<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Exploit-DB.com RSS Feed</title>
        <link>https://www.exploit-db.com</link>
        <atom:link href="https://www.exploit-db.com/rss.xml" rel="self" type="application/rss+xml" />
        <language>en-us</language>
        <description>The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.</description>
        <pubDate>Tue, 08 Sep 2026 08:40:03 +0000</pubDate>
        <lastBuildDate>Tue, 08 Sep 2026 08:40:03 +0000</lastBuildDate>
        <copyright></copyright>
         <item>
            <title>[webapps] FreePBX  17.0.2 - Remote Code Execution (RCE)</title>
            <link>https://www.exploit-db.com/exploits/52681</link>
            <description>FreePBX  17.0.2 - Remote Code Execution (RCE)</description>
            <pubDate>Thu, 03 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52681</guid>
        </item>
         <item>
            <title>[webapps] Metabase 0.61.0  - Authenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52680</link>
            <description>Metabase 0.61.0  - Authenticated Remote Code Execution</description>
            <pubDate>Thu, 03 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52680</guid>
        </item>
         <item>
            <title>[dos] EVerest 2025.9.0 - DoS</title>
            <link>https://www.exploit-db.com/exploits/52679</link>
            <description>EVerest 2025.9.0 - DoS</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52679</guid>
        </item>
         <item>
            <title>[webapps] Bludit CMS  3.20.0 - Reflected Cross-Site Scripting</title>
            <link>https://www.exploit-db.com/exploits/52678</link>
            <description>Bludit CMS  3.20.0 - Reflected Cross-Site Scripting</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52678</guid>
        </item>
         <item>
            <title>[webapps] PodcastGenerator 3.2.9 - Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52677</link>
            <description>PodcastGenerator 3.2.9 - Stored XSS</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52677</guid>
        </item>
         <item>
            <title>[webapps] Ghost_CMS 6.19.0  - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52676</link>
            <description>Ghost_CMS 6.19.0  - Remote Code Execution</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52676</guid>
        </item>
         <item>
            <title>[webapps] Langflow 1.10.0 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52675</link>
            <description>Langflow 1.10.0 - RCE</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52675</guid>
        </item>
         <item>
            <title>[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities</title>
            <link>https://www.exploit-db.com/exploits/52674</link>
            <description>Fullhan FH8626V100 - Multiple Vulnerabilities</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52674</guid>
        </item>
         <item>
            <title>[webapps] Marimo  0.20.4 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52673</link>
            <description>Marimo  0.20.4 - RCE</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52673</guid>
        </item>
         <item>
            <title>[webapps] Wolf CMS 0.8.3.1 - RCE v</title>
            <link>https://www.exploit-db.com/exploits/52672</link>
            <description>Wolf CMS 0.8.3.1 - RCE v</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52672</guid>
        </item>
         <item>
            <title>[webapps] Payload CMS 3.72.0 - Blind SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52671</link>
            <description>Payload CMS 3.72.0 - Blind SQL Injection</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52671</guid>
        </item>
         <item>
            <title>[webapps] Bludit CMS - Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52670</link>
            <description>Bludit CMS - Stored XSS</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52670</guid>
        </item>
         <item>
            <title>[webapps] Grav CMS 2.0.7 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52669</link>
            <description>Grav CMS 2.0.7 - RCE</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52669</guid>
        </item>
         <item>
            <title>[webapps] miniOrange  5.4.3 - Unauthenticated Auth Bypass</title>
            <link>https://www.exploit-db.com/exploits/52668</link>
            <description>miniOrange  5.4.3 - Unauthenticated Auth Bypass</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52668</guid>
        </item>
         <item>
            <title>[webapps] EasyAppointments  1.5.1 - Blind SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52667</link>
            <description>EasyAppointments  1.5.1 - Blind SQL Injection</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52667</guid>
        </item>
         <item>
            <title>[webapps] C-MOR  6.0104 - Directory Traversal</title>
            <link>https://www.exploit-db.com/exploits/52666</link>
            <description>C-MOR  6.0104 - Directory Traversal</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52666</guid>
        </item>
         <item>
            <title>[webapps] C-MOR  6.0104 - Cross-Site Scripting (XSS)</title>
            <link>https://www.exploit-db.com/exploits/52665</link>
            <description>C-MOR  6.0104 - Cross-Site Scripting (XSS)</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52665</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - SQL injection</title>
            <link>https://www.exploit-db.com/exploits/52664</link>
            <description>CubeCart 6.7.4 - SQL injection</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52664</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - SQL</title>
            <link>https://www.exploit-db.com/exploits/52663</link>
            <description>CubeCart 6.7.4 - SQL</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52663</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52662</link>
            <description>CubeCart 6.7.4 - Stored XSS</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52662</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - Cross-Site Scripting</title>
            <link>https://www.exploit-db.com/exploits/52661</link>
            <description>CubeCart 6.7.4 - Cross-Site Scripting</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52661</guid>
        </item>
         <item>
            <title>[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection</title>
            <link>https://www.exploit-db.com/exploits/52660</link>
            <description>Linksys E1200_2.0.04 - Unauthenticated OS Command Injection</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52660</guid>
        </item>
         <item>
            <title>[webapps] Langflow  1.8.4 - Path Traversal to Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52659</link>
            <description>Langflow  1.8.4 - Path Traversal to Remote Code Execution</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52659</guid>
        </item>
         <item>
            <title>[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE</title>
            <link>https://www.exploit-db.com/exploits/52658</link>
            <description>CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE</description>
            <pubDate>Tue, 25 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52658</guid>
        </item>
         <item>
            <title>[remote] PCMan 2.0.7 - Buffer Overflow</title>
            <link>https://www.exploit-db.com/exploits/52657</link>
            <description>PCMan 2.0.7 - Buffer Overflow</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52657</guid>
        </item>
         <item>
            <title>[dos] NanaZip 6.5  - DoS</title>
            <link>https://www.exploit-db.com/exploits/52656</link>
            <description>NanaZip 6.5  - DoS</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52656</guid>
        </item>
         <item>
            <title>[webapps] flyto-core 2.26.7 - Arbitrary File Write</title>
            <link>https://www.exploit-db.com/exploits/52655</link>
            <description>flyto-core 2.26.7 - Arbitrary File Write</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52655</guid>
        </item>
         <item>
            <title>[webapps] Nodemailer 9.0.0 - File Read/ SSRF</title>
            <link>https://www.exploit-db.com/exploits/52654</link>
            <description>Nodemailer 9.0.0 - File Read/ SSRF</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52654</guid>
        </item>
         <item>
            <title>[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF</title>
            <link>https://www.exploit-db.com/exploits/52653</link>
            <description>Linuxfabrik monitoring_plugins_6.0.0 - SSRF</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52653</guid>
        </item>
         <item>
            <title>[dos] NanaZip 6.5  -  DoS</title>
            <link>https://www.exploit-db.com/exploits/52652</link>
            <description>NanaZip 6.5  -  DoS</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52652</guid>
        </item>
         <item>
            <title>[webapps] flyto_core 2.26.7 - Server-Side Request Forgery</title>
            <link>https://www.exploit-db.com/exploits/52651</link>
            <description>flyto_core 2.26.7 - Server-Side Request Forgery</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52651</guid>
        </item>
         <item>
            <title>[webapps] Probo 0.222.2 -  IDOR</title>
            <link>https://www.exploit-db.com/exploits/52650</link>
            <description>Probo 0.222.2 -  IDOR</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52650</guid>
        </item>
         <item>
            <title>[webapps] webpack_devserver 5.2.5 -  CSRF</title>
            <link>https://www.exploit-db.com/exploits/52649</link>
            <description>webpack_devserver 5.2.5 -  CSRF</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52649</guid>
        </item>
         <item>
            <title>[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass</title>
            <link>https://www.exploit-db.com/exploits/52648</link>
            <description>phpSysInfo 3.4.5 - IP Allowlist Bypass</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52648</guid>
        </item>
         <item>
            <title>[dos] Nmap  7.99  - Extension Header Integer Underflow</title>
            <link>https://www.exploit-db.com/exploits/52647</link>
            <description>Nmap  7.99  - Extension Header Integer Underflow</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52647</guid>
        </item>
         <item>
            <title>[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak</title>
            <link>https://www.exploit-db.com/exploits/52646</link>
            <description>Duplicati 2.2.0.3 - JWT Signing Key Leak</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52646</guid>
        </item>
         <item>
            <title>[webapps] Joomla JCE_2.9.15 - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52645</link>
            <description>Joomla JCE_2.9.15 - Remote Code Execution</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52645</guid>
        </item>
         <item>
            <title>[remote] ipTIME A3004T  - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52644</link>
            <description>ipTIME A3004T  - Remote Code Execution</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52644</guid>
        </item>
         <item>
            <title>[remote] D-Link DNS_340L - OS Command Injection</title>
            <link>https://www.exploit-db.com/exploits/52643</link>
            <description>D-Link DNS_340L - OS Command Injection</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52643</guid>
        </item>
         <item>
            <title>[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload</title>
            <link>https://www.exploit-db.com/exploits/52642</link>
            <description>WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52642</guid>
        </item>
         <item>
            <title>[webapps] Apache Gravitino 1.2.1 - SSRF</title>
            <link>https://www.exploit-db.com/exploits/52641</link>
            <description>Apache Gravitino 1.2.1 - SSRF</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52641</guid>
        </item>
         <item>
            <title>[webapps] Blocksy Companion  2.1.46 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52640</link>
            <description>Blocksy Companion  2.1.46 - RCE</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52640</guid>
        </item>
         <item>
            <title>[remote] PraisonAI praisonaiagents  1.6.77 - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52639</link>
            <description>PraisonAI praisonaiagents  1.6.77 - Remote Code Execution</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52639</guid>
        </item>
         <item>
            <title>[remote] mcp-server-kubernetes 3.8.x - Argument Injection</title>
            <link>https://www.exploit-db.com/exploits/52638</link>
            <description>mcp-server-kubernetes 3.8.x - Argument Injection</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52638</guid>
        </item>
         <item>
            <title>[dos] LuCI DHCPv6 -  Lease Hostname Stored Cross-Site Scripting</title>
            <link>https://www.exploit-db.com/exploits/52637</link>
            <description>LuCI DHCPv6 -  Lease Hostname Stored Cross-Site Scripting</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52637</guid>
        </item>
         <item>
            <title>[webapps] Planyo_Online_Reservation_System  3.0 - Arbitrary File Read via SSRF</title>
            <link>https://www.exploit-db.com/exploits/52636</link>
            <description>Planyo_Online_Reservation_System  3.0 - Arbitrary File Read via SSRF</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52636</guid>
        </item>
         <item>
            <title>[webapps] Ray 2.56.0 - Directory Traversal &amp; Local File Inclusion</title>
            <link>https://www.exploit-db.com/exploits/52635</link>
            <description>Ray 2.56.0 - Directory Traversal &amp; Local File Inclusion</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52635</guid>
        </item>
         <item>
            <title>[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52633</link>
            <description>OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52633</guid>
        </item>
         <item>
            <title>[local] Microsoft Edge 150.0.4078.48 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52632</link>
            <description>Microsoft Edge 150.0.4078.48 - RCE</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52632</guid>
        </item>
         <item>
            <title>[webapps] CorgetGpsDget 2_3.2 - OS Command Injection</title>
            <link>https://www.exploit-db.com/exploits/52631</link>
            <description>CorgetGpsDget 2_3.2 - OS Command Injection</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52631</guid>
        </item>
    </channel>
</rss>