Saud Alenazi Bludit CMS - Stored XSS
webapps multiple

zer0dayf Grav CMS 2.0.7 - RCE
webapps multiple CVE-2026-65008

zer0dayf miniOrange 5.4.3 - Unauthenticated Auth Bypass
webapps multiple CVE-2026-15013

Jorge González Milla NanaZip 6.5 - DoS
dos multiple

Jorge González Milla flyto-core 2.26.7 - Arbitrary File Write
webapps multiple

Jorge González Milla Nodemailer 9.0.0 - File Read/ SSRF
webapps multiple

Jorge González Milla Linuxfabrik monitoring_plugins_6.0.0 - SSRF
webapps multiple

Jorge González Milla NanaZip 6.5 - DoS
dos windows CVE-2026-55780

Jorge González Milla flyto_core 2.26.7 - Server-Side Request Forgery
webapps multiple

Jorge González Milla Probo 0.222.2 - IDOR
webapps multiple CVE-2026-63505

Jorge González Milla webpack_devserver 5.2.5 - CSRF
webapps multiple CVE-2026-14620

M@rAz Ali Joomla Page Builder CK 3.5.10 - Arbitrary File Upload
webapps multiple CVE-2026-56290

Parsa Rezaie Khiabanloo KNX visualisering - Broken Access Control
webapps multiple

Abdelazim Mohammed Cockpit 359 - RCE
webapps multiple CVE-2026-4631

andersoncezar048 Flowise < 3.0.5 - Missing Authentication for Critical Function
webapps typescript CVE-2025-58434

hazar Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)
webapps multiple CVE-2025-68930