Rubbish Research Team Teltonika_RutOS 00.07.06.21 - command injection
remote hardware

Rubbish Research Team TigerGraph_Community_Edition 4.2.4 - arbitrary file write
webapps multiple

Robert Ressl WordPress 7.0.2 - Path Travesal
webapps multiple CVE-2026-87902

nu11secur1ty Food-Ordering 1.0 - LFI
webapps multiple

Rubbish Research Team Ecava_ntegraXor IGX_16.0.701.10 - RCE
remote windows

bl4dsc4n Krayin CRM 2.2.4 - IDOR
webapps multiple CVE-2026-100885

Max Gabriel SuiteCRM 8.10.1 - Authenticated SSRF
webapps multiple CVE-2026-69137

Mustafa Murat Akgül InvoicePlane 1.7.1 - RCE
webapps multiple CVE-2026-40297

nu11secur1ty POMS oretnom23v1.0 - SQLi vulnerabilities
webapps multiple

DigiProSec MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 - RCE
remote multiple CVE-2026-86060

DigiProSec CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 - RCE
remote multiple CVE-2026-80428

Jared Brits FreePBX 17.0.2 - Remote Code Execution (RCE)
webapps multiple CVE-2025-57819

Gutierre0x80 Metabase 0.61.0 - Authenticated Remote Code Execution
webapps multiple CVE-2026-59827

Ranjit Kumar Singh EVerest 2025.9.0 - DoS
dos multiple CVE-2025-68137

Ranjit Kumar Singh Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
webapps multiple CVE-2026-41456

Sahil Arya PodcastGenerator 3.2.9 - Stored XSS
webapps multiple CVE-2025-70336