Disclosed Vulnerabilities

Title Vulnerability Disclosed Credit
DJI Drone Wi-Fi Credential Exposure Through Unencrypted Bluetooth Traffic GCVE-1-2026-20157 2026-08-23 10:24 1. Abdelrahman Yousef 2. Dr. Jordan Samhi
Reflected Cross-Site Scripting (XSS) in e107 CMS GCVE-115-2026-20035 2026-08-19 12:23 Adrian "syrex1013" Dacka
Missing authorization check on galaxy list fetched for event template create/edit view GCVE-1-2026-20008 2026-08-19 12:20 Jeroen Pinoy
Privilege escalation to platform admin in OpenCTI-Platform through broken access control in API CVE-2026-44730 2026-08-19 10:04 Jeroen Pinoy
"new users" dashboard widget leaks full user data, including (old) authkeys and password hashes GCVE-1-2026-20069 2026-08-19 09:54 Jeroen Pinoy
CVE ID Assignment Request – NoMachine Vulnerability CVE-2026-53694 2026-08-19 09:52 Vonmetz Tobias
ASUS RT-AC58U – Unauthenticated Network Information Disclosure via Web Interface CVE-2018-18287 2026-04-09 08:11 Adrian "syrex1013" Dacka
ASUS RT-AC58U – Multiple Stored and Reflected Cross-Site Scripting (XSS) Vulnerabilities CVE-2018-18291 2026-04-09 08:11 Adrian "syrex1013" Dacka
Orange AirBox Y858 – Unauthenticated Factory Reset via setReset Endpoint CVE-2018-18377 2026-04-09 08:10 Adrian "syrex1013" Dacka
Orange AirBox Y858 – Unauthenticated WLAN Client Information Disclosure CVE-2018-18376 2026-04-09 08:10 Adrian "syrex1013" Dacka
displaying 1 - 10 vulnerability_disclosures in total 14