Gabriel Rodrigues BookStack 25.12.1 - Denial of Service
webapps multiple

nu11secur1ty solaredge - (CSRF-OOB-Injection)
webapps multiple

Anthony Cihan FUXA 1.2.9 - RCE
webapps multiple CVE-2026-25895

bootstrapbool WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
webapps multiple CVE-2026-4257

Brett Gervasoni Apache HertzBeat 1.8.0 - Remote Code Execution
webapps multiple

Sadık Ertürk ePati Antikor NGFW 2.0.1301 - Authentication Bypass
webapps multiple CVE-2026-2624

vabismo452 PJPROJECT 2.16 - Heap Bufferoverflow
webapps multiple CVE-2026-25994

selim.lanouar Ninja Forms Uploads - Unauthenticated PHP File Upload
webapps multiple CVE-2026-0740

best.sell glances 4.5.2 - command injection
webapps multiple CVE-2026-33641

anonimicerum coreruleset 4.21.0 - Firewall Bypass
webapps multiple CVE-2026-21876

andersoncezar048 Flowise < 3.0.5 - Missing Authentication for Critical Function
webapps typescript CVE-2025-58434

Maksim Rogov Ghost CMS 6.19.0 - SQLi
webapps multiple CVE-2026-26980

Taurus Omar LuaJIT 2.1.1774638290 - Arbitrary Code Execution
webapps multiple

yahia Bludit CMS 3.18.4 - RCE
webapps multiple CVE-2026-25099

9tamilmathi ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)
webapps multiple CVE-2025-34282

thewhiteh4t MindsDB 25.9.1.1 - Path Traversal
webapps multiple CVE-2026-27483