278707 matches found
Exploit for CVE-2026-40564
CVE-2026-40564: SSRF via FlinkSessionJob.spec.job.jarURI in fl...
Y2X
Y2eXploit Y2X --- Overview Y2eXploit Y2X is an a...
waf-engine
WAF & SOAR Engine A cloud-native Web Application Firewall and...
Exploit for XPath Injection in Huggingface Smolagents
🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11...
bungee-gum
bungee-gum A colle...
Exploit for SQL Injection in Ghost
version Unauthenticated Stored Cross-Site Scripting CVE-2026-...
Exploit for Protection Mechanism Failure in Artifex Ghostscript
Real Case Exploitation of Buffer Overflow & Format String Vuln...
Exploit for Code Injection in Xwiki
CVE-2025-24893 Exploit de Execução Remota de Código RCE no X...
Exploit for Binding to an Unrestricted IP Address in Openprinting Cups-Browsed
No d...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
copyfail-detect Detection toolkit for CVE-2026-31431 "Copy F...
Langflow 1.3.0 - Remote Code Execution
Exploit Title: Langflow 1.3.0 - Remote Code Execution Fofa-dork: title="Langflow" Shodan-dork: title:"Langflow" Date: 23-05-2026 Exploit Author: Diamorphine Venodor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: 1.2.0 Tested on: Debian CVE :...
CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
Exploit Title: CubeCart alert"Test!" 3- Press Enter. 4- Observe the alert box popping up on the screen, confirming the XSS execution. Alternative Direct Link: https://TARGET/cubecart/search?searchkeywords=SAMSUNG%20alert"Test!"&a=category Important Note for Reproduction For the payload to execute...
📄 D-Link DSL2600U Password Disclosure
D-Link DSL2600U suffers from an administrative password disclosure vulnerability. Exploit Title: D-Link DSL2600U - 'rom-0' Admin Password Disclosure Date: 2026-05-02 Exploit Author: Amir Hossein Jamshidi Vendor Homepage: https://www.dlink.com Version: DSL-2600U Tested on: ubuntu CVE : N/A Firmwar...
📄 MixPHP Framework 2.2.17 Deserialization / Arbitrary Code Execution
MixPHP Framework versions 2.x through 2.2.17 suffer from an insecure deserialization vulnerability that allows for remote code execution. Exploit Title: MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution Date: 2026-05-14 Exploit Author: cardosource Vendor Homepage:...
ZTE H298A / H108N - Unauthenticated Credential Exposure
Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure via ETHCheat Parameter Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link:...
📄 MikroORM 7.0.13 SQL Injection
MikroORM version 7.0.13 suffers from a remote SQL injection vulnerability. Exploit Title: MikroORM 7.0.13 - SQL Injection Google Dork: N/A Date: 2026-05-27 Exploit Author: cardosource Vendor Homepage: https://mikro-orm.io/ Software Link: https://github.com/mikro-orm/mikro-orm Version:...
📄 EspoCRM 9.3.3 Server-Side Request Forgery
EspoCRM version 9.3.3 suffers from an authenticated server-side request forgery vulnerability. Exploit Title: EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation Google Dork: N/A Date: 2026-05-08 Exploit Author: Max Gabriel https://github.com/EntroVyx Vendor Homepage:...
📄 Apache ActiveMQ Jolokia AddNetworkConnector Remote Code Execution
Apache ActiveMQ exposes a Jolokia JMX-over-HTTP API at /api/jolokia/. An authenticated attacker can invoke the addNetworkConnector MBean operation with a crafted URI that causes the broker to fetch a remote Spring XML configuration over HTTP. The Spring XML instantiates a ProcessBuilder bean that...