Exploit Database

Exploit Description	Date
Teltonika_RutOS 00.07.06.21 Exploit, command injection REMOTE Author: Rubbish Research Team	2026/10/01
TigerGraph_Community_Edition 4.2.4 Exploit, arbitrary file write WEBAPPS Author: Rubbish Research Team	2026/10/01
WordPress 7.0.2 Exploit, Path Travesal WEBAPPS Author: Robert Ressl	2026/10/01
Food-Ordering 1.0 Exploit, LFI WEBAPPS Author: u11secur1t	2026/10/01
Ecava_ntegraXor IGX_16.0.701.10 Exploit, RCE REMOTE Author: Rubbish Research Team	2026/10/01
Krayin CRM 2.2.4 Exploit, IDOR WEBAPPS Author: l4dsc4	2026/10/01
SuiteCRM 8.10.1 Exploit, Authenticated SSRF WEBAPPS Author: Max Gabriel	2026/10/01
InvoicePlane 1.7.1 Exploit, RCE WEBAPPS Author: Mustafa Murat Akgül	2026/10/01
POMS oretnom23v1.0 Exploit, SQLi vulnerabilities WEBAPPS Author: u11secur1t	2026/10/01
MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 Exploit, RCE REMOTE Author: igiProSe	2026/09/24
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth Exploit, ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 Exploit, RCE REMOTE Author: igiProSe	2026/09/11
FreePBX 17.0.2 Exploit, Remote Code Execution (RCE) WEBAPPS Author: Jared Brits	2026/09/03
Metabase 0.61.0 Exploit, Authenticated Remote Code Execution WEBAPPS Author: utierre0x8	2026/09/03
EVerest 2025.9.0 Exploit, DoS DOS Author: Ranjit Kumar Singh	2026/09/02
Bludit CMS 3.20.0 Exploit, Reflected Cross-Site Scripting WEBAPPS Author: Ranjit Kumar Singh	2026/09/02
PodcastGenerator 3.2.9 Exploit, Stored XSS WEBAPPS Author: Sahil Arya	2026/09/02
Ghost_CMS 6.19.0 Exploit, Remote Code Execution WEBAPPS Author: Maksim Rogov	2026/09/02
Langflow 1.10.0 Exploit, RCE WEBAPPS Author: Richard Howe	2026/09/02
Fullhan FH8626V100 Exploit, Multiple Vulnerabilities HARDWARE Author: Amir Aliu	2026/09/02
Marimo 0.20.4 Exploit, RCE WEBAPPS Author: Jason Bernier	2026/09/02
Wolf CMS 0.8.3.1 Exploit, RCE v WEBAPPS Author: Balachandar Gowrisankar	2026/09/01
Payload CMS 3.72.0 Exploit, Blind SQL Injection WEBAPPS Author: ardosourc	2026/09/01
Bludit CMS Exploit, Stored XSS WEBAPPS Author: Saud Alenazi	2026/09/01
Grav CMS 2.0.7 Exploit, RCE WEBAPPS Author: er0day	2026/09/01
miniOrange 5.4.3 Exploit, Unauthenticated Auth Bypass WEBAPPS Author: er0day	2026/09/01
EasyAppointments 1.5.1 Exploit, Blind SQL Injection WEBAPPS Author: Michael Chesang	2026/09/01
C-MOR 6.0104 Exploit, Directory Traversal WEBAPPS Author: Samir Shamdin	2026/08/31
C-MOR 6.0104 Exploit, Cross-Site Scripting (XSS) WEBAPPS Author: Samir Shamdin	2026/08/31
CubeCart 6.7.4 Exploit, SQL injection WEBAPPS Author: Mikail KOCADAĞ	2026/08/31
CubeCart 6.7.4 Exploit, SQL WEBAPPS Author: Mikail KOCADAĞ	2026/08/31
CubeCart 6.7.4 Exploit, Stored XSS WEBAPPS Author: Mikail KOCADAĞ	2026/08/31
CubeCart 6.7.4 Exploit, Cross-Site Scripting WEBAPPS Author: Mikail KOCADAĞ	2026/08/31
Linksys E1200_2.0.04 Exploit, Unauthenticated OS Command Injection WEBAPPS Author: arret	2026/08/31
Langflow 1.8.4 Exploit, Path Traversal to Remote Code Execution WEBAPPS Author: ardosourc	2026/08/31
CVE-2026-42167 Exploit, ProFTPD mod_sql post-authentication SQLi Exploit, RCE REMOTE Author: oucef-	2026/08/25
PCMan 2.0.7 Exploit, Buffer Overflow REMOTE Author: Thiago Cunha	2026/08/18
NanaZip 6.5 Exploit, DoS DOS Author: Jorge González Milla	2026/08/18
flyto-core 2.26.7 Exploit, Arbitrary File Write WEBAPPS Author: Jorge González Milla	2026/08/18
Nodemailer 9.0.0 Exploit, File Read/ SSRF WEBAPPS Author: Jorge González Milla	2026/08/18
Linuxfabrik monitoring_plugins_6.0.0 Exploit, SSRF WEBAPPS Author: Jorge González Milla	2026/08/18
NanaZip 6.5 Exploit, DoS DOS Author: Jorge González Milla	2026/08/17
flyto_core 2.26.7 Exploit, Server-Side Request Forgery WEBAPPS Author: Jorge González Milla	2026/08/17
Probo 0.222.2 Exploit, IDOR WEBAPPS Author: Jorge González Milla	2026/08/17
webpack_devserver 5.2.5 Exploit, CSRF WEBAPPS Author: Jorge González Milla	2026/08/17
phpSysInfo 3.4.5 Exploit, IP Allowlist Bypass REMOTE Author: Muhammed Mirac Kayikci	2026/08/17
Nmap 7.99 Exploit, Extension Header Integer Underflow DOS Author: anyame	2026/08/17
Duplicati 2.2.0.3 Exploit, JWT Signing Key Leak WEBAPPS Author: Gabriel Rodrigues	2026/08/17
Joomla JCE_2.9.15 Exploit, Remote Code Execution WEBAPPS Author: Jared Brits	2026/08/17
ipTIME A3004T Exploit, Remote Code Execution REMOTE Author: accaro	2026/08/17
D-Link DNS_340L Exploit, OS Command Injection REMOTE Author: Jared Brits	2026/08/17
WooCommerce 1.5.0 Exploit, Unauthenticated Arbitrary File Upload WEBAPPS Author: Mohammad Hossein Sadeghian	2026/08/17
Apache Gravitino 1.2.1 Exploit, SSRF WEBAPPS Author: Ajay Rajpurohit	2026/08/11
Blocksy Companion 2.1.46 Exploit, RCE WEBAPPS Author: anyame	2026/08/11
PraisonAI praisonaiagents 1.6.77 Exploit, Remote Code Execution REMOTE Author: anyame	2026/08/11
mcp-server-kubernetes 3.8.x Exploit, Argument Injection REMOTE Author: anyame	2026/08/11
LuCI DHCPv6 Exploit, Lease Hostname Stored Cross-Site Scripting DOS Author: anyame	2026/08/11
Planyo_Online_Reservation_System 3.0 Exploit, Arbitrary File Read via SSRF WEBAPPS Author: Balachandar Gowrisankar	2026/08/11
Ray 2.56.0 Exploit, Directory Traversal & Local File Inclusion WEBAPPS Author: Richard Howe	2026/08/11
OrkesConductor 3.30.2 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: anyame	2026/08/10
Microsoft Edge 150.0.4078.48 Exploit, RCE LOCAL Author: anyame	2026/08/10
CorgetGpsDget 2_3.2 Exploit, OS Command Injection WEBAPPS Author: ytetobreac	2026/08/10
Joomla 2.9.99.4 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: Jared Brits	2026/08/10
Krayin CRM v2.2.x Exploit, Authenticated Remote Code Execution WEBAPPS Author: iamorphin	2026/07/08
Atarim WordPress Plugin 4.2.2 Exploit, Sensitive Information Exposure WEBAPPS Author: Mohammad Hossein Sadeghian	2026/07/08
Langflow 1.9.0 Exploit, RCE WEBAPPS Author: iamorphin	2026/07/08
Joomla Page Builder CK 3.5.10 Exploit, Arbitrary File Upload WEBAPPS Author: M@rAz Ali	2026/07/08
MCPJam Inspector Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/07/07
ProtonVPN v4.4.1 Exploit, Unquoted Service Path LOCAL Author: Milad karimi	2026/07/07
Flowise 3.1.3 Exploit, arbitrary code execution WEBAPPS Author: anyame	2026/07/07
Hydra Exploit, Stack Buffer Overflow REMOTE Author: anyame	2026/07/07
Discuz! X5.0 Exploit, Authentication Bypass WEBAPPS Author: anyame	2026/07/07
Tenable Nessus 10.12.1 Exploit, SQL Injection WEBAPPS Author: anyame	2026/07/07
WordPress Bricks Builder Theme Exploit, RCE WEBAPPS Author: Jared Brits	2026/07/07
iOS Bluetooth PAN Exploit Exploit, Ethernet Gateway without Adapter REMOTE Author: Fares Dahoumane	2026/07/07
Joomla Extension 4.1.4 Exploit, PHP Object injection WEBAPPS Author: Amin İsayev	2026/07/06
Pulpy 0.1.1-Beta Exploit, Filesystem Sandbox Bypass WEBAPPS Author: Onur BILICI	2026/07/06
MEmu Android Emulator 9.2.7.0 Exploit, Local Privilege Escalation LOCAL Author: ohamma	2026/07/06
KeepInMind 0.8.4.2 Exploit, Stored XSS WEBAPPS Author: Pavan N	2026/07/06
KNX visualisering Exploit, Broken Access Control WEBAPPS Author: Parsa Rezaie Khiabanloo	2026/07/06
Windows Defender (MsMpEng.exe) Exploit, Race Condition LOCAL Author: u11secur1t	2026/07/06
WordPress Plugin WPZOOM Portfolio 1.4.21 Exploit, Reflected Cross-Site Scripting (XSS) WEBAPPS Author: Kent Apostol	2026/07/06
OpenEMR 7.0.2 Exploit, Arbitrary File Read WEBAPPS Author: oany	2026/06/08
WordPress Contest Gallery 28.1.4 Exploit, Unauthenticated Blind SQL Injection WEBAPPS Author: ardosourc	2026/06/05
Drupal Core 10.5.5 Exploit, Error-Based SQL Injection WEBAPPS Author: ardosourc	2026/06/01
WordPress OrderConvo 14 Exploit, Path Traversal WEBAPPS Author: iamorphin	2026/06/01
Notepad++ 8.9.6 Exploit, Arbitrary Code Execution REMOTE Author: Kavin Jindal	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, No Rate Limiting WEBAPPS Author: Daniel Miranda	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, User Enumeration WEBAPPS Author: Daniel Miranda	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, LDAP Injection WEBAPPS Author: Daniel Miranda	2026/05/30
Microsoft Exploit, NTLMv2 Hash Capture REMOTE Author: u11secur1t	2026/05/29
MikroORM 7.0.13 Exploit, SQL Injection WEBAPPS Author: ardosourc	2026/05/29
Prodigy Commerce 3.3.0 Exploit, Local File Inclusion WEBAPPS Author: iamorphin	2026/05/29
Langflow 1.3.0 Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/05/29
Quick Playground for WordPress 1.3.1 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
ImageMagick Exploit, Infinite Loop in the MIFF decoder can lead to CPU exhaustion LOCAL Author: Jose Rivas	2026/05/29
ZTE Routers Exploit, Unauthenticated Denial of Service LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE ZXHN H188A V6 Exploit, Authentication Bypass LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE H298A / H108N Exploit, Unauthenticated Credential Exposure LOCAL Author: Mina Nageh Salalma	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/29
MixPHP Framework 2.2.17 Exploit, Unsafe Deserialization Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29

Teltonika_RutOS 00.07.06.21 Exploit, command injection
REMOTE Author: Rubbish Research Team

2026/10/01

TigerGraph_Community_Edition 4.2.4 Exploit, arbitrary file write
WEBAPPS Author: Rubbish Research Team

2026/10/01

WordPress 7.0.2 Exploit, Path Travesal
WEBAPPS Author: Robert Ressl

2026/10/01

Food-Ordering 1.0 Exploit, LFI
WEBAPPS Author: u11secur1t

2026/10/01

Ecava_ntegraXor IGX_16.0.701.10 Exploit, RCE
REMOTE Author: Rubbish Research Team

2026/10/01

Krayin CRM 2.2.4 Exploit, IDOR
WEBAPPS Author: l4dsc4

2026/10/01