vulnerabilityvia Exploit-DB (latest)
[webapps] Marimo 0.20.4 - RCE
Marimo 0.20.4 - RCE
Sep 2, 2026 UTC
Vulnerability news
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
vulnerabilityvia Exploit-DB (latest)
[webapps] Wolf CMS 0.8.3.1 - RCE v
Wolf CMS 0.8.3.1 - RCE v
Sep 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Grav CMS 2.0.7 - RCE
Grav CMS 2.0.7 - RCE
Sep 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Aug 31, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Aug 25, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Oct 22, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Open eClass 3.15 - RCE
Open eClass 3.15 - RCE
Oct 21, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
Ecava_ntegraXor IGX_16.0.701.10 - RCE
Oct 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] InvoicePlane 1.7.1 - RCE
InvoicePlane 1.7.1 - RCE
Oct 1, 2026 UTC
vulnerabilityvia CSO Online
10 ways attackers abuse AI services to hack your business
Attackers are starting to exploit AI systems to mount attacks in the same way they once relied on built-in enterprise tools such as PowerShell. Instead of relying on malware, cybe...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed dat...
Oct 27, 2026 UTC