Mustafa Murat Akgül InvoicePlane 1.7.1 - RCE
webapps multiple CVE-2026-40297

zer0dayf Grav CMS 2.0.7 - RCE
webapps multiple CVE-2026-65008

zer0dayf miniOrange 5.4.3 - Unauthenticated Auth Bypass
webapps multiple CVE-2026-15013

youcef-! CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
remote multiple CVE-2026-42167

Fares Dahoumane iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
remote ios

Fernando Mengali Win32 - Calc Shellcode
windows

Ünsal Furkan Harani Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
remote multiple CVE-2026-44403

Mustafa Murat Akgül Grav CMS 2.0.0-beta.2 - Remote Code Execution
webapps php CVE-2026-42607

Long Fong Chan Linux Kernel 6.8 - Local Privilege Escalation
local linux

CENACIF-MX Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
local windows

jeffbarron telnetd 2.7 - Buffer Overflow
remote multiple CVE-2026-32746

jefersoncardoso.dev Python-Multipart 0.0.22 - Path Traversal
webapps python CVE-2026-24486

Beatriz Fresno Naumova Grafana 11.6.0 - SSRF
webapps multiple CVE-2025-4123

Beatriz Fresno Naumova Zhiyuan OA - arbitrary file upload leading
webapps multiple CVE-2025-34040

Beatriz Fresno Naumova WordPress Madara - Local File Inclusion
webapps multiple CVE-2025-4524

beatrizfn Windows 10.0.17763.7009 - spoofing vulnerability
remote windows CVE-2025-24054