[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE Exploit-DB.com 1 day 15 hours ago CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution Exploit-DB.com 1 week 2 days ago Metabase 0.61.0 - Authenticated Remote Code Execution
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE) Exploit-DB.com 1 week 2 days ago FreePBX 17.0.2 - Remote Code Execution (RCE)
[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities Exploit-DB.com 1 week 3 days ago Fullhan FH8626V100 - Multiple Vulnerabilities
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution Exploit-DB.com 1 week 3 days ago Ghost_CMS 6.19.0 - Remote Code Execution
[webapps] PodcastGenerator 3.2.9 - Stored XSS Exploit-DB.com 1 week 3 days ago PodcastGenerator 3.2.9 - Stored XSS
[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Exploit-DB.com 1 week 3 days ago Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
[webapps] EasyAppointments 1.5.1 - Blind SQL Injection Exploit-DB.com 1 week 4 days ago EasyAppointments 1.5.1 - Blind SQL Injection
[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass Exploit-DB.com 1 week 4 days ago miniOrange 5.4.3 - Unauthenticated Auth Bypass
[webapps] Payload CMS 3.72.0 - Blind SQL Injection Exploit-DB.com 1 week 4 days ago Payload CMS 3.72.0 - Blind SQL Injection
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution Exploit-DB.com 1 week 5 days ago Langflow 1.8.4 - Path Traversal to Remote Code Execution
[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection Exploit-DB.com 1 week 5 days ago Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
[webapps] CubeCart 6.7.4 - Cross-Site Scripting Exploit-DB.com 1 week 5 days ago CubeCart 6.7.4 - Cross-Site Scripting