Public exploit released for CVE-2026-80428, unauthenticated PHP object injection via Shibboleth in ILIAS LMS, enabling remote code execution.
Exploit-DB published a remote code execution exploit targeting FreePBX version 17.0.2.
Exploit-DB published an authenticated remote code execution exploit targeting Metabase version 0.61.0.
A second proof-of-concept SQL injection exploit for CubeCart 6.7.4 was published on Exploit-DB.
A path traversal to remote code execution exploit for Langflow 1.8.4, a popular LLM application builder, was published on Exploit-DB.
A proof-of-concept SQL injection exploit targeting CubeCart 6.7.4 was published on Exploit-DB.
A proof-of-concept cross-site scripting exploit for C-MOR video surveillance software 6.0104 appeared on Exploit-DB.
A proof-of-concept for unauthenticated OS command injection in Linksys E1200 router firmware 2.0.04 has been published on Exploit-DB.
A directory traversal proof-of-concept for video surveillance software C-MOR version 6.0104 has been published on Exploit-DB.
A proof-of-concept stored cross-site scripting exploit targeting CubeCart 6.7.4 was published on Exploit-DB.
Exploit-DB published a PoC for CVE-2026-42167, post-authentication SQL injection in ProFTPD mod_sql leading to remote code execution.
A proof-of-concept denial-of-service exploit for Nmap 7.99 leverages an integer underflow in extension header parsing to crash the scanner.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.2K readers · 1.9K views · 1.4K reads · all time 160K views