Atomicorp WAF Research Notes
Research Update - 2026-10-20
Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.
The entries published in this update represent research notes produced during ongoing analysis activities.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
Presence means a positive research finding was published. Absence means no conclusion should be drawn.
CVE Notes Published in This Update
| CVE | Vulnerability Name | Rules Observed |
|---|---|---|
| CVE-2026-104586 | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 Command Injection Vulnerability | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-107083 | SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 SQL Injection Vulnerability | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-107188 | Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution | 340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2025-66210 | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2025-58450 | pREST has Systemic SQL Injection Vulnerability | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-9501 | W3 Total Cache < 2.8.13 - Unauthenticated Command Injection | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 |
| CVE-2025-12060 | Keras keras.utils.get_file Utility Path Traversal Vulnerability | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-66209 | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-107082 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 SQL Injection Vulnerability | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-53995 | MLflow 3.17.1 Path Traversal via Trace ID API | 340007 , 344360 , 390709 |
| CVE-2025-62422 | DataEase SQL injection vulnerability | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 380026 , 380122 , 390572 |
| CVE-2025-59835 | LangBot has a cross-directory file upload vulnerability, which could lead to system takeover | 340007 , 344360 , 390709 |
| CVE-2026-112371 | H3C Magic NX15 RPC esps write code injection | 334168 , 390719 |
| CVE-2025-39663 | Cross Site Scripting through compromised remote site | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-111915 | Yank Note before 3.93.1 Path Traversal via /api/help Endpoint | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-68696 | httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage | 337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022 |
| CVE-2025-8877 | AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-36540 | Netis AC1200 Router NC21 V4.0.1.4296 Arbitrary Code Execution Vulnerability | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2025-58762 | Tautulli vulnerable to Authenticated Remote Code Execution via write primitive and Script notification agent | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2025-58763 | Tautulli vulnerable to Authenticated Remote Code Execution via Command Injection | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2025-62617 | Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10692 | OpenSupports 4.11.0 — SQL Injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-11560 | Team Members Showcase < 3.5.0 - Reflected XSS | 333141 , 340087 , 340095 , 340099 , 340148 , 341099 , 341266 , 346755 |
| CVE-2025-34304 | IPFire < v2.29 SQL Injection via OpenVPN Connection Logs | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 , 390716 |
| CVE-2025-39664 | Path-Traversal in report scheduler | 340007 , 347009 |
| CVE-2025-10695 | OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints | 337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022 |
| CVE-2025-34282 | ThingsBoard < v4.2.1 SVG Image SSRF | 337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022 |
| CVE-2025-34336 | eGovFramework <= 4.3.1 Unauthenticated File Upload via Web Editor Image Upload Endpoints | 351000 |
| CVE-2026-111053 | FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-111925 | Mopidy before 4.0.5 Path Traversal via File Backend library.lookup | 340007 , 344360 , 390709 |
| CVE-2026-112267 | SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker | 337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022 |
| CVE-2025-12502 | Attention Bar <= 0.7.2.1 - Admin+ SQLi | 340017 , 340144 , 340156 , 340157 , 380122 |
| CVE-2025-50234 | mccms Arbitrary Code Execution Vulnerability | 337109 , 337110 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022 |
| CVE-2025-67743 | Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service | 337109 , 337110 , 344360 , 398021 , 398022 |
| CVE-2025-10567 | FunnelKit < 3.12.0.1 - Reflected XSS | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2025-34281 | Stored Cross-Site Scripting (XSS) in ThingsBoard | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-34326 | ProPhoenix Law RMS v2022.2403.3.101 Cross-Site Scripting Vulnerability | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-65013 | LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint /maps/nodeimage parameter Image Name | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10115 | SiempreCMS user_search_ajax.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10712 | 07FLYCMS/07FLY-CMS/07FlyCRM login sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-11031 | DataTables examples.php path traversal | 340007 , 344360 , 390709 |
| CVE-2025-14989 | Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-14990 | Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-15011 | code-projects Simple Stock System logout.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-15049 | code-projects Online Farm System addProduct.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-15053 | code-projects Student Information System searchresults.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-62365 | LibreNMS vulnerable to Reflected-XSS in report_this function | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-62421 | DataEase vulnerable to stored cross-site scripting via file upload bypass | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-64747 | Directus Vulnerable to Stored Cross-site Scripting | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-65093 | LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-9772 | RemoteClinic edit.php unrestricted upload | 351000 |
| CVE-2025-9775 | RemoteClinic edit-my-profile.php unrestricted upload | 351000 |
| CVE-2026-112152 | vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-112252 | Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql | 340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2021-42053 | django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS) | 399053 |
| CVE-2025-61597 | Emlog Pro is vulnerable to stored XSS attack through HTML template injection | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-106706 | XXL-JOB through 3.5.0-SNAPSHOT Cross-Site Scripting Vulnerability | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10341 | HTML injection in Perfex CRM | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10342 | HTML injection in Perfex CRM | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2025-10343 | HTML injection in Perfex CRM | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10344 | HTML injection in Perfex CRM | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10346 | HTML injection in Perfex CRM | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2025-11072 | Download Counter Button <= 1.8.6.7 - Unauthenticated Arbitrary File Download | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-11344 | ILIAS Certificate Import code injection | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 390904 , 393655 |
| CVE-2025-15014 | loganhong php loganSite Article article_detail.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-112247 | Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cr | 351000 |
| CVE-2026-38808 | uzy-ssm-mall v1.1.0 SQL Injection Vulnerability | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-12264 | Wisencode Create Support Ticket create cross site scripting | 333140 , 333141 , 340087 , 340099 , 340147 , 340148 , 341099 , 341266 , 346755 |
| CVE-2025-34301 | IPFire < v2.29 Stored XSS via Location Group Creation | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34302 | IPFire < v2.29 Stored XSS via Service Creation | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34303 | IPFire < v2.29 Stored XSS via Whitelisted Host Creation | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34305 | IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml() | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34306 | IPFire < v2.29 Stored XSS via Default IP Search Value | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390716 |
| CVE-2025-34307 | IPFire < v2.29 Stored XSS via Default Country Search | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390716 |
| CVE-2025-34308 | IPFire < v2.29 Stored XSS via Default Time Sync | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34309 | IPFire < v2.29 Stored XSS via Dynamic DNS Host | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34310 | IPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34313 | IPFire < v2.29 Stored XSS via User Quota Rule URL Filter | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-34314 | IPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-40641 | Stored Cross-Site Scripting (XSS) in the Multi-purpose Inventory Management System | 333140 , 333141 , 340095 , 342259 |
| CVE-2025-40647 | Stored Cross-Site Scripting (XSS) vulnerability in Issabel products | 333140 , 333141 , 340087 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 346755 |
| CVE-2025-41001 | Cross-Site Scripting (XSS) in SOPlanning | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2025-61599 | Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9655 | O2OA Personal Profile person cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-23409 | Ethercreative Logs 3.0.3 - Path Traversal | 399409 |
| CVE-2025-11466 | Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability | 344360 , 347009 , 390709 |
| CVE-2025-40648 | Stored Cross-Site Scripting (XSS) vulnerability in Issabel products | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-62411 | Stored XSS in Alert Transport name field in LibreNMS | 333140 , 333141 , 340095 , 340147 , 340148 , 340149 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-62414 | bagisto - Cross Site Scripting (XSS) in Create New Customer | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9823 | Reflected XSS in lead:addLeadTags - Quick Add | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-13698 | Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability | 344360 , 347009 , 390709 |
| CVE-2025-66040 | Spotipy has a XSS vulnerability in OAuth callback server | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-11990 | Improper Handling of URL Encoding (Hex Encoding) in GitLab | 340006 , 340007 , 344360 , 347009 , 390709 , 390719 |
| CVE-2025-62379 | Open Redirect in reflex-dev/reflex | 344365 |
| CVE-2025-10110 | ChanCMS search sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10121 | uverif kami_list addbatch sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380122 , 390572 |
| CVE-2025-10710 | 07FLYCMS/07FLY-CMS/07FlyCRM index.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-10711 | 07FLYCMS/07FLY-CMS/07FlyCRM Login cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-10787 | MuYuCMS Add Fiend Link index.html server-side request forgery | 337109 , 337110 , 344360 , 398021 , 398022 |
| CVE-2025-11288 | CRMEB GET Parameter product sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-13168 | ury-erp ury pos_extend.py overrided_past_order_list sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-13171 | ZZCMS wangkan_list.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380122 , 390572 |
| CVE-2025-15004 | DedeCMS freelist_main.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-15050 | code-projects Student File Management System save_file.php unrestricted upload | 351000 |
| CVE-2025-9773 | RemoteClinic edit.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-112254 | agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery | 337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022 |
| CVE-2026-112302 | kiwilan php-archive Extraction ArchiveZip.php extract path traversal | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-10117 | SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10122 | Maccms10 Database.php rep sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10662 | SeaCMS admin_members.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-11071 | SeaCMS Cron Task Management admin_cron.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-11332 | CmsEasy URL view.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-11939 | ChurchCRM Backup Restore RestoreJob.php path traversal | 340007 , 344360 , 390709 |
| CVE-2025-12859 | DedeBIZ templets_one_edit.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-12860 | DedeBIZ freelist_main.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-12861 | DedeBIZ spec_add.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-12927 | DedeBIZ archives_add.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-13198 | DouPHP file.class.php unrestricted upload | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2025-15052 | code-projects Student Information System profile.php cross site scripting | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9646 | O2OA calendarConfig cross site scripting | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9657 | O2OA Personal Profile script cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9658 | O2OA Personal Profile dict cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9659 | O2OA Personal Profile widget cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9680 | O2OA Personal Profile page cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9681 | O2OA Personal Profile agent cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9682 | O2OA Personal Profile appdict cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9683 | O2OA Personal Profile form cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9715 | O2OA Personal Profile script cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9716 | O2OA Personal Profile form cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9717 | O2OA Personal Profile unit cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9718 | O2OA Personal Profile process cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9719 | O2OA Personal Profile script cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9734 | O2OA Personal Profile stat cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9735 | O2OA Personal Profile table cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9736 | O2OA Personal Profile statement cross site scripting | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-9737 | O2OA Personal Profile importmodel cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-112138 | diem-project diem dmCodeEditor actions.class.php join path traversal | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-112195 | FusionPBX Dialplan Editor dialplan.php os command injection | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-112372 | H3C Magic NX15 upload importprofile path traversal | 340007 , 344360 , 390709 |
| CVE-2025-10234 | Scada-LTS Data Point Edit data_point_edit.shtm cross site scripting | 333140 , 333141 , 340087 , 340099 , 340147 , 341099 , 341256 , 341266 , 346755 |
| CVE-2025-10235 | Scada-LTS Reports reports.shtm cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10434 | IbuyuCMS Add Article article.php cross site scripting | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 |
| CVE-2025-14991 | Campcodes Complete Online Beauty Parlor Management System bwdates-reports-details.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-58161 | MobSF Path Traversal in GET /download/<filename> using absolute filenames | 344360 , 347009 , 390709 |
| CVE-2026-107081 | SQL Injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 380026 , 380122 , 390572 |