Free | Miggo Google Chrome DevTools use-after-free grants local attackers arbitrary code execution outside the sandbox by interacting with a malicious local program. use after free chrome devtools cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-61852 CVE-2026-61852: Chartbrew AI runQuery SQLi | Miggo Chartbrew AI runQuery tool SQLi via a crafted row_limit parameter bypasses read-only checks, granting arbitrary SQL execution and potential RCE on the database. cve sqli miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-13639 CVE-2026-13639: Synology DSM Login File Write | Miggo Synology DiskStation Manager (DSM) login logic's insufficient entropy grants remote attackers arbitrary file read/write access and facilitates DoS attacks. cve synology dsm file write https://www.miggo.io/vulnerability-database/cve/CVE-2026-78271 CVE-2026-78271: WordPress FluentCRM Pro plugin | Miggo cve wordpress fluentcrm pro plugin https://www.miggo.io/vulnerability-database/cve/CVE-2026-86667 CVE-2026-86667: iWebShop Member SQL Injection | Miggo aircheng-org iWebShop-5 member.php SQLi in the member_list function's Search parameter grants remote attackers full database read/write access and exfiltration. sql injection cve member miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-79592 CVE-2026-79592: libxls OLE Summary Offset DoS | Miggo libxls xls_dumpSummary() out-of-bounds read via a crafted XLS file with malicious OLE summary offsets causes a denial of service or information disclosure. cve ole summary offset dos https://www.miggo.io/vulnerability-database/cve/CVE-2026-100792 CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component | Miggo JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,... in the cve jit javascript webassembly https://www.miggo.io/vulnerability-database/cve/CVE-2026-18273 CVE-2026-18273: Kenwood DNR1007XR USB Incorrect | Miggo Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to cve kenwood usb incorrect miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-79677 CVE-2026-79677: Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout | Miggo Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of... apache tomcat asynchronous write cve websocket dos https://www.miggo.io/vulnerability-database/cve/CVE-2026-93749 CVE-2026-93749: source-map-js Event Loop DoS | Miggo source-map-js DoS from improper offset line validation in indexed source maps causes synchronous event loop blocking via large numeric values, halting requests. source map event loop cve dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-90364 CVE-2026-90364: Linux Kernel ACPI cpufreq DoS | Miggo Linux kernel ACPI processor driver init failure creates a use-after-free by not unregistering the cpufreq notifier, causing a system-wide DoS via kernel panic. linux kernel cve acpi dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-100791 CVE-2026-100791: Use-after-free in the DOM: Core & HTML component | Miggo use after free in the cve dom core https://www.miggo.io/vulnerability-database/cve/CVE-2026-51879 CVE-2026-51879: | Miggo deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file. A remote caller can enumerate... cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-93606 CVE-2026-93606: vm2 Sandbox Escape via Promise | Miggo vm2 sandbox escape in VM/NodeVM via Promise Symbol.species bypasses the bridge rejection sanitizer, leaking unsanitized host objects for potential host RCE. cve sandbox escape via promise https://www.miggo.io/vulnerability-database/cve/CVE-2026-27562 CVE-2026-27562: iodd Config Admin Auth RCE | Miggo Authenticated command injection in the /api/iodd/config endpoint via a crafted PUT request grants remote code execution with root privileges on the host OS. cve iodd config admin auth https://www.miggo.io/vulnerability-database/cve/CVE-2026-69317 CVE-2026-69317: Windows RDP Client OOB Read | Miggo Windows Remote Desktop Client out-of-bounds read by an authorized attacker over the network discloses sensitive kernel memory from the affected system. cve windows rdp client oob https://www.miggo.io/vulnerability-database/cve/CVE-2026-51616 CVE-2026-51616: | Miggo Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-90650 CVE-2026-90650: MotoPress HB Stripe Unauth XSS | Miggo MotoPress Hotel Booking unauthenticated stored XSS via a forged Stripe webhook event 'id' injects malicious scripts into payment logs for admin execution. cve stripe xss miggo https://www.miggo.io/vulnerability-database/cve/CVE-2024-23650 CVE-2024-23650: BuildKit Frontend Malformed DoS | Miggo A malicious BuildKit client request with incorrect parameters sent from a frontend triggers a daemon-crashing DoS through an unhandled panic condition. cve frontend malformed dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-74853 CVE-2026-74853: Pods Shortcode Callback LFI | Miggo Pods WordPress plugin LFI via unrestricted shortcode display callback function resolution grants authors arbitrary file read access outside the web root. cve pods shortcode callback lfi https://webflow.miggo.io/industries Application Security by Industry | Miggo The patch gap looks different in a hospital, a bank and a checkout flow. See how Miggo finds and shields exploitable CVEs in each. application security by industry miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-74512 CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() | Miggo In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` destroys... use after free cve audit fix potential https://www.miggo.io/vulnerability-database/cve/CVE-2026-104851 CVE-2026-104851: fsspec ReferenceFS SSTI RCE | Miggo fsspec ReferenceFileSystem SSTI grants remote attackers RCE via a malicious Kerchunk JSON, triggering unsandboxed jinja2 rendering for code execution. cve ssti rce miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-90049 CVE-2026-90049: Linux Kernel skbuff UAF/DoS | Miggo Linux kernel skb_zerocopy() memory corruption on error paths prematurely clears shared frag flags, causing data corruption or DoS during IPsec ESP processing. linux kernel cve uaf dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-100373 CVE-2026-100373: OpenMetadata through 2.0.2 SSRF via Webhook URL Validation Bypass | Miggo OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function that fails to properly resolve DNS... cve ssrf via webhook url https://www.miggo.io/vulnerability-database/cve/CVE-2026-62368 CVE-2026-62368: Snipe-IT Custom Field Name XSS | Miggo Snipe-IT stored XSS in Custom Field names executes in asset list headers, escalating privileges to superuser via unescaped bootstrap-table title rendering. custom field cve snipe name xss https://www.miggo.io/vulnerability-database/cve/CVE-2026-91099 CVE-2026-91099: HPLIP RCE & Privilege Escalate | Miggo HP HPLIP software RCE and privilege escalation via malicious file parsing grants attackers full system control through crafted print jobs and D-Bus calls. cve hplip rce privilege escalate https://www.miggo.io/vulnerability-database/cve/CVE-2023-54398 CVE-2023-54398: Yonyou U8 Deserialization RCE | Miggo Yonyou U8 Cloud Java deserialization RCE in FileManageServlet's doAction method permits unauthenticated remote command execution via a malicious POST payload. cve yonyou deserialization rce miggo