Hunt List
8,583 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-61900 |
10.0 | 0.0044 | NET NO AUTH LOW CX NO UI | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in | |
|
80
|
CVE-2026-10757 |
9.8 | 0.0044 | NET NO AUTH LOW CX NO UI | There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and e | |
|
80
|
CVE-2026-41873 |
9.8 | 0.0044 | NET NO AUTH LOW CX NO UI | ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('H | |
|
80
|
CVE-2026-72463 |
9.8 | 0.0044 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix d | |
|
79
|
CVE-2026-5482 |
9.3 | 0.0044 | NET NO AUTH LOW CX NO UI | Responsive FileManager's allows an unauthenticated attacker to upload files of a | |
|
79
|
CVE-2026-77992 |
9.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc elemen | |
|
79
|
CVE-2026-54419 |
9.3 | 0.0044 | NET NO AUTH LOW CX NO UI | claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released ve | |
|
79
|
CVE-2026-61175 |
9.3 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply | |
|
78
|
CVE-2026-48814 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 a | |
|
78
|
CVE-2026-61666 |
8.9 | 0.0044 | NET NO AUTH LOW CX NO UI | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0. | |
|
78
|
CVE-2026-73567 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | sm-crypto provides JavaScript implementations of the Chinese cryptographic algor | |
|
78
|
CVE-2026-17003 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
78
|
CVE-2026-112404 |
8.8 | 0.0044 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile | |
|
77
|
CVE-2026-46410 |
8.7 | 0.0044 | NET NO AUTH LOW CX NO UI | FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions pri | |
|
77
|
CVE-2026-6924 |
8.7 | 0.0044 | NET NO AUTH LOW CX NO UI | A bug in the entropy initialization for SiWx917 causes the DRBG to use a predict | |
|
77
|
CVE-2026-57573 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, | |
|
77
|
CVE-2026-12983 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | The Dinatur WordPress plugin through 1.18 does not sanitize and escape user inpu | |
|
77
|
CVE-2026-29036 |
8.7 | 0.0044 | NET NO AUTH LOW CX NO UI | cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or refe | |
|
77
|
CVE-2026-115775 |
8.7 | 0.0044 | NET NO AUTH LOW CX NO UI | Twisted is an event-based framework for internet applications, supporting Python | |
|
77
|
CVE-2026-58050 |
8.3 | 0.0044 | NET NO AUTH LOW CX NO UI | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from | |
|
76
|
CVE-2026-59197 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter | |
|
76
|
CVE-2026-72766 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type | |
|
75
|
CVE-2026-47221 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Envoy is an open source edge and service proxy designed for cloud-native applica | |
|
68
|
CVE-2026-16371 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Privilege escalation in the DOM: Navigation component. This vulnerability was fi | |
|
68
|
CVE-2026-60009 |
8.8 | 0.0044 | NET NO AUTH LOW CX | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` ba | |
|
68
|
CVE-2026-115729 |
8.9 | 0.0044 | NET NO AUTH NO UI | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vu | |
|
68
|
CVE-2026-113018 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113019 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113091 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0. | |
|
68
|
CVE-2026-113096 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113158 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113160 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113162 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113165 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113167 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113168 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113172 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113174 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113179 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113181 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113182 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113183 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113184 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113185 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed | |
|
67
|
CVE-2026-44088 |
8.6 | 0.0044 | NET NO AUTH LOW CX | SzafirHost verifies the signature of the downloaded JAR file using class JarInpu | |
|
67
|
CVE-2026-16881 |
8.7 | 0.0044 | NET NO AUTH LOW CX | A code injection vulnerability exists in the LINE Android app prior to version 2 | |
|
66
|
CVE-2026-49402 |
8.1 | 0.0044 | NET NO AUTH NO UI | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno | |
|
65
|
CVE-2026-95619 |
7.7 | 0.0044 | NET NO AUTH NO UI | A flaw was found in libstdc++. An integer overflow can occur when processing lar | |
|
64
|
CVE-2026-65918 |
7.1 | 0.0044 | NET NO AUTH LOW CX | PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of- | |
|
64
|
CVE-2026-54715 |
7.1 | 0.0044 | NET NO AUTH LOW CX | GoAccess is a real-time web log analyzer and interactive viewer that runs in a t |