| 2026-09-24 |
CVE-2026-87902 |
CVE-2026-87902 Exploit: WordPress Path Traversal RCE |
PoC |
|
| 2026-09-22 |
CVE-2026-60004 |
CVE-2026-60004 Exploit: Gitea RCE via Hook |
PoC |
|
| 2026-09-22 |
CVE-2026-53940 |
CVE-2026-53940 Exploit: Conda Entry-Point RCE |
PoC |
|
| 2026-09-17 |
CVE-2026-37266 |
CVE-2026-37266 Exploit: Responsive FileManager RCE |
PoC |
|
| 2026-09-15 |
CVE-2026-78159 |
CVE-2026-78159 Exploit: Events Calendar RCE |
PoC |
|
| 2026-09-15 |
CVE-2026-78006 |
CVE-2026-78006 Exploit: Events Calendar RCE |
PoC |
|
| 2026-09-11 |
CVE-2026-84647 |
CVE-2026-84647 Exploit: Jenkins Stapler Type Confusion |
PoC |
|
| 2026-09-10 |
CVE-2026-86730 |
CVE-2026-86730 Exploit: Craft CMS Auth RCE |
PoC |
|
| 2026-09-08 |
CVE-2026-83627 |
CVE-2026-83627 Exploit: Hummingbird RCE via Log |
PoC |
|
| 2026-09-08 |
CVE-2026-16723 |
CVE-2026-16723 Exploit: fastjson RCE |
PoC |
|
| 2026-09-07 |
CVE-2026-59313 |
CVE-2026-59313: Spring Framework - SSE CR/LF Injection |
PoC |
|
| 2026-09-07 |
CVE-2025-55182 |
CVE-2025-55182: React2Shell Pre-Auth RCE |
PoC |
|
| 2026-09-07 |
CVE-2026-55634 |
CVE-2026-55634: Pimcore - DataObject PHP Injection RCE |
PoC |
|
| 2026-08-29 |
CVE-2026-16639 |
CVE-2026-16639: Drupal i18n_sso Auth Bypass |
PoC |
|
| 2026-08-25 |
CVE-2026-10053 |
CVE-2026-10053: GitLab npm Path Traversal RCE |
PoC |
|
| 2026-08-25 |
CVE-2026-18963 |
CVE-2026-18963: Keycloak - Auth Bypass |
PoC |
|
| 2026-08-24 |
CVE-2026-77647 |
CVE-2026-77647: SPIP Pre-Auth RCE |
PoC |
|
| 2026-08-20 |
CVE-2026-75143 |
CVE-2026-75143: FFmpeg RIST Heap OOB Write |
PoC |
|
| 2026-08-20 |
CVE-2026-47686 |
CVE-2026-47686: vm2 Sandbox Escape - RCE |
PoC |
|
| 2026-08-15 |
CVE-2026-34486 |
CVE-2026-34486: Tomcat Tribes RCE |
PoC |
|
| 2026-08-13 |
CVE-2026-67282 |
CVE-2026-67282: Fabrik Unauthenticated RCE |
PoC |
|
| 2026-08-13 |
CVE-2026-18391 |
CVE-2026-18391: WooCommerce Subscriptions - RCE |
PoC |
|
| 2026-08-11 |
CVE-2026-66915 |
CVE-2026-66915: Fabrik Calc Element RCE |
PoC |
|
| 2026-08-11 |
CVE-2026-72899 |
CVE-2026-72899: Metabase Unauthenticated SQL Injection |
PoC |
|
| 2026-08-11 |
CVE-2025-24813 |
CVE-2025-24813: Apache Tomcat Partial PUT RCE |
PoC |
|
| 2026-08-10 |
CVE-2026-13001 |
CVE-2026-13001: Podlove Podcast Publisher RCE |
PoC |
|
| 2026-08-08 |
CVE-2026-14364 |
CVE-2026-14364: TrueBooker Auth Bypass |
PoC |
|
| 2026-08-07 |
CVE-2026-64638 |
CVE-2026-64638: WordPress XSS2Shell Pre-Auth RCE |
PoC |
|
| 2026-08-04 |
CVE-2026-42208 |
CVE-2026-42208: LiteLLM Pre-Auth SQL Injection |
PoC |
|
| 2026-08-04 |
CVE-2026-9082 |
CVE-2026-9082: Drupal SQL Injection |
PoC |
|
| 2026-08-04 |
CVE-2026-69251 |
CVE-2026-69251: Flowise Authenticated RCE |
PoC |
|
| 2026-08-01 |
CVE-2025-8110 |
CVE-2025-8110: Gogs Symlink-Following RCE |
PoC |
|
| 2026-07-30 |
CVE-2026-44966 |
CVE-2026-44966: Velocity.js Prototype Pollution |
PoC |
|
| 2026-07-28 |
CVE-2026-45668 |
CVE-2026-45668: Trilium Notes - RCE via Path Traversal |
PoC |
|
| 2026-07-24 |
CVE-2026-63030 |
CVE-2026-63030: WordPress wp2shell Pre-Auth RCE |
PoC |
|
| 2026-07-22 |
CVE-2026-47668 |
CVE-2026-47668: DbGate Unauthenticated RCE |
PoC |
|
| 2026-05-08 |
CVE-2026-37709 |
CVE-2026-37709: Snipe-IT - Auth Bypass |
PoC |
|
| 2026-01-26 |
CVE-2026-24061 |
CVE-2026-24061: GNU Inetutils - Auth Bypass |
PoC |
|
