Mikail KOCADAĞ CubeCart 6.7.4 - Cross-Site Scripting
webapps multiple CVE-2026-54644

cardosource Langflow 1.8.4 - Path Traversal to Remote Code Execution
webapps multiple CVE-2026-5027

youcef-! CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
remote multiple CVE-2026-42167

Jorge González Milla NanaZip 6.5 - DoS
dos multiple

Jorge González Milla flyto-core 2.26.7 - Arbitrary File Write
webapps multiple

Jorge González Milla Nodemailer 9.0.0 - File Read/ SSRF
webapps multiple

Jorge González Milla Linuxfabrik monitoring_plugins_6.0.0 - SSRF
webapps multiple

Jorge González Milla flyto_core 2.26.7 - Server-Side Request Forgery
webapps multiple

Jorge González Milla Probo 0.222.2 - IDOR
webapps multiple CVE-2026-63505

Jorge González Milla webpack_devserver 5.2.5 - CSRF
webapps multiple CVE-2026-14620

banyamer Nmap 7.99 - Extension Header Integer Underflow
dos multiple CVE-2026-58058

Gabriel Rodrigues Duplicati 2.2.0.3 - JWT Signing Key Leak
webapps multiple

Jared Brits Joomla JCE_2.9.15 - Remote Code Execution
webapps multiple CVE-2026-48907

Paccaron ipTIME A3004T - Remote Code Execution
remote multiple

Mohammad Hossein Sadeghian WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
webapps multiple CVE-2026-3891

Ajay Rajpurohit Apache Gravitino 1.2.1 - SSRF
webapps multiple