Mustafa Murat Akgül InvoicePlane 1.7.1 - RCE
webapps multiple CVE-2026-40297

Maksim Rogov Ghost_CMS 6.19.0 - Remote Code Execution
webapps multiple CVE-2026-29053

Mustafa Murat Akgül Grav CMS 2.0.0-beta.2 - Remote Code Execution
webapps php CVE-2026-42607

Maksim Rogov Ghost CMS 6.19.0 - SQLi
webapps multiple CVE-2026-26980

Marshall Whittaker HUSTOJ Zip-Slip v26.01.24 - RCE
webapps multiple CVE-2026-24479

velampudisakshi Camaleon CMS v2.9.0 - Path Traversal
webapps multiple CVE-2024-46987

nakleh Horilla v1.3 - RCE
webapps multiple CVE-2025-48868

Maksim Rogov XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)
webapps multiple CVE-2025-24893

Prak Sokchea MikroTik RouterOS 7.19.1 - Reflected XSS
remote multiple CVE-2025-6563

Shahid Hakim FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
remote multiple CVE-2024-50562

Maksim Rogov Roundcube 1.6.10 - Remote Code Execution (RCE)
webapps multiple CVE-2025-49113

Jun Takemura Hunk Companion Plugin 1.9.0 - Unauthenticated Plugin Installation
webapps multiple CVE-2024-11972

M. Akil Gündoğan K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
remote multiple CVE-2024-36424

Olakojo Olaoluwa Joshua MoziloCMS 3.0 - Remote Code Execution (RCE)
webapps php CVE-2024-44871

r0binak NVIDIA Container Toolkit 1.16.1 - Time-of-check Time-of-Use (TOCTOU)
local linux CVE-2024-0132

Onur Göğebakan WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
webapps php