All pull requests

Pull requests

• Fix CVE-2024-47575 client certificate helper path

  #17443·alex700 opened Oct 16, 2026Contributor·2 tasks·

  ·
  

• Fix CVE-2024-5333 template false positive by adding version check

  #17442·HaroonArshad-53 opened Oct 16, 2026Contributor·2 tasks done·

  ·
  

• Add CVE-2026-52715 - GEO my WP unauthenticated SQL injection

  #17441·HaroonArshad-53 opened Oct 16, 2026Contributor·

  ·
  

• Add CVE-2026-85198.yaml (SQL injection)

  #17440·comradezephyr opened Oct 16, 2026Contributor·

  ·
  

• CVE-2026-54419 - PIAF-HMS ec.php SQL Injection

  #17439·alex700 opened Oct 16, 2026Contributor·2 of 3 tasks·

  ·
  

• Add AhsayCBS CVE-2026-105133 authentication bypass template

  #17438·alex700 opened Oct 16, 2026Contributor·3 tasks done·

  ·
  

• Add CVE-2026-89026 Issabel PBX API JWT key detection

  #17437·alex700 opened Oct 16, 2026Contributor·2 tasks done·

  ·
  

• Add Langflow CVE-2026-105740 authenticated MCP RCE template

  #17435·alex700 opened Oct 16, 2026Contributor·2 tasks done·

  ·
  

• Add CVE-2026-110447 Collabora CODE command injection template

  #17434·alex700 opened Oct 16, 2026Contributor·2 tasks done·

  ·
  

• Add CVE-2026-56070 (Unauthenticated Time-Based Blind SQL Injection)

  #17433·comradezephyr opened Oct 15, 2026Contributor·

  ·
  

• Add CVE-2026-16535 - WordPress plugin Link Library < 7.9.4 - Unauthenticated Reflected XSS

  Done
  #17432·anirbala98 opened Oct 15, 2026Contributor·2 tasks done·

  ·
  1

  

• Add template for CVE-2026-102878 (mcp-chrome-bridge CORS origin bypass)

  #17431·carfeii opened Oct 15, 2026·4 tasks done·

  ·
  

• Add template for CVE-2026-90774 (rustypaste path traversal)

  #17430·carfeii opened Oct 15, 2026·4 tasks done·

  ·
  

• Add CVE-2026-49772 - The Events Calendar unauthenticated blind SQL injection

  #17428·HaroonArshad-53 opened Oct 15, 2026Contributor·

  ·
  

• fix(redis): fix false positives for Redis Lua CVEs by checking branch-specific versions

  #17427·Wandering-y opened Oct 15, 2026·2 tasks done·

  ·
  

• CVE-2026-27960: fix false positive on GraphQL validation errors

  Done
  #17425·cham423 opened Oct 14, 2026Contributor·2 tasks done·

  ·
  1

  

• Add Danfoss AK-SM 800A detection template

  #17423·flukes86 opened Oct 14, 2026·

  ·
  

• CVE-2025-58443: fix false positive on catch-all 200 pages

  Done
  #17418·cham423 opened Oct 13, 2026Contributor·1 of 2 tasks·

  ·
  1

  

• Add CVE-2026-103956 vulnerability details

  #17416·comradezephyr opened Oct 13, 2026Contributor·7 tasks done·

  ·
  2

  

• Added CVE-2026-56062 (Quotes llama 3.1.5)

  Done
  #17415·comradezephyr opened Oct 13, 2026Contributor·

  ·
  1

  

• CVE-2024-29972: fix false positive on catch-all 200 pages

  Done
  #17414·cham423 opened Oct 13, 2026Contributor·1 of 2 tasks·

  ·
  

• Add CVE-2026-102782 - OrdaSoft Simple Membership unauthenticated SQL injection

  #17410·HaroonArshad-53 opened Oct 13, 2026Contributor·2 tasks·

  ·
  

• Create CVE-2026-102489.yaml

  Done
  #17407·comradezephyr opened Oct 12, 2026Contributor·

  ·
  1

  

• Create CVE-2026-5430.yaml for WSO2 vulnerability

  #17399·comradezephyr opened Oct 12, 2026Contributor·

  ·
  

• Add GLPI planning unauthorized access and user enumeration (GHSA-5fw5)

  waiting for more info
  #17393·wong-hau-pepelu opened Oct 10, 2026Contributor·1 of 2 tasks·

  ·
  1