Disclosures

IdentifierFindingProductClassSeverityDate

private-odoo-1 REDACTED Odoo CWE-200 HIGH 2026-10-11

private-notion-1 REDACTED Notion CWE-200 MEDIUM 2026-10-11

private-notion-2 REDACTED Notion CWE-200 HIGH 2026-10-11

private-microsoft-1 REDACTED Microsoft CWE-201 CRITICAL 2026-10-09

private-nasa-1 REDACTED NASA CWE-611 CRITICAL 2026-10-09

private-nasa-2 REDACTED NASA CWE-89 CRITICAL 2026-10-09

private-pdb-1 REDACTED Participants Database CWE-89 HIGH 2026-10-07

private-discord-5 REDACTED Discord CWE-197 MEDIUM 2026-10-06

private-discord-4 REDACTED Discord CWE-345 CRITICAL 2026-10-05

private-discord-3 REDACTED Discord CWE-345 CRITICAL 2026-10-05

private-kong-1 REDACTED Kong CWE-22 HIGH 2026-09-30

private-exodus-1 REDACTED Exodus CWE-78 HIGH 2026-09-24

private-aiven-1 REDACTED Aiven CWE-269 CRITICAL 2026-09-24

private-discord-2 REDACTED Discord CWE-367 CRITICAL 2026-09-01

private-discord-1 REDACTED Discord CWE-345 CRITICAL 2026-09-01

GID-548303869 Gerrit Regex ACL Mismatch Allows Privilege Escalation Gerrit CWE-185 LOW 2026-08-18

CVE-2026-74851 Author+ RCE via Shortcode Display Callback The Pods Framework CWE-94 HIGH 2026-08-01

private-yoastseo-1 RCE through Rank Math Metadata Deserialization Yoast SEO CWE-502 HIGH 2026-07-31

CVE-2026-104829 Stored XSS in Dojo Lecture Slides onclick Handler pwn.college DOJO CWE-79 HIGH 2026-07-28

CVE-2026-104837 Stored Cross-Site Scripting in Challenge-Completion Banners pwn.college DOJO CWE-79 HIGH 2026-07-28

H1ID-3885832 Deserialization in WooCommerce NOX Option Enables RCE WooCommerce CWE-502 MEDIUM 2026-07-24

H1ID-3885741 Deserialization in WooCommerce Shipping Taxes Enables RCE WooCommerce CWE-502 MEDIUM 2026-07-24

H1ID-3878481 Path Traversal in Jetpack External Media Import Enables RCE Jetpack CWE-22 HIGH 2026-07-24

private-ytdlp-1 REDACTED yt-dlp CWE-94 HIGH 2026-07-21