Gabriel Rodrigues BookStack 25.12.1 - Denial of Service
webapps multiple

Brett Gervasoni Apache HertzBeat 1.8.0 - Remote Code Execution
webapps multiple

Maksim Rogov Ghost CMS 6.19.0 - SQLi
webapps multiple CVE-2026-26980

onurcangencbilkent NocoBase 2.0.27 - VM Sandbox Escape
local multiple CVE-2026-34156

aliguliyev GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation
local linux CVE-2026-24061

Sanjay Singh D-Link DIR-650IN - Authenticated Command Injection
webapps multiple

dangwenjing WordPress Backup Migration 1.3.7 - Remote Command Execution
webapps multiple CVE-2023-6553

diogo Easy File Sharing Web Server v7.2 - Buffer Overflow
webapps multiple

Peter Gabaldon Summar Employee Portal 3.98.0 - Authenticated SQL Injection
webapps multiple CVE-2025-40677

Van Lam Nguyen Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)
webapps multiple CVE-2023-34927

Debug Security Tourism Management System 2.0 - Arbitrary Shell Upload
webapps multiple CVE-2025-57642

Van Lam Nguyen Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)
webapps multiple CVE-2023-34927

Maksim Rogov XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)
webapps multiple CVE-2025-24893

wulfgarpro HTMLDOC 1.9.13 - Stack Buffer Overflow
remote multiple CVE-2021-43579

Giorgi Dograshvili GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
remote windows CVE-2025-26264

Giorgi Dograshvili GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
local windows CVE-2025-26263