core-jmp core-jmpdeath of core jump
Home/Exploits Pulse

Exploits Pulse

0x04 // Latest Exploits

source: Exploit-DB →
Type EDB-ID CVE Platform Exploit Published
Remote EDB-52692 — hardware Teltonika_RutOS 00.07.06.21 - command injection Oct 1, 2026
WebApps EDB-52691 — multiple TigerGraph_Community_Edition 4.2.4 - arbitrary file write Oct 1, 2026
WebApps EDB-52690 CVE-2026-87902 multiple WordPress 7.0.2 - Path Travesal Oct 1, 2026
WebApps EDB-52689 — multiple Food-Ordering 1.0 - LFI Oct 1, 2026
Remote EDB-52688 — windows Ecava_ntegraXor IGX_16.0.701.10 - RCE Oct 1, 2026
WebApps EDB-52687 CVE-2026-100885 multiple Krayin CRM 2.2.4 - IDOR Oct 1, 2026
WebApps EDB-52686 CVE-2026-69137 multiple SuiteCRM 8.10.1 - Authenticated SSRF Oct 1, 2026
WebApps EDB-52685 CVE-2026-40297 multiple InvoicePlane 1.7.1 - RCE Oct 1, 2026
WebApps EDB-52684 — multiple POMS oretnom23v1.0 - SQLi vulnerabilities Oct 1, 2026
Remote EDB-52683 CVE-2026-86060 multiple MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 - RCE Sep 24, 2026
Remote EDB-52682 CVE-2026-80428 multiple CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 - RCE Sep 11, 2026
WebApps EDB-52681 CVE-2025-57819 multiple FreePBX 17.0.2 - Remote Code Execution (RCE) Sep 3, 2026
WebApps EDB-52680 CVE-2026-59827 multiple Metabase 0.61.0 - Authenticated Remote Code Execution Sep 3, 2026
DoS EDB-52679 CVE-2025-68137 multiple EVerest 2025.9.0 - DoS Sep 2, 2026
WebApps EDB-52678 CVE-2026-41456 multiple Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Sep 2, 2026
WebApps EDB-52677 CVE-2025-70336 multiple PodcastGenerator 3.2.9 - Stored XSS Sep 2, 2026
WebApps EDB-52676 CVE-2026-29053 multiple Ghost_CMS 6.19.0 - Remote Code Execution Sep 2, 2026
WebApps EDB-52675 CVE-2026-9198 multiple Langflow 1.10.0 - RCE Sep 2, 2026
Hardware EDB-52674 CVE-2026-51407 multiple Fullhan FH8626V100 - Multiple Vulnerabilities Sep 2, 2026
WebApps EDB-52673 CVE-2026-39987 multiple Marimo 0.20.4 - RCE Sep 2, 2026
WebApps EDB-52672 CVE-2026-67206 multiple Wolf CMS 0.8.3.1 - RCE v Sep 1, 2026
WebApps EDB-52671 CVE-2026-25544 multiple Payload CMS 3.72.0 - Blind SQL Injection Sep 1, 2026
WebApps EDB-52670 — multiple Bludit CMS - Stored XSS Sep 1, 2026
WebApps EDB-52669 CVE-2026-65008 multiple Grav CMS 2.0.7 - RCE Sep 1, 2026
WebApps EDB-52668 CVE-2026-15013 multiple miniOrange 5.4.3 - Unauthenticated Auth Bypass Sep 1, 2026
WebApps EDB-52667 CVE-2025-50455 multiple EasyAppointments 1.5.1 - Blind SQL Injection Sep 1, 2026
WebApps EDB-52666 CVE-2026-51134 multiple C-MOR 6.0104 - Directory Traversal Aug 31, 2026
WebApps EDB-52665 CVE-2026-51133 hardware C-MOR 6.0104 - Cross-Site Scripting (XSS) Aug 31, 2026
WebApps EDB-52664 CVE-2026-54647 multiple CubeCart 6.7.4 - SQL injection Aug 31, 2026
WebApps EDB-52663 CVE-2026-54646 multiple CubeCart 6.7.4 - SQL Aug 31, 2026
WebApps EDB-52662 CVE-2026-54645 multiple CubeCart 6.7.4 - Stored XSS Aug 31, 2026
WebApps EDB-52661 CVE-2026-54644 multiple CubeCart 6.7.4 - Cross-Site Scripting Aug 31, 2026
WebApps EDB-52660 CVE-2025-60689 hardware Linksys E1200_2.0.04 - Unauthenticated OS Command Injection Aug 31, 2026
WebApps EDB-52659 CVE-2026-5027 multiple Langflow 1.8.4 - Path Traversal to Remote Code Execution Aug 31, 2026
Remote EDB-52658 CVE-2026-42167 multiple CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE Aug 25, 2026
Remote EDB-52657 CVE-2025-4871 windows PCMan 2.0.7 - Buffer Overflow Aug 18, 2026
DoS EDB-52656 — multiple NanaZip 6.5 - DoS Aug 18, 2026
WebApps EDB-52655 — multiple flyto-core 2.26.7 - Arbitrary File Write Aug 18, 2026
WebApps EDB-52654 — multiple Nodemailer 9.0.0 - File Read/ SSRF Aug 18, 2026
WebApps EDB-52653 — multiple Linuxfabrik monitoring_plugins_6.0.0 - SSRF Aug 18, 2026
DoS EDB-52652 CVE-2026-55780 windows NanaZip 6.5 - DoS Aug 17, 2026
WebApps EDB-52651 — multiple flyto_core 2.26.7 - Server-Side Request Forgery Aug 17, 2026
WebApps EDB-52650 CVE-2026-63505 multiple Probo 0.222.2 - IDOR Aug 17, 2026
WebApps EDB-52649 CVE-2026-14620 multiple webpack_devserver 5.2.5 - CSRF Aug 17, 2026
Remote EDB-52648 CVE-2026-55584 linux phpSysInfo 3.4.5 - IP Allowlist Bypass Aug 17, 2026
DoS EDB-52647 CVE-2026-58058 multiple Nmap 7.99 - Extension Header Integer Underflow Aug 17, 2026
WebApps EDB-52646 — multiple Duplicati 2.2.0.3 - JWT Signing Key Leak Aug 17, 2026
WebApps EDB-52645 CVE-2026-48907 multiple Joomla JCE_2.9.15 - Remote Code Execution Aug 17, 2026
Remote EDB-52644 — multiple ipTIME A3004T - Remote Code Execution Aug 17, 2026
Remote EDB-52643 CVE-2024-10914 hardware D-Link DNS_340L - OS Command Injection Aug 17, 2026
WebApps EDB-52642 CVE-2026-3891 multiple WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload Aug 17, 2026
WebApps EDB-52641 — multiple Apache Gravitino 1.2.1 - SSRF Aug 11, 2026
WebApps EDB-52640 CVE-2026-58480 multiple Blocksy Companion 2.1.46 - RCE Aug 11, 2026
Remote EDB-52639 CVE-2026-61447 multiple PraisonAI praisonaiagents 1.6.77 - Remote Code Execution Aug 11, 2026
Remote EDB-52638 CVE-2026-61459 multiple mcp-server-kubernetes 3.8.x - Argument Injection Aug 11, 2026
DoS EDB-52637 CVE-2026-61876 multiple LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting Aug 11, 2026
WebApps EDB-52636 CVE-2026-3576 multiple Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF Aug 11, 2026
WebApps EDB-52635 — multiple Ray 2.56.0 - Directory Traversal & Local File Inclusion Aug 11, 2026
WebApps EDB-52633 CVE-2026-58138 multiple OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution Aug 10, 2026
Local EDB-52632 CVE-2026-58289 multiple Microsoft Edge 150.0.4078.48 - RCE Aug 10, 2026
WebApps EDB-52631 — multiple CorgetGpsDget 2_3.2 - OS Command Injection Aug 10, 2026
WebApps EDB-52630 CVE-2026-48907 multiple Joomla 2.9.99.4 - Unauthenticated Remote Code Execution Aug 10, 2026
WebApps EDB-52629 CVE-2026-38526 multiple Krayin CRM v2.2.x - Authenticated Remote Code Execution Jul 8, 2026
WebApps EDB-52628 CVE-2025-60188 multiple Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Jul 8, 2026
WebApps EDB-52627 CVE-2026-33017 multiple Langflow 1.9.0 - RCE Jul 8, 2026
WebApps EDB-52626 CVE-2026-56290 multiple Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Jul 8, 2026
WebApps EDB-52625 CVE-2026-23744 multiple MCPJam Inspector - Remote Code Execution Jul 7, 2026
Local EDB-52624 — windows ProtonVPN v4.4.1 - Unquoted Service Path Jul 7, 2026
WebApps EDB-52623 CVE-2026-58057 multiple Flowise 3.1.3 - arbitrary code execution Jul 7, 2026
Remote EDB-52622 CVE-2026-56766 linux Hydra - Stack Buffer Overflow Jul 7, 2026
WebApps EDB-52621 CVE-2026-49952 multiple Discuz! X5.0 - Authentication Bypass Jul 7, 2026
WebApps EDB-52620 CVE-2026-57588 multiple Tenable Nessus 10.12.1 - SQL Injection Jul 7, 2026
WebApps EDB-52619 CVE-2024-25600 multiple WordPress Bricks Builder Theme - RCE Jul 7, 2026
Remote EDB-52618 — ios iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter Jul 7, 2026
WebApps EDB-52617 CVE-2026-48909 php Joomla Extension 4.1.4 - PHP Object injection Jul 6, 2026
WebApps EDB-52616 CVE-2026-44225 multiple Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass Jul 6, 2026
Local EDB-52615 CVE-2026-36213 windows MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation Jul 6, 2026
WebApps EDB-52614 CVE-2026-9271 multiple KeepInMind 0.8.4.2 - Stored XSS Jul 6, 2026
WebApps EDB-52613 — multiple KNX visualisering - Broken Access Control Jul 6, 2026
Local EDB-52612 — windows Windows Defender (MsMpEng.exe) - Race Condition Jul 6, 2026
WebApps EDB-52611 CVE-2026-49069 multiple WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Jul 6, 2026
WebApps EDB-52610 CVE-2026-24849 multiple OpenEMR 7.0.2 - Arbitrary File Read Jun 8, 2026
WebApps EDB-52609 CVE-2026-3180 multiple WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection Jun 5, 2026
WebApps EDB-52608 CVE-2026-9082 php Drupal Core 10.5.5 - Error-Based SQL Injection Jun 1, 2026
WebApps EDB-52607 CVE-2025-10162 multiple WordPress OrderConvo 14 - Path Traversal Jun 1, 2026
Remote EDB-52606 CVE-2026-48778 windows Notepad++ 8.9.6 - Arbitrary Code Execution May 30, 2026
WebApps EDB-52605 CVE-2026-44596 multiple YAMCS yamcs-core 5.12.7 - No Rate Limiting May 30, 2026
WebApps EDB-52604 CVE-2026-44595 multiple YAMCS yamcs-core 5.12.7 - User Enumeration May 30, 2026
WebApps EDB-52603 CVE-2026-42568 multiple YAMCS yamcs-core 5.12.7 - LDAP Injection May 30, 2026
Remote EDB-52601 CVE-2026-32202 windows Microsoft - NTLMv2 Hash Capture May 29, 2026
WebApps EDB-52600 CVE-2026-44680 multiple MikroORM 7.0.13 - SQL Injection May 29, 2026
WebApps EDB-52598 CVE-2026-0926 multiple Prodigy Commerce 3.3.0 - Local File Inclusion May 29, 2026
WebApps EDB-52597 CVE-2026-0770 multiple Langflow 1.3.0 - Remote Code Execution May 29, 2026
WebApps EDB-52596 CVE-2026-1830 multiple Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution May 29, 2026
Local EDB-52595 CVE-2026-46522 multiple ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion May 29, 2026
Local EDB-52594 CVE-2026-34473 multiple ZTE Routers - Unauthenticated Denial of Service May 29, 2026
Local EDB-52593 CVE-2026-34472 multiple ZTE ZXHN H188A V6 - Authentication Bypass May 29, 2026
Local EDB-52592 CVE-2026-34474 multiple ZTE H298A / H108N - Unauthenticated Credential Exposure May 29, 2026
Local EDB-52591 CVE-2026-46300 linux Linux Kernel - Local Privilege Escalation May 29, 2026
WebApps EDB-52590 CVE-2026-42471 php MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution May 29, 2026