core-jmp core-jmpdeath of core jump
Home/Exploits Pulse

Exploits Pulse

0x04 // Latest Exploits

source: Exploit-DB →
Type EDB-ID CVE Platform Exploit Published
WebApps EDB-52629 CVE-2026-38526 multiple Krayin CRM v2.2.x - Authenticated Remote Code Execution Jul 8, 2026
WebApps EDB-52628 CVE-2025-60188 multiple Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Jul 8, 2026
WebApps EDB-52627 CVE-2026-33017 multiple Langflow 1.9.0 - RCE Jul 8, 2026
WebApps EDB-52626 CVE-2026-56290 multiple Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Jul 8, 2026
WebApps EDB-52625 CVE-2026-23744 multiple MCPJam Inspector - Remote Code Execution Jul 7, 2026
Local EDB-52624 — windows ProtonVPN v4.4.1 - Unquoted Service Path Jul 7, 2026
WebApps EDB-52623 CVE-2026-58057 multiple Flowise 3.1.3 - arbitrary code execution Jul 7, 2026
Remote EDB-52622 CVE-2026-56766 linux Hydra - Stack Buffer Overflow Jul 7, 2026
WebApps EDB-52621 CVE-2026-49952 multiple Discuz! X5.0 - Authentication Bypass Jul 7, 2026
WebApps EDB-52620 CVE-2026-57588 multiple Tenable Nessus 10.12.1 - SQL Injection Jul 7, 2026
WebApps EDB-52619 CVE-2024-25600 multiple WordPress Bricks Builder Theme - RCE Jul 7, 2026
Remote EDB-52618 — ios iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter Jul 7, 2026
WebApps EDB-52617 CVE-2026-48909 php Joomla Extension 4.1.4 - PHP Object injection Jul 6, 2026
WebApps EDB-52616 CVE-2026-44225 multiple Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass Jul 6, 2026
Local EDB-52615 CVE-2026-36213 windows MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation Jul 6, 2026
WebApps EDB-52614 CVE-2026-9271 multiple KeepInMind 0.8.4.2 - Stored XSS Jul 6, 2026
WebApps EDB-52613 — multiple KNX visualisering - Broken Access Control Jul 6, 2026
Local EDB-52612 — windows Windows Defender (MsMpEng.exe) - Race Condition Jul 6, 2026
WebApps EDB-52611 CVE-2026-49069 multiple WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Jul 6, 2026
WebApps EDB-52610 CVE-2026-24849 multiple OpenEMR 7.0.2 - Arbitrary File Read Jun 8, 2026
WebApps EDB-52609 CVE-2026-3180 multiple WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection Jun 5, 2026
WebApps EDB-52608 CVE-2026-9082 php Drupal Core 10.5.5 - Error-Based SQL Injection Jun 1, 2026
WebApps EDB-52607 CVE-2025-10162 multiple WordPress OrderConvo 14 - Path Traversal Jun 1, 2026
Remote EDB-52606 CVE-2026-48778 windows Notepad++ 8.9.6 - Arbitrary Code Execution May 30, 2026
WebApps EDB-52605 CVE-2026-44596 multiple YAMCS yamcs-core 5.12.7 - No Rate Limiting May 30, 2026
WebApps EDB-52604 CVE-2026-44595 multiple YAMCS yamcs-core 5.12.7 - User Enumeration May 30, 2026
WebApps EDB-52603 CVE-2026-42568 multiple YAMCS yamcs-core 5.12.7 - LDAP Injection May 30, 2026
Remote EDB-52601 CVE-2026-32202 windows Microsoft - NTLMv2 Hash Capture May 29, 2026
WebApps EDB-52600 CVE-2026-44680 multiple MikroORM 7.0.13 - SQL Injection May 29, 2026
WebApps EDB-52598 CVE-2026-0926 multiple Prodigy Commerce 3.3.0 - Local File Inclusion May 29, 2026
WebApps EDB-52597 CVE-2026-0770 multiple Langflow 1.3.0 - Remote Code Execution May 29, 2026
WebApps EDB-52596 CVE-2026-1830 multiple Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution May 29, 2026
Local EDB-52595 CVE-2026-46522 multiple ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion May 29, 2026
Local EDB-52594 CVE-2026-34473 multiple ZTE Routers - Unauthenticated Denial of Service May 29, 2026
Local EDB-52593 CVE-2026-34472 multiple ZTE ZXHN H188A V6 - Authentication Bypass May 29, 2026
Local EDB-52592 CVE-2026-34474 multiple ZTE H298A / H108N - Unauthenticated Credential Exposure May 29, 2026
Local EDB-52591 CVE-2026-46300 linux Linux Kernel - Local Privilege Escalation May 29, 2026
WebApps EDB-52590 CVE-2026-42471 php MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution May 29, 2026
Remote EDB-52589 CVE-2026-44403 multiple Wing FTP Server 8.1.3 - Authenticated Remote Code Execution May 29, 2026
WebApps EDB-52588 CVE-2026-44376 multiple CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) May 29, 2026
Remote EDB-52587 CVE-2026-35330 multiple strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow May 29, 2026
DoS EDB-52586 CVE-2026-35333 multiple strongSwan 5.9.13 - DoS May 29, 2026
Local EDB-52585 CVE-2026-43500 linux Linux Kernel - Local Privilege Escalation May 27, 2026
WebApps EDB-52584 CVE-2026-6815 go Casdoor 3.54.1 - Arbitrary File Write via Path Traversal May 27, 2026
WebApps EDB-52583 CVE-2026-33534 multiple EspoCRM 9.3.3 - SSRF May 27, 2026
WebApps EDB-52582 CVE-2026-44262 php scramble - Remote Code Execution May 27, 2026
Hardware EDB-52581 CVE-2026-36356 linux MeiG Smart FORGE_SLT711 - OS Command Injection May 27, 2026
Local EDB-52580 CVE-2026-36355 linux Realtek rtl819x - Local Privilege May 27, 2026
WebApps EDB-52579 — multiple OpenCATS 0.9.7.4 - SQL Injection May 27, 2026
WebApps EDB-52578 CVE-2026-42607 php Grav CMS 2.0.0-beta.2 - Remote Code Execution May 26, 2026
WebApps EDB-52577 CVE-2026-23918 multiple Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service May 26, 2026
Hardware EDB-52576 — multiple D-Link DSL2600U - 'rom-0' Admin Password Disclosure May 26, 2026
WebApps EDB-52575 CVE-2026-7567 multiple Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover May 26, 2026
WebApps EDB-52574 CVE-2026-41940 php cPanel - CRLF Injection May 26, 2026
Local EDB-52573 — linux Linux Kernel 6.8 - Local Privilege Escalation May 26, 2026
WebApps EDB-52572 CVE-2026-4631 multiple Cockpit 359 - RCE May 21, 2026
WebApps EDB-52571 — multiple BookStack 25.12.1 - Denial of Service May 21, 2026
Local EDB-52570 — windows Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path May 21, 2026
WebApps EDB-52569 — multiple solaredge - (CSRF-OOB-Injection) May 21, 2026
WebApps EDB-52568 CVE-2026-25895 multiple FUXA 1.2.9 - RCE May 21, 2026
Local EDB-52567 CVE-2026-33829 windows Windows Snipping Tool - NTLMv2 Hash Hijack May 15, 2026
Local EDB-52566 — windows Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing May 15, 2026
Local EDB-52565 — windows Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution May 15, 2026
WebApps EDB-52564 CVE-2026-4257 multiple WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI May 14, 2026
WebApps EDB-52563 — multiple Apache HertzBeat 1.8.0 - Remote Code Execution May 14, 2026
WebApps EDB-52562 CVE-2026-2624 multiple ePati Antikor NGFW 2.0.1301 - Authentication Bypass May 14, 2026
WebApps EDB-52561 CVE-2026-25994 multiple PJPROJECT 2.16 - Heap Bufferoverflow May 14, 2026
WebApps EDB-52560 CVE-2026-0740 multiple Ninja Forms Uploads - Unauthenticated PHP File Upload May 13, 2026
WebApps EDB-52559 CVE-2026-33641 multiple glances 4.5.2 - command injection May 13, 2026
WebApps EDB-52558 CVE-2026-21876 multiple coreruleset 4.21.0 - Firewall Bypass May 13, 2026
WebApps EDB-52557 CVE-2025-58434 typescript Flowise < 3.0.5 - Missing Authentication for Critical Function May 13, 2026
Remote EDB-52556 CVE-2026-32746 multiple telnetd 2.7 - Buffer Overflow May 7, 2026
WebApps EDB-52555 CVE-2026-26980 multiple Ghost CMS 6.19.0 - SQLi May 7, 2026
WebApps EDB-52554 — multiple LuaJIT 2.1.1774638290 - Arbitrary Code Execution May 7, 2026
WebApps EDB-52553 CVE-2026-25099 multiple Bludit CMS 3.18.4 - RCE May 7, 2026
Local EDB-52552 CVE-2026-34156 multiple NocoBase 2.0.27 - VM Sandbox Escape May 7, 2026
WebApps EDB-52551 CVE-2025-34282 multiple ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF) May 7, 2026
Local EDB-52550 CVE-2025-40271 linux Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation May 4, 2026
Local EDB-52549 CVE-2026-23231 linux Linux nf_tables 6.19.3 - Local Privilege Escalation May 4, 2026
Hardware EDB-52548 CVE-2025-60690 multiple Linksys E1200 2.0.04 - Authenticated Stack Buffer Overflow (RCE) May 4, 2026
WebApps EDB-52547 CVE-2026-27483 multiple MindsDB 25.9.1.1 - Path Traversal May 4, 2026
Local EDB-52546 CVE-2026-21250 windows Windows 11 24H2 - Local Privilege Escalation May 4, 2026
WebApps EDB-52545 CVE-2025-68930 multiple Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH) May 4, 2026
WebApps EDB-52544 CVE-2025-69985 multiple FUXA 1.2.8 - Authentication Bypass + RCE Exploit Apr 30, 2026
WebApps EDB-52543 CVE-2026-24486 python Python-Multipart 0.0.22 - Path Traversal Apr 30, 2026
Local EDB-52542 CVE-2026-2441 multiple Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap Apr 30, 2026
Local EDB-52541 CVE-2025-47987 windows Windows 11 23H2 - Denial of Service (DoS) Apr 30, 2026
WebApps EDB-52540 CVE-2026-26335 multiple Repetier-Server 1.4.10 - Path Traversal Apr 30, 2026
WebApps EDB-52539 CVE-2026-24479 multiple HUSTOJ Zip-Slip v26.01.24 - RCE Apr 30, 2026
WebApps EDB-52538 CVE-2026-26157 multiple BusyBox 1.37.0 - Path Traversal Apr 30, 2026
Local EDB-52537 CVE-2026-21248 windows Windows 11 25H2 - Heap Overflow Apr 30, 2026
WebApps EDB-52536 CVE-2026-26235 multiple JUNG Smart Visu Server 1.1.1050 - Dos Apr 30, 2026
WebApps EDB-52535 CVE-2026-25961 multiple SumatraPDF 3.5.2 - Remote Code Execution Apr 30, 2026
WebApps EDB-52534 CVE-2026-25732 multiple NiceGUI 3.6.1 - Path Traversal Apr 30, 2026
WebApps EDB-52533 CVE-2026-25643 multiple Frigate NVR 0.16.3 - Remote Code Execution Apr 30, 2026
WebApps EDB-52532 CVE-2024-28397 multiple Js2Py 0.74 - RCE Apr 30, 2026
WebApps EDB-52531 CVE-2024-46987 multiple Camaleon CMS v2.9.0 - Path Traversal Apr 30, 2026
WebApps EDB-52530 — multiple Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection Apr 30, 2026
WebApps EDB-52529 CVE-2026-24897 multiple Erugo 0.2.14 - Remote Code Execution (RCE) Apr 30, 2026
WebApps EDB-52528 CVE-2026-25047 multiple deephas 1.0.7 - Prototype Pollution Apr 30, 2026