Exploit Database

Exploit Database advisories Sep 11

[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE

CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.

1 IOC

Exploit Database → Details

Exploit Database advisories Sep 3

[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution

Metabase 0.61.

T1190

Exploit Database → Details

Exploit Database advisories Sep 3

[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)

FreePBX 17.0.

T1190

Exploit Database → Details

Exploit Database advisories Sep 2

[webapps] PodcastGenerator 3.2.9 - Stored XSS

PodcastGenerator 3.2.

Exploit Database → Details

Exploit Database advisories Sep 2

[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

Ghost_CMS 6.19.

T1190

Exploit Database → Details

Exploit Database advisories Sep 2

[webapps] Langflow 1.10.0 - RCE

Langflow 1.10.

Exploit Database → Details

Exploit Database advisories Sep 2

[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities

Fullhan FH8626V100 - Multiple Vulnerabilities

Exploit Database → Details

Exploit Database advisories Sep 2

[webapps] Marimo 0.20.4 - RCE

Marimo 0.20.

Exploit Database → Details

Exploit Database advisories Sep 2

[dos] EVerest 2025.9.0 - DoS

EVerest 2025.9.

Exploit Database → Details

Exploit Database advisories Sep 2

[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

Bludit CMS 3.20.

Exploit Database → Details

Exploit Database advisories Sep 1

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

miniOrange 5.4.

T1556

Exploit Database → Details

Exploit Database advisories Sep 1

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection

EasyAppointments 1.5.

Exploit Database → Details

Exploit Database advisories Sep 1

[webapps] Payload CMS 3.72.0 - Blind SQL Injection

Payload CMS 3.72.

Exploit Database → Details

Exploit Database advisories Sep 1

[webapps] Bludit CMS - Stored XSS

Bludit CMS - Stored XSS

Exploit Database → Details

Exploit Database advisories Sep 1

[webapps] Grav CMS 2.0.7 - RCE

Grav CMS 2.0.

Exploit Database → Details

Exploit Database advisories Sep 1

[webapps] Wolf CMS 0.8.3.1 - RCE v

Wolf CMS 0.8.

1 IOC

Exploit Database → Details

Exploit Database advisories Aug 31

[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

Linksys E1200_2.0.

T1059

Exploit Database → Details

Exploit Database advisories Aug 31

[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution

Langflow 1.8.

T1190

Exploit Database → Details

Exploit Database advisories Aug 31

[webapps] CubeCart 6.7.4 - SQL injection

CubeCart 6.7.

T1598

Exploit Database → Details

Exploit Database advisories Aug 31

[webapps] CubeCart 6.7.4 - SQL

CubeCart 6.7.

T1598

Exploit Database → Details