Saud Alenazi Bludit CMS - Stored XSS
webapps multiple

zer0dayf Grav CMS 2.0.7 - RCE
webapps multiple CVE-2026-65008

zer0dayf miniOrange 5.4.3 - Unauthenticated Auth Bypass
webapps multiple CVE-2026-15013

Michael Chesang EasyAppointments 1.5.1 - Blind SQL Injection
webapps multiple CVE-2025-50455

Samir Shamdin C-MOR 6.0104 - Directory Traversal
webapps multiple CVE-2026-51134

Samir Shamdin C-MOR 6.0104 - Cross-Site Scripting (XSS)
webapps hardware CVE-2026-51133

Mikail KOCADAĞ CubeCart 6.7.4 - SQL injection
webapps multiple CVE-2026-54647

Mikail KOCADAĞ CubeCart 6.7.4 - SQL
webapps multiple CVE-2026-54646

Mikail KOCADAĞ CubeCart 6.7.4 - Stored XSS
webapps multiple CVE-2026-54645

Mikail KOCADAĞ CubeCart 6.7.4 - Cross-Site Scripting
webapps multiple CVE-2026-54644

jarrett Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
webapps hardware CVE-2025-60689

cardosource Langflow 1.8.4 - Path Traversal to Remote Code Execution
webapps multiple CVE-2026-5027

Jorge González Milla flyto-core 2.26.7 - Arbitrary File Write
webapps multiple

Jorge González Milla Nodemailer 9.0.0 - File Read/ SSRF
webapps multiple

Jorge González Milla Linuxfabrik monitoring_plugins_6.0.0 - SSRF
webapps multiple

Jorge González Milla flyto_core 2.26.7 - Server-Side Request Forgery
webapps multiple