Exploit DB

2026-08-11

[webapps] Apache Gravitino 1.2.1 - SSRF
Exploit DB26/08/11
Apache Gravitino 1.2.1 - SSRF

[webapps] Blocksy Companion 2.1.46 - RCE
Exploit DB26/08/11
Blocksy Companion 2.1.46 - RCE
[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
Exploit DB26/08/11
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
[remote] mcp-server-kubernetes 3.8.x - Argument Injection
Exploit DB26/08/11
mcp-server-kubernetes 3.8.x - Argument Injection
[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
Exploit DB26/08/11
LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Exploit DB26/08/11
Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion
Exploit DB26/08/11
Ray 2.56.0 - Directory Traversal & Local File Inclusion

2026-08-10

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
Exploit DB26/08/10
OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
[local] Microsoft Edge 150.0.4078.48 - RCE
Exploit DB26/08/10
Microsoft Edge 150.0.4078.48 - RCE
[webapps] CorgetGpsDget 2_3.2 - OS Command Injection
Exploit DB26/08/10
CorgetGpsDget 2_3.2 - OS Command Injection
[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution
Exploit DB26/08/10
Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

2026-07-08

[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution
Exploit DB26/07/08
Krayin CRM v2.2.x - Authenticated Remote Code Execution
[webapps] Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure
Exploit DB26/07/08
Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure
[webapps] Langflow 1.9.0 - RCE
Exploit DB26/07/08
Langflow 1.9.0 - RCE
[webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload
Exploit DB26/07/08
Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

2026-07-07

[webapps] MCPJam Inspector - Remote Code Execution
Exploit DB26/07/07
MCPJam Inspector - Remote Code Execution
[local] ProtonVPN v4.4.1 - Unquoted Service Path
Exploit DB26/07/07
ProtonVPN v4.4.1 - Unquoted Service Path
[webapps] Flowise 3.1.3 - arbitrary code execution
Exploit DB26/07/07
Flowise 3.1.3 - arbitrary code execution
[remote] Hydra - Stack Buffer Overflow
Exploit DB26/07/07
Hydra - Stack Buffer Overflow
[webapps] Discuz! X5.0 - Authentication Bypass
Exploit DB26/07/07
Discuz! X5.0 - Authentication Bypass
[webapps] Tenable Nessus 10.12.1 - SQL Injection
Exploit DB26/07/07
Tenable Nessus 10.12.1 - SQL Injection
[webapps] WordPress Bricks Builder Theme - RCE
Exploit DB26/07/07
WordPress Bricks Builder Theme - RCE
[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
Exploit DB26/07/07
iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

2026-07-06

[webapps] Joomla Extension 4.1.4 - PHP Object injection
Exploit DB26/07/06
Joomla Extension 4.1.4 - PHP Object injection
[webapps] Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass
Exploit DB26/07/06
Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass
[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation
Exploit DB26/07/06
MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation
[webapps] KeepInMind 0.8.4.2 - Stored XSS
Exploit DB26/07/06
KeepInMind 0.8.4.2 - Stored XSS
[webapps] KNX visualisering - Broken Access Control
Exploit DB26/07/06
KNX visualisering - Broken Access Control
[local] Windows Defender (MsMpEng.exe) - Race Condition
Exploit DB26/07/06
Windows Defender (MsMpEng.exe) - Race Condition
[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)
Exploit DB26/07/06
WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)

2026-06-08

[webapps] OpenEMR 7.0.2 - Arbitrary File Read
Exploit DB26/06/08
OpenEMR 7.0.2 - Arbitrary File Read

2026-06-05

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection
Exploit DB26/06/05
WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

2026-06-01

[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection
Exploit DB26/06/01
Drupal Core 10.5.5 - Error-Based SQL Injection
[webapps] WordPress OrderConvo 14 - Path Traversal
Exploit DB26/06/01
WordPress OrderConvo 14 - Path Traversal

2026-05-30

[remote] Notepad++ 8.9.6 - Arbitrary Code Execution
Exploit DB26/05/30
Notepad++ 8.9.6 - Arbitrary Code Execution
[webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting
Exploit DB26/05/30
YAMCS yamcs-core 5.12.7 - No Rate Limiting
[webapps] YAMCS yamcs-core 5.12.7 - User Enumeration
Exploit DB26/05/30
YAMCS yamcs-core 5.12.7 - User Enumeration
[webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection
Exploit DB26/05/30
YAMCS yamcs-core 5.12.7 - LDAP Injection

2026-05-29

[remote] Microsoft - NTLMv2 Hash Capture
Exploit DB26/05/29
Microsoft - NTLMv2 Hash Capture
[webapps] MikroORM 7.0.13 - SQL Injection
Exploit DB26/05/29
MikroORM 7.0.13 - SQL Injection
[webapps] Prodigy Commerce 3.3.0 - Local File Inclusion
Exploit DB26/05/29
Prodigy Commerce 3.3.0 - Local File Inclusion
[webapps] Langflow 1.3.0 - Remote Code Execution
Exploit DB26/05/29
Langflow 1.3.0 - Remote Code Execution
[webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
Exploit DB26/05/29
Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
[local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
Exploit DB26/05/29
ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
[local] ZTE Routers - Unauthenticated Denial of Service
Exploit DB26/05/29
ZTE Routers - Unauthenticated Denial of Service
[local] ZTE ZXHN H188A V6 - Authentication Bypass
Exploit DB26/05/29
ZTE ZXHN H188A V6 - Authentication Bypass
[local] ZTE H298A / H108N - Unauthenticated Credential Exposure
Exploit DB26/05/29
ZTE H298A / H108N - Unauthenticated Credential Exposure
[local] Linux Kernel - Local Privilege Escalation
Exploit DB26/05/29
Linux Kernel - Local Privilege Escalation
[webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
Exploit DB26/05/29
MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
[remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
Exploit DB26/05/29
Wing FTP Server 8.1.3 - Authenticated Remote Code Execution