Theme☀️🌙

Compact Layout

Exploit DB

2026-09-11

[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
Exploit DB26/09/11
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
Open

2026-09-03

[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
Exploit DB26/09/03
FreePBX 17.0.2 - Remote Code Execution (RCE)
Open
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Exploit DB26/09/03
Metabase 0.61.0 - Authenticated Remote Code Execution
Open

2026-09-02

[dos] EVerest 2025.9.0 - DoS
Exploit DB26/09/02
EVerest 2025.9.0 - DoS
Open
[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
Exploit DB26/09/02
Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
Open
[webapps] PodcastGenerator 3.2.9 - Stored XSS
Exploit DB26/09/02
PodcastGenerator 3.2.9 - Stored XSS
Open
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution
Exploit DB26/09/02
Ghost_CMS 6.19.0 - Remote Code Execution
Open
[webapps] Langflow 1.10.0 - RCE
Exploit DB26/09/02
Langflow 1.10.0 - RCE
Open
[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities
Exploit DB26/09/02
Fullhan FH8626V100 - Multiple Vulnerabilities
Open
[webapps] Marimo 0.20.4 - RCE
Exploit DB26/09/02
Marimo 0.20.4 - RCE
Open

2026-09-01

[webapps] Wolf CMS 0.8.3.1 - RCE v
Exploit DB26/09/01
Wolf CMS 0.8.3.1 - RCE v
Open
[webapps] Payload CMS 3.72.0 - Blind SQL Injection
Exploit DB26/09/01
Payload CMS 3.72.0 - Blind SQL Injection
Open
[webapps] Bludit CMS - Stored XSS
Exploit DB26/09/01
Bludit CMS - Stored XSS
Open
[webapps] Grav CMS 2.0.7 - RCE
Exploit DB26/09/01
Grav CMS 2.0.7 - RCE
Open
[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass
Exploit DB26/09/01
miniOrange 5.4.3 - Unauthenticated Auth Bypass
Open
[webapps] EasyAppointments 1.5.1 - Blind SQL Injection
Exploit DB26/09/01
EasyAppointments 1.5.1 - Blind SQL Injection
Open

2026-08-31

[webapps] C-MOR 6.0104 - Directory Traversal
Exploit DB26/08/31
C-MOR 6.0104 - Directory Traversal
Open
[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)
Exploit DB26/08/31
C-MOR 6.0104 - Cross-Site Scripting (XSS)
Open
[webapps] CubeCart 6.7.4 - SQL injection
Exploit DB26/08/31
CubeCart 6.7.4 - SQL injection
Open
[webapps] CubeCart 6.7.4 - SQL
Exploit DB26/08/31
CubeCart 6.7.4 - SQL
Open
[webapps] CubeCart 6.7.4 - Stored XSS
Exploit DB26/08/31
CubeCart 6.7.4 - Stored XSS
Open
[webapps] CubeCart 6.7.4 - Cross-Site Scripting
Exploit DB26/08/31
CubeCart 6.7.4 - Cross-Site Scripting
Open
[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Exploit DB26/08/31
Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Open
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Exploit DB26/08/31
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Open

2026-08-25

[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Exploit DB26/08/25
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Open

2026-08-18

[remote] PCMan 2.0.7 - Buffer Overflow
Exploit DB26/08/18
PCMan 2.0.7 - Buffer Overflow
Open
[dos] NanaZip 6.5 - DoS
Exploit DB26/08/18
NanaZip 6.5 - DoS
Open
[webapps] flyto-core 2.26.7 - Arbitrary File Write
Exploit DB26/08/18
flyto-core 2.26.7 - Arbitrary File Write
Open
[webapps] Nodemailer 9.0.0 - File Read/ SSRF
Exploit DB26/08/18
Nodemailer 9.0.0 - File Read/ SSRF
Open
[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF
Exploit DB26/08/18
Linuxfabrik monitoring_plugins_6.0.0 - SSRF
Open

2026-08-17

[dos] NanaZip 6.5 - DoS
Exploit DB26/08/17
NanaZip 6.5 - DoS
Open
[webapps] flyto_core 2.26.7 - Server-Side Request Forgery
Exploit DB26/08/17
flyto_core 2.26.7 - Server-Side Request Forgery
Open
[webapps] Probo 0.222.2 - IDOR
Exploit DB26/08/17
Probo 0.222.2 - IDOR
Open
[webapps] webpack_devserver 5.2.5 - CSRF
Exploit DB26/08/17
webpack_devserver 5.2.5 - CSRF
Open
[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass
Exploit DB26/08/17
phpSysInfo 3.4.5 - IP Allowlist Bypass
Open
[dos] Nmap 7.99 - Extension Header Integer Underflow
Exploit DB26/08/17
Nmap 7.99 - Extension Header Integer Underflow
Open
[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak
Exploit DB26/08/17
Duplicati 2.2.0.3 - JWT Signing Key Leak
Open
[webapps] Joomla JCE_2.9.15 - Remote Code Execution
Exploit DB26/08/17
Joomla JCE_2.9.15 - Remote Code Execution
Open
[remote] ipTIME A3004T - Remote Code Execution
Exploit DB26/08/17
ipTIME A3004T - Remote Code Execution
Open
[remote] D-Link DNS_340L - OS Command Injection
Exploit DB26/08/17
D-Link DNS_340L - OS Command Injection
Open
[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
Exploit DB26/08/17
WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
Open

2026-08-11

[webapps] Apache Gravitino 1.2.1 - SSRF
Exploit DB26/08/11
Apache Gravitino 1.2.1 - SSRF
Open
[webapps] Blocksy Companion 2.1.46 - RCE
Exploit DB26/08/11
Blocksy Companion 2.1.46 - RCE
Open
[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
Exploit DB26/08/11
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
Open
[remote] mcp-server-kubernetes 3.8.x - Argument Injection
Exploit DB26/08/11
mcp-server-kubernetes 3.8.x - Argument Injection
Open
[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
Exploit DB26/08/11
LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
Open
[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Exploit DB26/08/11
Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Open
[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion
Exploit DB26/08/11
Ray 2.56.0 - Directory Traversal & Local File Inclusion
Open

2026-08-10

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
Exploit DB26/08/10
OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
Open
[local] Microsoft Edge 150.0.4078.48 - RCE
Exploit DB26/08/10
Microsoft Edge 150.0.4078.48 - RCE
Open