core-jmp core-jmpdeath of core jump
Home/Exploits Pulse

Exploits Pulse

0x04 // Latest Exploits

source: Exploit-DB →
Type EDB-ID CVE Platform Exploit Published
WebApps EDB-52666 CVE-2026-51134 multiple C-MOR 6.0104 - Directory Traversal Aug 31, 2026
WebApps EDB-52665 CVE-2026-51133 hardware C-MOR 6.0104 - Cross-Site Scripting (XSS) Aug 31, 2026
WebApps EDB-52664 CVE-2026-54647 multiple CubeCart 6.7.4 - SQL injection Aug 31, 2026
WebApps EDB-52663 CVE-2026-54646 multiple CubeCart 6.7.4 - SQL Aug 31, 2026
WebApps EDB-52662 CVE-2026-54645 multiple CubeCart 6.7.4 - Stored XSS Aug 31, 2026
WebApps EDB-52661 CVE-2026-54644 multiple CubeCart 6.7.4 - Cross-Site Scripting Aug 31, 2026
WebApps EDB-52660 CVE-2025-60689 hardware Linksys E1200_2.0.04 - Unauthenticated OS Command Injection Aug 31, 2026
WebApps EDB-52659 CVE-2026-5027 multiple Langflow 1.8.4 - Path Traversal to Remote Code Execution Aug 31, 2026
Remote EDB-52658 CVE-2026-42167 multiple CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE Aug 25, 2026
Remote EDB-52657 CVE-2025-4871 windows PCMan 2.0.7 - Buffer Overflow Aug 18, 2026
DoS EDB-52656 — multiple NanaZip 6.5 - DoS Aug 18, 2026
WebApps EDB-52655 — multiple flyto-core 2.26.7 - Arbitrary File Write Aug 18, 2026
WebApps EDB-52654 — multiple Nodemailer 9.0.0 - File Read/ SSRF Aug 18, 2026
WebApps EDB-52653 — multiple Linuxfabrik monitoring_plugins_6.0.0 - SSRF Aug 18, 2026
DoS EDB-52652 CVE-2026-55780 windows NanaZip 6.5 - DoS Aug 17, 2026
WebApps EDB-52651 — multiple flyto_core 2.26.7 - Server-Side Request Forgery Aug 17, 2026
WebApps EDB-52650 CVE-2026-63505 multiple Probo 0.222.2 - IDOR Aug 17, 2026
WebApps EDB-52649 CVE-2026-14620 multiple webpack_devserver 5.2.5 - CSRF Aug 17, 2026
Remote EDB-52648 CVE-2026-55584 linux phpSysInfo 3.4.5 - IP Allowlist Bypass Aug 17, 2026
DoS EDB-52647 CVE-2026-58058 multiple Nmap 7.99 - Extension Header Integer Underflow Aug 17, 2026
WebApps EDB-52646 — multiple Duplicati 2.2.0.3 - JWT Signing Key Leak Aug 17, 2026
WebApps EDB-52645 CVE-2026-48907 multiple Joomla JCE_2.9.15 - Remote Code Execution Aug 17, 2026
Remote EDB-52644 — multiple ipTIME A3004T - Remote Code Execution Aug 17, 2026
Remote EDB-52643 CVE-2024-10914 hardware D-Link DNS_340L - OS Command Injection Aug 17, 2026
WebApps EDB-52642 CVE-2026-3891 multiple WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload Aug 17, 2026
WebApps EDB-52641 — multiple Apache Gravitino 1.2.1 - SSRF Aug 11, 2026
WebApps EDB-52640 CVE-2026-58480 multiple Blocksy Companion 2.1.46 - RCE Aug 11, 2026
Remote EDB-52639 CVE-2026-61447 multiple PraisonAI praisonaiagents 1.6.77 - Remote Code Execution Aug 11, 2026
Remote EDB-52638 CVE-2026-61459 multiple mcp-server-kubernetes 3.8.x - Argument Injection Aug 11, 2026
DoS EDB-52637 CVE-2026-61876 multiple LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting Aug 11, 2026
WebApps EDB-52636 CVE-2026-3576 multiple Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF Aug 11, 2026
WebApps EDB-52635 — multiple Ray 2.56.0 - Directory Traversal & Local File Inclusion Aug 11, 2026
WebApps EDB-52633 CVE-2026-58138 multiple OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution Aug 10, 2026
Local EDB-52632 CVE-2026-58289 multiple Microsoft Edge 150.0.4078.48 - RCE Aug 10, 2026
WebApps EDB-52631 — multiple CorgetGpsDget 2_3.2 - OS Command Injection Aug 10, 2026
WebApps EDB-52630 CVE-2026-48907 multiple Joomla 2.9.99.4 - Unauthenticated Remote Code Execution Aug 10, 2026
WebApps EDB-52629 CVE-2026-38526 multiple Krayin CRM v2.2.x - Authenticated Remote Code Execution Jul 8, 2026
WebApps EDB-52628 CVE-2025-60188 multiple Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Jul 8, 2026
WebApps EDB-52627 CVE-2026-33017 multiple Langflow 1.9.0 - RCE Jul 8, 2026
WebApps EDB-52626 CVE-2026-56290 multiple Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Jul 8, 2026
WebApps EDB-52625 CVE-2026-23744 multiple MCPJam Inspector - Remote Code Execution Jul 7, 2026
Local EDB-52624 — windows ProtonVPN v4.4.1 - Unquoted Service Path Jul 7, 2026
WebApps EDB-52623 CVE-2026-58057 multiple Flowise 3.1.3 - arbitrary code execution Jul 7, 2026
Remote EDB-52622 CVE-2026-56766 linux Hydra - Stack Buffer Overflow Jul 7, 2026
WebApps EDB-52621 CVE-2026-49952 multiple Discuz! X5.0 - Authentication Bypass Jul 7, 2026
WebApps EDB-52620 CVE-2026-57588 multiple Tenable Nessus 10.12.1 - SQL Injection Jul 7, 2026
WebApps EDB-52619 CVE-2024-25600 multiple WordPress Bricks Builder Theme - RCE Jul 7, 2026
Remote EDB-52618 — ios iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter Jul 7, 2026
WebApps EDB-52617 CVE-2026-48909 php Joomla Extension 4.1.4 - PHP Object injection Jul 6, 2026
WebApps EDB-52616 CVE-2026-44225 multiple Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass Jul 6, 2026
Local EDB-52615 CVE-2026-36213 windows MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation Jul 6, 2026
WebApps EDB-52614 CVE-2026-9271 multiple KeepInMind 0.8.4.2 - Stored XSS Jul 6, 2026
WebApps EDB-52613 — multiple KNX visualisering - Broken Access Control Jul 6, 2026
Local EDB-52612 — windows Windows Defender (MsMpEng.exe) - Race Condition Jul 6, 2026
WebApps EDB-52611 CVE-2026-49069 multiple WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Jul 6, 2026
WebApps EDB-52610 CVE-2026-24849 multiple OpenEMR 7.0.2 - Arbitrary File Read Jun 8, 2026
WebApps EDB-52609 CVE-2026-3180 multiple WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection Jun 5, 2026
WebApps EDB-52608 CVE-2026-9082 php Drupal Core 10.5.5 - Error-Based SQL Injection Jun 1, 2026
WebApps EDB-52607 CVE-2025-10162 multiple WordPress OrderConvo 14 - Path Traversal Jun 1, 2026
Remote EDB-52606 CVE-2026-48778 windows Notepad++ 8.9.6 - Arbitrary Code Execution May 30, 2026
WebApps EDB-52605 CVE-2026-44596 multiple YAMCS yamcs-core 5.12.7 - No Rate Limiting May 30, 2026
WebApps EDB-52604 CVE-2026-44595 multiple YAMCS yamcs-core 5.12.7 - User Enumeration May 30, 2026
WebApps EDB-52603 CVE-2026-42568 multiple YAMCS yamcs-core 5.12.7 - LDAP Injection May 30, 2026
Remote EDB-52601 CVE-2026-32202 windows Microsoft - NTLMv2 Hash Capture May 29, 2026
WebApps EDB-52600 CVE-2026-44680 multiple MikroORM 7.0.13 - SQL Injection May 29, 2026
WebApps EDB-52598 CVE-2026-0926 multiple Prodigy Commerce 3.3.0 - Local File Inclusion May 29, 2026
WebApps EDB-52597 CVE-2026-0770 multiple Langflow 1.3.0 - Remote Code Execution May 29, 2026
WebApps EDB-52596 CVE-2026-1830 multiple Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution May 29, 2026
Local EDB-52595 CVE-2026-46522 multiple ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion May 29, 2026
Local EDB-52594 CVE-2026-34473 multiple ZTE Routers - Unauthenticated Denial of Service May 29, 2026
Local EDB-52593 CVE-2026-34472 multiple ZTE ZXHN H188A V6 - Authentication Bypass May 29, 2026
Local EDB-52592 CVE-2026-34474 multiple ZTE H298A / H108N - Unauthenticated Credential Exposure May 29, 2026
Local EDB-52591 CVE-2026-46300 linux Linux Kernel - Local Privilege Escalation May 29, 2026
WebApps EDB-52590 CVE-2026-42471 php MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution May 29, 2026
Remote EDB-52589 CVE-2026-44403 multiple Wing FTP Server 8.1.3 - Authenticated Remote Code Execution May 29, 2026
WebApps EDB-52588 CVE-2026-44376 multiple CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) May 29, 2026
Remote EDB-52587 CVE-2026-35330 multiple strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow May 29, 2026
DoS EDB-52586 CVE-2026-35333 multiple strongSwan 5.9.13 - DoS May 29, 2026
Local EDB-52585 CVE-2026-43500 linux Linux Kernel - Local Privilege Escalation May 27, 2026
WebApps EDB-52584 CVE-2026-6815 go Casdoor 3.54.1 - Arbitrary File Write via Path Traversal May 27, 2026
WebApps EDB-52583 CVE-2026-33534 multiple EspoCRM 9.3.3 - SSRF May 27, 2026
WebApps EDB-52582 CVE-2026-44262 php scramble - Remote Code Execution May 27, 2026
Hardware EDB-52581 CVE-2026-36356 linux MeiG Smart FORGE_SLT711 - OS Command Injection May 27, 2026
Local EDB-52580 CVE-2026-36355 linux Realtek rtl819x - Local Privilege May 27, 2026
WebApps EDB-52579 — multiple OpenCATS 0.9.7.4 - SQL Injection May 27, 2026
WebApps EDB-52578 CVE-2026-42607 php Grav CMS 2.0.0-beta.2 - Remote Code Execution May 26, 2026
WebApps EDB-52577 CVE-2026-23918 multiple Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service May 26, 2026
Hardware EDB-52576 — multiple D-Link DSL2600U - 'rom-0' Admin Password Disclosure May 26, 2026
WebApps EDB-52575 CVE-2026-7567 multiple Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover May 26, 2026
WebApps EDB-52574 CVE-2026-41940 php cPanel - CRLF Injection May 26, 2026
Local EDB-52573 — linux Linux Kernel 6.8 - Local Privilege Escalation May 26, 2026
WebApps EDB-52572 CVE-2026-4631 multiple Cockpit 359 - RCE May 21, 2026
WebApps EDB-52571 — multiple BookStack 25.12.1 - Denial of Service May 21, 2026
Local EDB-52570 — windows Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path May 21, 2026
WebApps EDB-52569 — multiple solaredge - (CSRF-OOB-Injection) May 21, 2026
WebApps EDB-52568 CVE-2026-25895 multiple FUXA 1.2.9 - RCE May 21, 2026
Local EDB-52567 CVE-2026-33829 windows Windows Snipping Tool - NTLMv2 Hash Hijack May 15, 2026
Local EDB-52566 — windows Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing May 15, 2026
Local EDB-52565 — windows Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution May 15, 2026
WebApps EDB-52564 CVE-2026-4257 multiple WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI May 14, 2026