generalvia Exploit-DB (latest)
[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Aug 31, 2026 UTC
Security news
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Aug 31, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Aug 25, 2026 UTC
generalvia Exploit-DB (latest)
[remote] PCMan 2.0.7 - Buffer Overflow
PCMan 2.0.7 - Buffer Overflow
Aug 18, 2026 UTC
generalvia Exploit-DB (latest)
[dos] NanaZip 6.5 - DoS
NanaZip 6.5 - DoS
Aug 18, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] flyto-core 2.26.7 - Arbitrary File Write
flyto-core 2.26.7 - Arbitrary File Write
Aug 18, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] Nodemailer 9.0.0 - File Read/ SSRF
Nodemailer 9.0.0 - File Read/ SSRF
Aug 18, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Oct 22, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] pizzafy-1.0 - SQLi
pizzafy-1.0 - SQLi
Oct 21, 2026 UTC
generalvia Exploit-DB (latest)
[remote] South River Technologies Titan MFT Server 26.0.0 - code execution
South River Technologies Titan MFT Server 26.0.0 - code execution
Oct 21, 2026 UTC
generalvia Exploit-DB (latest)
[remote] Synametrics Syncrify 6.2 - command execution
Synametrics Syncrify 6.2 - command execution
Oct 21, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover
Keycloak 26.7.2 - Unauthenticated Account Takeover
Oct 21, 2026 UTC