Exploit-DB.com RSS Feed https://www.exploit-db.com en-us The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more. Wed, 08 Jul 2026 14:10:09 +0000 Wed, 08 Jul 2026 14:10:09 +0000 [webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution https://www.exploit-db.com/exploits/52629 Krayin CRM v2.2.x - Authenticated Remote Code Execution Wed, 08 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52629 [webapps] Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure https://www.exploit-db.com/exploits/52628 Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Wed, 08 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52628 [webapps] Langflow 1.9.0 - RCE https://www.exploit-db.com/exploits/52627 Langflow 1.9.0 - RCE Wed, 08 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52627 [webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload https://www.exploit-db.com/exploits/52626 Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Wed, 08 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52626 [webapps] MCPJam Inspector - Remote Code Execution https://www.exploit-db.com/exploits/52625 MCPJam Inspector - Remote Code Execution Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52625 [local] ProtonVPN v4.4.1 - Unquoted Service Path https://www.exploit-db.com/exploits/52624 ProtonVPN v4.4.1 - Unquoted Service Path Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52624 [webapps] Flowise 3.1.3 - arbitrary code execution https://www.exploit-db.com/exploits/52623 Flowise 3.1.3 - arbitrary code execution Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52623 [remote] Hydra - Stack Buffer Overflow https://www.exploit-db.com/exploits/52622 Hydra - Stack Buffer Overflow Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52622 [webapps] Discuz! X5.0 - Authentication Bypass https://www.exploit-db.com/exploits/52621 Discuz! X5.0 - Authentication Bypass Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52621 [webapps] Tenable Nessus 10.12.1 - SQL Injection https://www.exploit-db.com/exploits/52620 Tenable Nessus 10.12.1 - SQL Injection Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52620 [webapps] WordPress Bricks Builder Theme - RCE https://www.exploit-db.com/exploits/52619 WordPress Bricks Builder Theme - RCE Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52619 [remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter https://www.exploit-db.com/exploits/52618 iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter Tue, 07 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52618 [webapps] Joomla Extension 4.1.4 - PHP Object injection https://www.exploit-db.com/exploits/52617 Joomla Extension 4.1.4 - PHP Object injection Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52617 [webapps] Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass https://www.exploit-db.com/exploits/52616 Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52616 [local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation https://www.exploit-db.com/exploits/52615 MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52615 [webapps] KeepInMind 0.8.4.2 - Stored XSS https://www.exploit-db.com/exploits/52614 KeepInMind 0.8.4.2 - Stored XSS Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52614 [webapps] KNX visualisering - Broken Access Control https://www.exploit-db.com/exploits/52613 KNX visualisering - Broken Access Control Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52613 [local] Windows Defender (MsMpEng.exe) - Race Condition https://www.exploit-db.com/exploits/52612 Windows Defender (MsMpEng.exe) - Race Condition Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52612 [webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) https://www.exploit-db.com/exploits/52611 WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Mon, 06 Jul 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52611 [webapps] OpenEMR 7.0.2 - Arbitrary File Read https://www.exploit-db.com/exploits/52610 OpenEMR 7.0.2 - Arbitrary File Read Mon, 08 Jun 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52610 [webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection https://www.exploit-db.com/exploits/52609 WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection Fri, 05 Jun 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52609 [webapps] Drupal Core 10.5.5 - Error-Based SQL Injection https://www.exploit-db.com/exploits/52608 Drupal Core 10.5.5 - Error-Based SQL Injection Mon, 01 Jun 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52608 [webapps] WordPress OrderConvo 14 - Path Traversal https://www.exploit-db.com/exploits/52607 WordPress OrderConvo 14 - Path Traversal Mon, 01 Jun 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52607 [remote] Notepad++ 8.9.6 - Arbitrary Code Execution https://www.exploit-db.com/exploits/52606 Notepad++ 8.9.6 - Arbitrary Code Execution Sat, 30 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52606 [webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting https://www.exploit-db.com/exploits/52605 YAMCS yamcs-core 5.12.7 - No Rate Limiting Sat, 30 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52605 [webapps] YAMCS yamcs-core 5.12.7 - User Enumeration https://www.exploit-db.com/exploits/52604 YAMCS yamcs-core 5.12.7 - User Enumeration Sat, 30 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52604 [webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection https://www.exploit-db.com/exploits/52603 YAMCS yamcs-core 5.12.7 - LDAP Injection Sat, 30 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52603 [remote] Microsoft - NTLMv2 Hash Capture https://www.exploit-db.com/exploits/52601 Microsoft - NTLMv2 Hash Capture Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52601 [webapps] MikroORM 7.0.13 - SQL Injection https://www.exploit-db.com/exploits/52600 MikroORM 7.0.13 - SQL Injection Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52600 [webapps] Prodigy Commerce 3.3.0 - Local File Inclusion https://www.exploit-db.com/exploits/52598 Prodigy Commerce 3.3.0 - Local File Inclusion Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52598 [webapps] Langflow 1.3.0 - Remote Code Execution https://www.exploit-db.com/exploits/52597 Langflow 1.3.0 - Remote Code Execution Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52597 [webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution https://www.exploit-db.com/exploits/52596 Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52596 [local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion https://www.exploit-db.com/exploits/52595 ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52595 [local] ZTE Routers - Unauthenticated Denial of Service https://www.exploit-db.com/exploits/52594 ZTE Routers - Unauthenticated Denial of Service Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52594 [local] ZTE ZXHN H188A V6 - Authentication Bypass https://www.exploit-db.com/exploits/52593 ZTE ZXHN H188A V6 - Authentication Bypass Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52593 [local] ZTE H298A / H108N - Unauthenticated Credential Exposure https://www.exploit-db.com/exploits/52592 ZTE H298A / H108N - Unauthenticated Credential Exposure Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52592 [local] Linux Kernel - Local Privilege Escalation https://www.exploit-db.com/exploits/52591 Linux Kernel - Local Privilege Escalation Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52591 [webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution https://www.exploit-db.com/exploits/52590 MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52590 [remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution https://www.exploit-db.com/exploits/52589 Wing FTP Server 8.1.3 - Authenticated Remote Code Execution Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52589 [webapps] CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) https://www.exploit-db.com/exploits/52588 CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52588 [remote] strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow https://www.exploit-db.com/exploits/52587 strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52587 [dos] strongSwan 5.9.13 - DoS https://www.exploit-db.com/exploits/52586 strongSwan 5.9.13 - DoS Fri, 29 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52586 [local] Linux Kernel - Local Privilege Escalation https://www.exploit-db.com/exploits/52585 Linux Kernel - Local Privilege Escalation Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52585 [webapps] Casdoor 3.54.1 - Arbitrary File Write via Path Traversal https://www.exploit-db.com/exploits/52584 Casdoor 3.54.1 - Arbitrary File Write via Path Traversal Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52584 [webapps] EspoCRM 9.3.3 - SSRF https://www.exploit-db.com/exploits/52583 EspoCRM 9.3.3 - SSRF Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52583 [webapps] scramble - Remote Code Execution https://www.exploit-db.com/exploits/52582 scramble - Remote Code Execution Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52582 [hardware] MeiG Smart FORGE_SLT711 - OS Command Injection https://www.exploit-db.com/exploits/52581 MeiG Smart FORGE_SLT711 - OS Command Injection Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52581 [local] Realtek rtl819x - Local Privilege https://www.exploit-db.com/exploits/52580 Realtek rtl819x - Local Privilege Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52580 [webapps] OpenCATS 0.9.7.4 - SQL Injection https://www.exploit-db.com/exploits/52579 OpenCATS 0.9.7.4 - SQL Injection Wed, 27 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52579 [webapps] Grav CMS 2.0.0-beta.2 - Remote Code Execution https://www.exploit-db.com/exploits/52578 Grav CMS 2.0.0-beta.2 - Remote Code Execution Tue, 26 May 2026 00:00:00 +0000 https://www.exploit-db.com/exploits/52578