cardosource Payload CMS 3.72.0 - Blind SQL Injection
webapps multiple CVE-2026-25544

Saud Alenazi Bludit CMS - Stored XSS
webapps multiple

zer0dayf Grav CMS 2.0.7 - RCE
webapps multiple CVE-2026-65008

zer0dayf miniOrange 5.4.3 - Unauthenticated Auth Bypass
webapps multiple CVE-2026-15013

Michael Chesang EasyAppointments 1.5.1 - Blind SQL Injection
webapps multiple CVE-2025-50455

Samir Shamdin C-MOR 6.0104 - Directory Traversal
webapps multiple CVE-2026-51134

Samir Shamdin C-MOR 6.0104 - Cross-Site Scripting (XSS)
webapps hardware CVE-2026-51133

Mikail KOCADAĞ CubeCart 6.7.4 - SQL injection
webapps multiple CVE-2026-54647

Mikail KOCADAĞ CubeCart 6.7.4 - SQL
webapps multiple CVE-2026-54646

Mikail KOCADAĞ CubeCart 6.7.4 - Stored XSS
webapps multiple CVE-2026-54645

Mikail KOCADAĞ CubeCart 6.7.4 - Cross-Site Scripting
webapps multiple CVE-2026-54644

jarrett Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
webapps hardware CVE-2025-60689

cardosource Langflow 1.8.4 - Path Traversal to Remote Code Execution
webapps multiple CVE-2026-5027

youcef-! CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
remote multiple CVE-2026-42167

Thiago Cunha PCMan 2.0.7 - Buffer Overflow
remote windows CVE-2025-4871

Jorge González Milla NanaZip 6.5 - DoS
dos multiple