Jorge González Milla Probo 0.222.2 - IDOR
webapps multiple CVE-2026-63505

Jorge González Milla webpack_devserver 5.2.5 - CSRF
webapps multiple CVE-2026-14620

Gabriel Rodrigues Duplicati 2.2.0.3 - JWT Signing Key Leak
webapps multiple

Jared Brits Joomla JCE_2.9.15 - Remote Code Execution
webapps multiple CVE-2026-48907

Mohammad Hossein Sadeghian WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
webapps multiple CVE-2026-3891

Ajay Rajpurohit Apache Gravitino 1.2.1 - SSRF
webapps multiple

banyamer Blocksy Companion 2.1.46 - RCE
webapps multiple CVE-2026-58480

Balachandar Gowrisankar Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
webapps multiple CVE-2026-3576

Richard Howe Ray 2.56.0 - Directory Traversal & Local File Inclusion
webapps multiple

banyamer OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
webapps multiple CVE-2026-58138

Bytetobreach CorgetGpsDget 2_3.2 - OS Command Injection
webapps multiple

Jared Brits Joomla 2.9.99.4 - Unauthenticated Remote Code Execution
webapps multiple CVE-2026-48907

Diamorphine Krayin CRM v2.2.x - Authenticated Remote Code Execution
webapps multiple CVE-2026-38526

Mohammad Hossein Sadeghian Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure
webapps multiple CVE-2025-60188

Diamorphine Langflow 1.9.0 - RCE
webapps multiple CVE-2026-33017

M@rAz Ali Joomla Page Builder CK 3.5.10 - Arbitrary File Upload
webapps multiple CVE-2026-56290