OffSec PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
remote php CVE-2026-109618

nu11secur1ty pizzafy-1.0 - SQLi
webapps multiple

Rubbish Research Team South River Technologies Titan MFT Server 26.0.0 - code execution
remote windows

Rubbish Research Team Synametrics Syncrify 6.2 - command execution
remote linux

Abel Maldonado Keycloak 26.7.2 - Unauthenticated Account Takeover
webapps multiple CVE-2026-18963

Georgios Roumeliotis Open eClass 3.15 - RCE
webapps multiple CVE-2024-26503

nu11secur1ty Automotive Shop Management System 1.0 - SQLi
webapps multiple

Rubbish Research Team Edimax BR-6478AC firmware v2.20 - authenticated command injection
remote hardware

Rubbish Research Team Exasol Database 7.1.30 - command execution
remote linux

Rubbish Research Team Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
remote linux

Rubbish Research Team ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
remote hardware

Rubbish Research Team Teltonika_RutOS 00.07.06.21 - command injection
remote hardware

Rubbish Research Team TigerGraph_Community_Edition 4.2.4 - arbitrary file write
webapps multiple

Robert Ressl WordPress 7.0.2 - Path Travesal
webapps multiple CVE-2026-87902

nu11secur1ty Food-Ordering 1.0 - LFI
webapps multiple

Rubbish Research Team Ecava_ntegraXor IGX_16.0.701.10 - RCE
remote windows