<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Exploit-DB.com RSS Feed</title>
        <link>https://www.exploit-db.com</link>
        <atom:link href="https://www.exploit-db.com/rss.xml" rel="self" type="application/rss+xml" />
        <language>en-us</language>
        <description>The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.</description>
        <pubDate>Tue, 20 Oct 2026 22:10:03 +0000</pubDate>
        <lastBuildDate>Tue, 20 Oct 2026 22:10:03 +0000</lastBuildDate>
        <copyright></copyright>
         <item>
            <title>[remote] Teltonika_RutOS 00.07.06.21 - command injection</title>
            <link>https://www.exploit-db.com/exploits/52692</link>
            <description>Teltonika_RutOS 00.07.06.21 - command injection</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52692</guid>
        </item>
         <item>
            <title>[webapps] TigerGraph_Community_Edition 4.2.4  - arbitrary file write</title>
            <link>https://www.exploit-db.com/exploits/52691</link>
            <description>TigerGraph_Community_Edition 4.2.4  - arbitrary file write</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52691</guid>
        </item>
         <item>
            <title>[webapps] WordPress 7.0.2 - Path Travesal</title>
            <link>https://www.exploit-db.com/exploits/52690</link>
            <description>WordPress 7.0.2 - Path Travesal</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52690</guid>
        </item>
         <item>
            <title>[webapps] Food-Ordering 1.0  -  LFI</title>
            <link>https://www.exploit-db.com/exploits/52689</link>
            <description>Food-Ordering 1.0  -  LFI</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52689</guid>
        </item>
         <item>
            <title>[remote] Ecava_ntegraXor  IGX_16.0.701.10 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52688</link>
            <description>Ecava_ntegraXor  IGX_16.0.701.10 - RCE</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52688</guid>
        </item>
         <item>
            <title>[webapps] Krayin CRM 2.2.4 - IDOR</title>
            <link>https://www.exploit-db.com/exploits/52687</link>
            <description>Krayin CRM 2.2.4 - IDOR</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52687</guid>
        </item>
         <item>
            <title>[webapps] SuiteCRM  8.10.1 - Authenticated SSRF</title>
            <link>https://www.exploit-db.com/exploits/52686</link>
            <description>SuiteCRM  8.10.1 - Authenticated SSRF</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52686</guid>
        </item>
         <item>
            <title>[webapps] InvoicePlane 1.7.1 -  RCE</title>
            <link>https://www.exploit-db.com/exploits/52685</link>
            <description>InvoicePlane 1.7.1 -  RCE</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52685</guid>
        </item>
         <item>
            <title>[webapps] POMS oretnom23v1.0  - SQLi vulnerabilities</title>
            <link>https://www.exploit-db.com/exploits/52684</link>
            <description>POMS oretnom23v1.0  - SQLi vulnerabilities</description>
            <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52684</guid>
        </item>
         <item>
            <title>[remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52683</link>
            <description>MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE</description>
            <pubDate>Thu, 24 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52683</guid>
        </item>
         <item>
            <title>[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS &lt; 9.22, 10.0 &lt; 10.10, 11.0 &lt; 11.3 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52682</link>
            <description>CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS &lt; 9.22, 10.0 &lt; 10.10, 11.0 &lt; 11.3 - RCE</description>
            <pubDate>Fri, 11 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52682</guid>
        </item>
         <item>
            <title>[webapps] FreePBX  17.0.2 - Remote Code Execution (RCE)</title>
            <link>https://www.exploit-db.com/exploits/52681</link>
            <description>FreePBX  17.0.2 - Remote Code Execution (RCE)</description>
            <pubDate>Thu, 03 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52681</guid>
        </item>
         <item>
            <title>[webapps] Metabase 0.61.0  - Authenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52680</link>
            <description>Metabase 0.61.0  - Authenticated Remote Code Execution</description>
            <pubDate>Thu, 03 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52680</guid>
        </item>
         <item>
            <title>[dos] EVerest 2025.9.0 - DoS</title>
            <link>https://www.exploit-db.com/exploits/52679</link>
            <description>EVerest 2025.9.0 - DoS</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52679</guid>
        </item>
         <item>
            <title>[webapps] Bludit CMS  3.20.0 - Reflected Cross-Site Scripting</title>
            <link>https://www.exploit-db.com/exploits/52678</link>
            <description>Bludit CMS  3.20.0 - Reflected Cross-Site Scripting</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52678</guid>
        </item>
         <item>
            <title>[webapps] PodcastGenerator 3.2.9 - Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52677</link>
            <description>PodcastGenerator 3.2.9 - Stored XSS</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52677</guid>
        </item>
         <item>
            <title>[webapps] Ghost_CMS 6.19.0  - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52676</link>
            <description>Ghost_CMS 6.19.0  - Remote Code Execution</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52676</guid>
        </item>
         <item>
            <title>[webapps] Langflow 1.10.0 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52675</link>
            <description>Langflow 1.10.0 - RCE</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52675</guid>
        </item>
         <item>
            <title>[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities</title>
            <link>https://www.exploit-db.com/exploits/52674</link>
            <description>Fullhan FH8626V100 - Multiple Vulnerabilities</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52674</guid>
        </item>
         <item>
            <title>[webapps] Marimo  0.20.4 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52673</link>
            <description>Marimo  0.20.4 - RCE</description>
            <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52673</guid>
        </item>
         <item>
            <title>[webapps] Wolf CMS 0.8.3.1 - RCE v</title>
            <link>https://www.exploit-db.com/exploits/52672</link>
            <description>Wolf CMS 0.8.3.1 - RCE v</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52672</guid>
        </item>
         <item>
            <title>[webapps] Payload CMS 3.72.0 - Blind SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52671</link>
            <description>Payload CMS 3.72.0 - Blind SQL Injection</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52671</guid>
        </item>
         <item>
            <title>[webapps] Bludit CMS - Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52670</link>
            <description>Bludit CMS - Stored XSS</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52670</guid>
        </item>
         <item>
            <title>[webapps] Grav CMS 2.0.7 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52669</link>
            <description>Grav CMS 2.0.7 - RCE</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52669</guid>
        </item>
         <item>
            <title>[webapps] miniOrange  5.4.3 - Unauthenticated Auth Bypass</title>
            <link>https://www.exploit-db.com/exploits/52668</link>
            <description>miniOrange  5.4.3 - Unauthenticated Auth Bypass</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52668</guid>
        </item>
         <item>
            <title>[webapps] EasyAppointments  1.5.1 - Blind SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52667</link>
            <description>EasyAppointments  1.5.1 - Blind SQL Injection</description>
            <pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52667</guid>
        </item>
         <item>
            <title>[webapps] C-MOR  6.0104 - Directory Traversal</title>
            <link>https://www.exploit-db.com/exploits/52666</link>
            <description>C-MOR  6.0104 - Directory Traversal</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52666</guid>
        </item>
         <item>
            <title>[webapps] C-MOR  6.0104 - Cross-Site Scripting (XSS)</title>
            <link>https://www.exploit-db.com/exploits/52665</link>
            <description>C-MOR  6.0104 - Cross-Site Scripting (XSS)</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52665</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - SQL injection</title>
            <link>https://www.exploit-db.com/exploits/52664</link>
            <description>CubeCart 6.7.4 - SQL injection</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52664</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - SQL</title>
            <link>https://www.exploit-db.com/exploits/52663</link>
            <description>CubeCart 6.7.4 - SQL</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52663</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52662</link>
            <description>CubeCart 6.7.4 - Stored XSS</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52662</guid>
        </item>
         <item>
            <title>[webapps] CubeCart 6.7.4 - Cross-Site Scripting</title>
            <link>https://www.exploit-db.com/exploits/52661</link>
            <description>CubeCart 6.7.4 - Cross-Site Scripting</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52661</guid>
        </item>
         <item>
            <title>[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection</title>
            <link>https://www.exploit-db.com/exploits/52660</link>
            <description>Linksys E1200_2.0.04 - Unauthenticated OS Command Injection</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52660</guid>
        </item>
         <item>
            <title>[webapps] Langflow  1.8.4 - Path Traversal to Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52659</link>
            <description>Langflow  1.8.4 - Path Traversal to Remote Code Execution</description>
            <pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52659</guid>
        </item>
         <item>
            <title>[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE</title>
            <link>https://www.exploit-db.com/exploits/52658</link>
            <description>CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE</description>
            <pubDate>Tue, 25 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52658</guid>
        </item>
         <item>
            <title>[remote] PCMan 2.0.7 - Buffer Overflow</title>
            <link>https://www.exploit-db.com/exploits/52657</link>
            <description>PCMan 2.0.7 - Buffer Overflow</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52657</guid>
        </item>
         <item>
            <title>[dos] NanaZip 6.5  - DoS</title>
            <link>https://www.exploit-db.com/exploits/52656</link>
            <description>NanaZip 6.5  - DoS</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52656</guid>
        </item>
         <item>
            <title>[webapps] flyto-core 2.26.7 - Arbitrary File Write</title>
            <link>https://www.exploit-db.com/exploits/52655</link>
            <description>flyto-core 2.26.7 - Arbitrary File Write</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52655</guid>
        </item>
         <item>
            <title>[webapps] Nodemailer 9.0.0 - File Read/ SSRF</title>
            <link>https://www.exploit-db.com/exploits/52654</link>
            <description>Nodemailer 9.0.0 - File Read/ SSRF</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52654</guid>
        </item>
         <item>
            <title>[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF</title>
            <link>https://www.exploit-db.com/exploits/52653</link>
            <description>Linuxfabrik monitoring_plugins_6.0.0 - SSRF</description>
            <pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52653</guid>
        </item>
         <item>
            <title>[dos] NanaZip 6.5  -  DoS</title>
            <link>https://www.exploit-db.com/exploits/52652</link>
            <description>NanaZip 6.5  -  DoS</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52652</guid>
        </item>
         <item>
            <title>[webapps] flyto_core 2.26.7 - Server-Side Request Forgery</title>
            <link>https://www.exploit-db.com/exploits/52651</link>
            <description>flyto_core 2.26.7 - Server-Side Request Forgery</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52651</guid>
        </item>
         <item>
            <title>[webapps] Probo 0.222.2 -  IDOR</title>
            <link>https://www.exploit-db.com/exploits/52650</link>
            <description>Probo 0.222.2 -  IDOR</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52650</guid>
        </item>
         <item>
            <title>[webapps] webpack_devserver 5.2.5 -  CSRF</title>
            <link>https://www.exploit-db.com/exploits/52649</link>
            <description>webpack_devserver 5.2.5 -  CSRF</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52649</guid>
        </item>
         <item>
            <title>[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass</title>
            <link>https://www.exploit-db.com/exploits/52648</link>
            <description>phpSysInfo 3.4.5 - IP Allowlist Bypass</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52648</guid>
        </item>
         <item>
            <title>[dos] Nmap  7.99  - Extension Header Integer Underflow</title>
            <link>https://www.exploit-db.com/exploits/52647</link>
            <description>Nmap  7.99  - Extension Header Integer Underflow</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52647</guid>
        </item>
         <item>
            <title>[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak</title>
            <link>https://www.exploit-db.com/exploits/52646</link>
            <description>Duplicati 2.2.0.3 - JWT Signing Key Leak</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52646</guid>
        </item>
         <item>
            <title>[webapps] Joomla JCE_2.9.15 - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52645</link>
            <description>Joomla JCE_2.9.15 - Remote Code Execution</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52645</guid>
        </item>
         <item>
            <title>[remote] ipTIME A3004T  - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52644</link>
            <description>ipTIME A3004T  - Remote Code Execution</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52644</guid>
        </item>
         <item>
            <title>[remote] D-Link DNS_340L - OS Command Injection</title>
            <link>https://www.exploit-db.com/exploits/52643</link>
            <description>D-Link DNS_340L - OS Command Injection</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52643</guid>
        </item>
    </channel>
</rss>