Exploit-DB.com RSS Feed https://www.exploit-db.com en-us The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more. Tue, 10 Nov 2026 15:10:04 +0000 Tue, 10 Nov 2026 15:10:04 +0000 [remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE https://www.exploit-db.com/exploits/52704 PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE Thu, 22 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52704 [webapps] pizzafy-1.0 - SQLi https://www.exploit-db.com/exploits/52703 pizzafy-1.0 - SQLi Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52703 [remote] South River Technologies Titan MFT Server 26.0.0 - code execution https://www.exploit-db.com/exploits/52701 South River Technologies Titan MFT Server 26.0.0 - code execution Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52701 [remote] Synametrics Syncrify 6.2 - command execution https://www.exploit-db.com/exploits/52700 Synametrics Syncrify 6.2 - command execution Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52700 [webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover https://www.exploit-db.com/exploits/52699 Keycloak 26.7.2 - Unauthenticated Account Takeover Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52699 [webapps] Open eClass 3.15 - RCE https://www.exploit-db.com/exploits/52698 Open eClass 3.15 - RCE Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52698 [webapps] Automotive Shop Management System 1.0 - SQLi https://www.exploit-db.com/exploits/52697 Automotive Shop Management System 1.0 - SQLi Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52697 [remote] Edimax BR-6478AC firmware v2.20 - authenticated command injection https://www.exploit-db.com/exploits/52696 Edimax BR-6478AC firmware v2.20 - authenticated command injection Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52696 [remote] Exasol Database 7.1.30 - command execution https://www.exploit-db.com/exploits/52695 Exasol Database 7.1.30 - command execution Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52695 [remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution https://www.exploit-db.com/exploits/52694 Parasoft Continuous Testing Platform 10.7.5 - JSP command execution Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52694 [remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root https://www.exploit-db.com/exploits/52693 ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root Wed, 21 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52693 [remote] Teltonika_RutOS 00.07.06.21 - command injection https://www.exploit-db.com/exploits/52692 Teltonika_RutOS 00.07.06.21 - command injection Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52692 [webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write https://www.exploit-db.com/exploits/52691 TigerGraph_Community_Edition 4.2.4 - arbitrary file write Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52691 [webapps] WordPress 7.0.2 - Path Travesal https://www.exploit-db.com/exploits/52690 WordPress 7.0.2 - Path Travesal Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52690 [webapps] Food-Ordering 1.0 - LFI https://www.exploit-db.com/exploits/52689 Food-Ordering 1.0 - LFI Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52689 [remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE https://www.exploit-db.com/exploits/52688 Ecava_ntegraXor IGX_16.0.701.10 - RCE Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52688 [webapps] Krayin CRM 2.2.4 - IDOR https://www.exploit-db.com/exploits/52687 Krayin CRM 2.2.4 - IDOR Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52687 [webapps] SuiteCRM 8.10.1 - Authenticated SSRF https://www.exploit-db.com/exploits/52686 SuiteCRM 8.10.1 - Authenticated SSRF Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52686 [webapps] InvoicePlane 1.7.1 - RCE https://www.exploit-db.com/exploits/52685 InvoicePlane 1.7.1 - RCE Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52685 [webapps] POMS oretnom23v1.0 - SQLi vulnerabilities https://www.exploit-db.com/exploits/52684 POMS oretnom23v1.0 - SQLi vulnerabilities Thu, 01 Oct 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52684 [remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE https://www.exploit-db.com/exploits/52683 MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE Thu, 24 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52683 [remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE https://www.exploit-db.com/exploits/52682 CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE Fri, 11 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52682 [webapps] FreePBX 17.0.2 - Remote Code Execution (RCE) https://www.exploit-db.com/exploits/52681 FreePBX 17.0.2 - Remote Code Execution (RCE) Thu, 03 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52681 [webapps] Metabase 0.61.0 - Authenticated Remote Code Execution https://www.exploit-db.com/exploits/52680 Metabase 0.61.0 - Authenticated Remote Code Execution Thu, 03 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52680 [dos] EVerest 2025.9.0 - DoS https://www.exploit-db.com/exploits/52679 EVerest 2025.9.0 - DoS Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52679 [webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting https://www.exploit-db.com/exploits/52678 Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52678 [webapps] PodcastGenerator 3.2.9 - Stored XSS https://www.exploit-db.com/exploits/52677 PodcastGenerator 3.2.9 - Stored XSS Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52677 [webapps] Ghost_CMS 6.19.0 - Remote Code Execution https://www.exploit-db.com/exploits/52676 Ghost_CMS 6.19.0 - Remote Code Execution Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52676 [webapps] Langflow 1.10.0 - RCE https://www.exploit-db.com/exploits/52675 Langflow 1.10.0 - RCE Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52675 [hardware] Fullhan FH8626V100 - Multiple Vulnerabilities https://www.exploit-db.com/exploits/52674 Fullhan FH8626V100 - Multiple Vulnerabilities Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52674 [webapps] Marimo 0.20.4 - RCE https://www.exploit-db.com/exploits/52673 Marimo 0.20.4 - RCE Wed, 02 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52673 [webapps] Wolf CMS 0.8.3.1 - RCE v https://www.exploit-db.com/exploits/52672 Wolf CMS 0.8.3.1 - RCE v Tue, 01 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52672 [webapps] Payload CMS 3.72.0 - Blind SQL Injection https://www.exploit-db.com/exploits/52671 Payload CMS 3.72.0 - Blind SQL Injection Tue, 01 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52671 [webapps] Bludit CMS - Stored XSS https://www.exploit-db.com/exploits/52670 Bludit CMS - Stored XSS Tue, 01 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52670 [webapps] Grav CMS 2.0.7 - RCE https://www.exploit-db.com/exploits/52669 Grav CMS 2.0.7 - RCE Tue, 01 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52669 [webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass https://www.exploit-db.com/exploits/52668 miniOrange 5.4.3 - Unauthenticated Auth Bypass Tue, 01 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52668 [webapps] EasyAppointments 1.5.1 - Blind SQL Injection https://www.exploit-db.com/exploits/52667 EasyAppointments 1.5.1 - Blind SQL Injection Tue, 01 Sep 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52667 [webapps] C-MOR 6.0104 - Directory Traversal https://www.exploit-db.com/exploits/52666 C-MOR 6.0104 - Directory Traversal Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52666 [webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS) https://www.exploit-db.com/exploits/52665 C-MOR 6.0104 - Cross-Site Scripting (XSS) Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52665 [webapps] CubeCart 6.7.4 - SQL injection https://www.exploit-db.com/exploits/52664 CubeCart 6.7.4 - SQL injection Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52664 [webapps] CubeCart 6.7.4 - SQL https://www.exploit-db.com/exploits/52663 CubeCart 6.7.4 - SQL Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52663 [webapps] CubeCart 6.7.4 - Stored XSS https://www.exploit-db.com/exploits/52662 CubeCart 6.7.4 - Stored XSS Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52662 [webapps] CubeCart 6.7.4 - Cross-Site Scripting https://www.exploit-db.com/exploits/52661 CubeCart 6.7.4 - Cross-Site Scripting Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52661 [webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection https://www.exploit-db.com/exploits/52660 Linksys E1200_2.0.04 - Unauthenticated OS Command Injection Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52660 [webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution https://www.exploit-db.com/exploits/52659 Langflow 1.8.4 - Path Traversal to Remote Code Execution Mon, 31 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52659 [remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE https://www.exploit-db.com/exploits/52658 CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE Tue, 25 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52658 [remote] PCMan 2.0.7 - Buffer Overflow https://www.exploit-db.com/exploits/52657 PCMan 2.0.7 - Buffer Overflow Tue, 18 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52657 [dos] NanaZip 6.5 - DoS https://www.exploit-db.com/exploits/52656 NanaZip 6.5 - DoS Tue, 18 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52656 [webapps] flyto-core 2.26.7 - Arbitrary File Write https://www.exploit-db.com/exploits/52655 flyto-core 2.26.7 - Arbitrary File Write Tue, 18 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52655 [webapps] Nodemailer 9.0.0 - File Read/ SSRF https://www.exploit-db.com/exploits/52654 Nodemailer 9.0.0 - File Read/ SSRF Tue, 18 Aug 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52654