miggo - Robuta Search

https://www.miggo.io/vulnerability-database/cve/CVE-2026-51879 CVE-2026-51879: | Miggo deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file. A remote caller can enumerate... cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-100373 CVE-2026-100373: OpenMetadata through 2.0.2 SSRF via Webhook URL Validation Bypass | Miggo OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function that fails to properly resolve DNS... cve ssrf via webhook url https://www.miggo.io/vulnerability-database/cve/CVE-2026-100791 CVE-2026-100791: Use-after-free in the DOM: Core & HTML component | Miggo use after free in the cve dom core https://www.miggo.io/vulnerability-database/cve/CVE-2026-80128 CVE-2026-80128: Dell SCG Authentication Bypass | Miggo Dell SCG 5.0 authentication bypass permits a low-privileged remote attacker to circumvent security protection mechanisms through improper credential validation. cve dell scg authentication bypass https://www.miggo.io/vulnerability-database/cve/CVE-2026-79592 CVE-2026-79592: libxls OLE Summary Offset DoS | Miggo libxls xls_dumpSummary() out-of-bounds read via a crafted XLS file with malicious OLE summary offsets causes a denial of service or information disclosure. cve ole summary offset dos https://www.miggo.io/vulnerability-database/cve/CVE-2026-93272 CVE-2026-93272: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 | Miggo In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced... cve qcom fix handling lack Sponsored https://www.sexygamerz.com/enter.php?prg=1&id=robuta&t=best&ad_id=sexygamerz_315x300_default4.jpg Sexy Gamerz - World's Best Gamer Dating Tired of playing alone? Find a hot gamer girl on Sexy Gamerz. https://www.miggo.io/vulnerability-database/cve/CVE-2026-81296 CVE-2026-81296: WordPress Fluent Forms Pro Add | Miggo fluent forms cve wordpress pro add https://www.miggo.io/vulnerability-database/cve/CVE-2026-93606 CVE-2026-93606: vm2 Sandbox Escape via Promise | Miggo vm2 sandbox escape in VM/NodeVM via Promise Symbol.species bypasses the bridge rejection sanitizer, leaking unsanitized host objects for potential host RCE. cve sandbox escape via promise https://www.miggo.io/vulnerability-database/cve/CVE-2026-79395 CVE-2026-79395: Xiongmai IPC Admin Auth Bypass | Miggo Xiongmai IP Camera XM530 auth bypass in Sofia IPC daemon's WS-Security grants privileged ONVIF actions via a SOAP request with admin user and any password. cve ipc admin auth bypass Sponsored https://www.college-flings.com/enter.php?prg=1&id=robuta&t=best&ad_id=collegeflings_315x300_2.jpg CollegeFlings Find your next college fling. Join for free today. https://www.miggo.io/vulnerability-database/cve/CVE-2026-93749 CVE-2026-93749: source-map-js Event Loop DoS | Miggo source-map-js DoS from improper offset line validation in indexed source maps causes synchronous event loop blocking via large numeric values, halting requests. source map event loop cve dos miggo Sponsored https://www.camsoda.ai/?id=robuta&ad_id=ai_300x250_22 Camsoda AI: AI Girlfriend App for Chatting, Photos, and Voice Camsoda AI is the AI girlfriend app for real-time chat, photos, and voice. Pick from 200+ characters or create your own. Free to start. https://www.miggo.io/vulnerability-database/cve/CVE-2026-71449 CVE-2026-71449: | Miggo : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32:... cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-90650 CVE-2026-90650: MotoPress HB Stripe Unauth XSS | Miggo MotoPress Hotel Booking unauthenticated stored XSS via a forged Stripe webhook event 'id' injects malicious scripts into payment logs for admin execution. cve stripe xss miggo Sponsored https://www.instabang.com/enter.php?prg=1&id=robuta&t=best&ad_id=ib_315x300_m_073113_5.jpg Instabang OFFICIAL - Free Adult Dating and Personals. Find an insta bang! The dating app that lets you explore, connect, and find your pleasure. https://www.miggo.io/vulnerability-database/cve/CVE-2026-79677 CVE-2026-79677: Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout | Miggo Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of... apache tomcat asynchronous write cve websocket dos https://www.miggo.io/vulnerability-database/cve/CVE-2026-69317 CVE-2026-69317: Windows RDP Client OOB Read | Miggo Windows Remote Desktop Client out-of-bounds read by an authorized attacker over the network discloses sensitive kernel memory from the affected system. cve windows rdp client oob https://www.miggo.io/vulnerability-database/cve/CVE-2026-13639 CVE-2026-13639: Synology DSM Login File Write | Miggo Synology DiskStation Manager (DSM) login logic's insufficient entropy grants remote attackers arbitrary file read/write access and facilitates DoS attacks. cve synology dsm file write https://www.miggo.io/vulnerability-database/cve/CVE-2026-54614 CVE-2026-54614: cakephp/debug_kit: MailPreview | Miggo ### Impact The `MailPreview` feature of debugkit is vulnerable to arbitrary constructor execution. For an application to be vulnerable the following cve cakephp debug kit miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-104851 CVE-2026-104851: fsspec ReferenceFS SSTI RCE | Miggo fsspec ReferenceFileSystem SSTI grants remote attackers RCE via a malicious Kerchunk JSON, triggering unsandboxed jinja2 rendering for code execution. cve ssti rce miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-86667 CVE-2026-86667: iWebShop Member SQL Injection | Miggo aircheng-org iWebShop-5 member.php SQLi in the member_list function's Search parameter grants remote attackers full database read/write access and exfiltration. sql injection cve member miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-51616 CVE-2026-51616: | Miggo Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-100792 CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component | Miggo JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,... in the cve jit javascript webassembly https://www.miggo.io/vulnerability-database/cve/CVE-2026-93374 CVE-2026-93374: Chrome Dawn Sandbox Escape RCE | Miggo Google Chrome for Android's Dawn component use-after-free via a crafted HTML page grants remote attackers arbitrary code execution and a sandbox escape. cve chrome dawn sandbox escape https://www.miggo.io/vulnerability-database/cve/CVE-2026-62368 CVE-2026-62368: Snipe-IT Custom Field Name XSS | Miggo Snipe-IT stored XSS in Custom Field names executes in asset list headers, escalating privileges to superuser via unescaped bootstrap-table title rendering. custom field cve snipe name xss Sponsored https://ctwmsg.com/?siteId=jasmin&cobrandId=&superCategoryName=&categoryName=girl&pageName=listpage&prm[psid]=robuta&prm[pstool]=211_3&prm[psprogram]=pps&prm[campaign_id]=&subAffId= Live Sex Cams and Adult Chat with Webcam Girls | LiveJasmin Chat for free on LiveJasmin and watch HD Live Sex cam shows! 2000+ Models are waiting for You, no registration required. https://www.miggo.io/vulnerability-database/cve/CVE-2026-85122 CVE-2026-85122: Easy Form Builder Unauth XSS | Miggo Easy Form Builder unauthenticated Stored XSS via form type confusion injects persistent scripts into the admin dashboard through improper submission validation. form builder cve easy xss miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-82465 CVE-2026-82465: pac4j-saml before 6.5.6 Session | Miggo pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest(). When an IdP sends cve saml session miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-86743 CVE-2026-86743: Snipe-IT Report Auth Bypass | Miggo Snipe-IT auth bypass in asset acceptance reports discloses cross-company inventory and assignee data to authenticated users via unscoped database queries. cve snipe report auth bypass https://www.miggo.io/vulnerability-database/cve/CVE-2026-90049 CVE-2026-90049: Linux Kernel skbuff UAF/DoS | Miggo Linux kernel skb_zerocopy() memory corruption on error paths prematurely clears shared frag flags, causing data corruption or DoS during IPsec ESP processing. linux kernel cve uaf dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-76858 CVE-2026-76858: Netcore NR255 DDNS Stored XSS | Miggo Netcore NR255-V stored XSS in ddns_wan_list_show.cgi executes persistent script in admin context via DDNS configuration injection and unsafe eval() handling. stored xss cve netcore ddns miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-91099 CVE-2026-91099: HPLIP RCE & Privilege Escalate | Miggo HP HPLIP software RCE and privilege escalation via malicious file parsing grants attackers full system control through crafted print jobs and D-Bus calls. cve hplip rce privilege escalate https://www.miggo.io/vulnerability-database/cve/CVE-2026-60702 CVE-2026-60702: | Miggo Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,... cve miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-61852 CVE-2026-61852: Chartbrew AI runQuery SQLi | Miggo Chartbrew AI runQuery tool SQLi via a crafted row_limit parameter bypasses read-only checks, granting arbitrary SQL execution and potential RCE on the database. cve sqli miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-27562 CVE-2026-27562: iodd Config Admin Auth RCE | Miggo Authenticated command injection in the /api/iodd/config endpoint via a crafted PUT request grants remote code execution with root privileges on the host OS. cve iodd config admin auth https://www.miggo.io/vulnerability-database/cve/CVE-2026-49314 CVE-2026-49314: FusionOS Rendering Module DoS | Miggo FusionOS rendering module OOB write via crafted graphical data processing causes memory corruption, resulting in a system crash and denial-of-service (DoS). cve rendering module dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-90364 CVE-2026-90364: Linux Kernel ACPI cpufreq DoS | Miggo Linux kernel ACPI processor driver init failure creates a use-after-free by not unregistering the cpufreq notifier, causing a system-wide DoS via kernel panic. linux kernel cve acpi dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-87533 CVE-2026-87533: Chrome DevTools Use-After-Free | Miggo Google Chrome DevTools use-after-free grants local attackers arbitrary code execution outside the sandbox by interacting with a malicious local program. use after free chrome devtools cve miggo Sponsored https://www.fling.com/enter.php?prg=1&id=robuta&t=best&ad_id=fl_315x300_12.jpg Fling OFFICIAL | Biggest Dating Site For The Curious! FREE registration Looking for real connections? Fling matches verified singles in a safe, inclusive community. Find your perfect match with full support. https://www.miggo.io/vulnerability-database/cve/CVE-2026-74512 CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() | Miggo In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` destroys... use after free cve audit fix potential https://www.miggo.io/vulnerability-database/cve/CVE-2023-54398 CVE-2023-54398: Yonyou U8 Deserialization RCE | Miggo Yonyou U8 Cloud Java deserialization RCE in FileManageServlet's doAction method permits unauthenticated remote command execution via a malicious POST payload. cve yonyou deserialization rce miggo Sponsored https://www.tradenudes.com/enter.php?prg=1&id=robuta&t=best&ad_id=tradenudes_315x300_1.jpg Trade Nudes for Free at TradeNudes Are you looking for someone to trade nudes with? Sext and other fun flirting! No face required. Come join the fun at TradeNudes.com. https://webflow.miggo.io/industries Application Security by Industry | Miggo The patch gap looks different in a hospital, a bank and a checkout flow. See how Miggo finds and shields exploitable CVEs in each. application security by industry miggo Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10 Best Live Sex Cam Shows with Free Live Chat | XLoveCam Watch thousands of cam girls get naked on XLoveCam. https://www.miggo.io/vulnerability-database/cve/CVE-2026-78271 CVE-2026-78271: WordPress FluentCRM Pro plugin | Miggo cve wordpress fluentcrm pro plugin https://www.miggo.io/vulnerability-database/cve/CVE-2024-23650 CVE-2024-23650: BuildKit Frontend Malformed DoS | Miggo A malicious BuildKit client request with incorrect parameters sent from a frontend triggers a daemon-crashing DoS through an unhandled panic condition. cve frontend malformed dos miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-18273 CVE-2026-18273: Kenwood DNR1007XR USB Incorrect | Miggo Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to cve kenwood usb incorrect miggo https://www.miggo.io/vulnerability-database/cve/CVE-2026-93712 CVE-2026-93712: Dancer2 File Route Handler LFI | Miggo Dancer2 path traversal in the File route handler serves any worker-readable file to unauthenticated requests via relative path segments, exposing config.yml. cve file route handler lfi https://www.miggo.io/vulnerability-database/cve/CVE-2026-74853 CVE-2026-74853: Pods Shortcode Callback LFI | Miggo Pods WordPress plugin LFI via unrestricted shortcode display callback function resolution grants authors arbitrary file read access outside the web root. cve pods shortcode callback lfi https://www.miggo.io/vulnerability-database/cve/CVE-2026-16649 CVE-2026-16649: Gravity Forms Unauth Stored XSS | Miggo Gravity Forms unauthenticated Stored XSS via Post Body Field injects malicious scripts using an onerror event in a tooltip's aria-label re-parsed as innerHTML. gravity forms stored xss cve miggo