278002 matches found
CubeCart 6.7.4 - SQL
Exploit Title: CubeCart 6.7.4 - SQL Bypass in maintenance.index.inc.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54646 Advisory / References...
Linksys E1200 2.0.04 Command Injection
Linksys E1200 firmware versions 2.0.04 and below suffer from an unauthenticated remote command injection vulnerability. Exploit Title: Linksys E12002.0.04 - Unauthenticated OS Command Injection Date: 2026-07-22 Exploit Author: JarrettgxzSec Vendor Homepage: www.linksys.com Version: FW " printf"!...
CubeCart 6.7.4 Cross Site Scripting
CubeCart version 6.7.4 suffers from multiple cross site scripting vulnerabilities. Exploit Title: CubeCart 6.7.4 - Cross-Site Scripting Attribute Injection in gui.class.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ MKLKCDG Vendor Homepage: https://www.cubecart.com/ Software Link:...
Langflow 1.8.4 Path Traversal / Remote Code Execution
Langflow versions 1.8.4 and below path traversal to remote code execution proof of concept exploit. Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link:...
JSON Deserialiser Resource Consumption
This is a proof of concept exploit the researcher has been using for 15 years to demonstrate insecure deserialization with JSON. From: Daniel Owens via Fulldisclosure Date: Sat, 29 Aug 2026 00:11:02 +0000 On 26 October 2025 we published "Struts2 and Related Framework Array/Collection DoS", which...
CubeCart 6.7.4 - SQL injection
Exploit Title: CubeCart 6.7.4 - SQL injection Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54647 Advisory / References:...
CubeCart 6.7.4 SQL Injection
CubeCart version 6.7.4 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: CubeCart 6.7.4 - SQL Bypass in maintenance.index.inc.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6...
Dahua Camera Denial of Service
The Dahua IPC / SD / NVR / XVR / EVS / VTO / VTH / ASI / TPC camera series all suffer from multiple denial of service vulnerabilities. CyberDanube Security Research 20260611-0 ------------------------------------------------------------------------------- title| Multiple Denial of Service product...
C-MOR 6.0104 Cross Site Scripting
C-MOR Video Surveillance versions 6.0104 and below suffer from a cross site scripting vulnerability. Exploit Title: C-MOR 6.0104 - Cross-Site Scripting XSS Google Dork: N/A Date: 2026-07-23 Exploit Author: Samir Shamdin Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link:...
C-MOR 6.0104 - Cross-Site Scripting (XSS)
Exploit Title: C-MOR 6.0104 - Cross-Site Scripting XSS Google Dork: N/A Date: 2026-07-23 Exploit Author: Samir Shamdin Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link: https://www.c-mor.com/ Version: = 6.0104 Tested on: C-MOR Video Surveillance V6.0104 CVE: CVE-2026-51133 1...
CubeCart 6.7.4 - Cross-Site Scripting
Exploit Title: CubeCart 6.7.4 - Cross-Site Scripting Attribute Injection in gui.class.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ MKLKCDG Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE:...
C-MOR 6.0104 Directory Traversal
C-MOR Video Surveillance versions 6.0104 and below suffer from a directory traversal vulnerability. Exploit Title: C-MOR 6.0104 - Directory Traversal Google Dork: N/A Date: 2026-07-23 Exploit Author: Fadi Kaakahji Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link:...
Exploit for CVE-2025-66478
CVE-2025-66478 / CVE-2025-55182 "React2Shell" — RSC Server A...
Exploit for Type Confusion in Google Chrome
CVE-2026-78905 — Meta-Phishing Facebook Graph API — OAuth...
Exploit for Type Confusion in Google Chrome
CVE-2026-78904 — Digital Dinar Drain CBDC Issuance API — L...
Exploit for Incomplete Cleanup in Google Chrome
No d...
Exploit for CVE-2026-56121
CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView g...
Exploit for Code Injection in Gitea
🫖 CVE-2026-60004 — Gitea RCE PoC A direct, single-target va...