Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: sqlexporter, scuttle, drone-fips, sftpgo-plugin-geoipfilter, terraform-provider-random-fips, argo-cd, helm-exporter, whereabouts, crossplane-provider-aws-kinesisanalytics-fips, kubeflow-fips, cluster-api-azure-controller-fips, kaf, yunikorn-k8shim-fips,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: kargo, traefik-fips, k8sgateway, caddy-fips, kubo-fips, dkron-fips, kubo, eks-distro-fips, kyverno-policy-reporter-ui-fips, spegel, ipfs-cluster-fips, caddy, rke2-runtime, kyverno-policy-reporter-ui, traefik, frp, coredns, k3s, syncthing, dkron, q, syncthing-fips,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-alertsmanagement, coder, cluster-api-azure-controller, seaweedfs-rocksdb-fips, wolfictl, gitlab-kas, drone-fips, helm, crossplane-provider-azure-authorization, fscrypt, sops, prometheus-podman-exporter-fips, chezmoi, tflint, argo-cd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: coder, seaweedfs-rocksdb-fips, gitlab-kas, drone-fips, helm, fscrypt, argo-cd, containerd, istio, zarf, kaf, skaffold-fips, opentelemetry-collector, frankenphp-8.4, cilium, kubescape-server, trivy-operator, frankenphp-8.2, traefik, vault, falco-no-driver,...

SUSE: Security Advisory (SUSE-SU-2026:1320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-c718defeb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, tetragon, spire-server, k8sgpt-operator, pgtimetable, vault-env, external-secrets-operator, wgcf, go-licenses, envconsul, buildah, cosign, mods, gke-gcloud-auth-plugin, openbao, falco-exporter, knative-operator, telegraf...

openSUSE Security Advisory (SUSE-SU-2026:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2026-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-fe96f3532b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

IngEstate Server v11.14.0 is affected by multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the failure to properly sanitize inputs in the About application , What's news , and Release note parameters. An authent...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...