ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “webapps”

63 items

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllExploit / PoC 40Vulnerability 14Ransomware 3Phishing & fraud 2Data breach 1Malware 1Threat actor 1Industry 1
SeverityAllcritical 7high 12medium 21low 23info 0

CVE-2026-82438: Apache Storm Webapp: Authenticated API Responses Exposed to Arbitrary Web Origins

Three CORS misconfigurations in Apache Storm 3.0.0 let malicious web pages from arbitrary origins read authenticated API responses.

CVE-2026-82438 (severity: important) affects Apache Storm Webapp (storm-webapp) versions 3.0.0 before 3.1.0. Three separate mechanisms allowed a web page on an unrelated origin to read responses served to authenticated users, including the Logviewer reflecting the request's Origin header in Access-Control-Allow-Origin while also sending Access-Control-Allow-Credentials. This enables a malicious site to silently exfiltrate authenticated Storm API and log data from a victim's browser session.

oss-security · 2d agoVulnerabilityCVE-2026-824381

[webapps] Apache Gravitino 1.2.1 - SSRF

Exploit-DB publishes a webapps SSRF proof-of-concept exploit targeting Apache Gravitino 1.2.1.

Exploit-DB entry 52641 documents a server-side request forgery (SSRF) exploit against Apache Gravitino version 1.2.1. The entry is categorized under web applications and provides a working proof of concept for the flaw.

Exploit-DB · Aug 11, 2026Exploit / PoC1

[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)

Exploit-DB published a remote code execution exploit targeting FreePBX version 17.0.2.

Exploit-DB entry 52681 documents a remote code execution vulnerability in FreePBX 17.0.2, a widely used open-source PBX platform. The listing contains no CVE id, authentication requirement, or evidence of in-the-wild exploitation. FreePBX is commonly internet-facing, so unauthenticated RCE would be significant for exposed deployments.

Exploit-DB · 13d agoExploit / PoC2

[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution

Exploit-DB published an authenticated remote code execution exploit targeting Metabase version 0.61.0.

A new Exploit-DB entry (ID 52680) describes an authenticated remote code execution vulnerability in Metabase 0.61.0. The listing provides minimal detail, but authenticated RCE in a widely deployed BI tool is notable for defenders running exposed instances. No CVE id or in-the-wild exploitation is mentioned in the listing.

Exploit-DB · 13d agoExploit / PoC1

[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

A reflected cross-site scripting flaw in Bludit CMS 3.20.0 is documented with a public proof-of-concept exploit on Exploit-DB.

Exploit-DB published exploit ID 52678 targeting Bludit CMS 3.20.0, a web application affected by reflected cross-site scripting. The listing contains a proof-of-concept but includes no CVE identifier or evidence of active exploitation.

Exploit-DB · 14d agoExploit / PoC

[webapps] Marimo 0.20.4 - RCE

A public proof-of-concept demonstrates remote code execution in Marimo 0.20.4, the open-source Python notebook framework.

Exploit-DB lists a remote code execution proof of concept affecting Marimo version 0.20.4. Marimo is an open-source reactive Python notebook tool used by developers. The listing does not reference a CVE id or observed in-the-wild exploitation.

Exploit-DB · 14d agoExploit / PoC1

[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

A public proof-of-concept demonstrates remote code execution in Ghost CMS 6.19.0, the widely deployed open-source publishing platform.

Exploit-DB lists a remote code execution proof of concept affecting Ghost CMS version 6.19.0. Ghost is a popular open-source platform used by publishers and blogs worldwide. The listing does not cite a CVE id or report in-the-wild exploitation.

Exploit-DB · 14d agoExploit / PoC1

[webapps] PodcastGenerator 3.2.9 - Stored XSS

A stored cross-site scripting flaw in PodcastGenerator 3.2.9 is documented with a public proof-of-concept exploit on Exploit-DB.

Exploit-DB published exploit ID 52677 targeting PodcastGenerator 3.2.9, a web application affected by stored cross-site scripting. The listing provides a proof-of-concept for the flaw but includes no CVE identifier or reports of active exploitation.

Exploit-DB · 14d agoExploit / PoC1

[webapps] Langflow 1.10.0 - RCE

A public proof-of-concept demonstrates remote code execution in Langflow 1.10.0, the open-source AI workflow builder.

Exploit-DB lists a remote code execution proof of concept targeting Langflow version 1.10.0. Langflow is a widely used open-source tool for building AI agent and LLM workflows. The listing does not include a CVE id or evidence of in-the-wild exploitation, but RCE in AI development tooling is relevant to teams running it in production.

Exploit-DB · 14d agoExploit / PoC1

[webapps] Payload CMS 3.72.0 - Blind SQL Injection

A proof-of-concept exploit for a blind SQL injection vulnerability in Payload CMS 3.72.0 has been published on Exploit-DB.

Exploit-DB lists a public proof-of-concept exploit for a blind SQL injection flaw in Payload CMS 3.72.0. The listing falls under the webapps category and allows reproduction of the injection. No in-the-wild exploitation or CVE identifier is stated in the listing.

Exploit-DB · 15d agoExploit / PoC

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

A proof-of-concept exploit for an unauthenticated authentication bypass in miniOrange 5.4.3 has been published on Exploit-DB.

Exploit-DB lists a public proof-of-concept exploit for an unauthenticated authentication bypass in miniOrange 5.4.3. The flaw allows attackers to bypass authentication without credentials. No in-the-wild exploitation or CVE identifier is stated in the listing.

Exploit-DB · 15d agoExploit / PoC

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection

A proof-of-concept exploit for a blind SQL injection vulnerability in EasyAppointments 1.5.1 has been published on Exploit-DB.

Exploit-DB lists a public proof-of-concept exploit for a blind SQL injection flaw in EasyAppointments 1.5.1. The listing falls under the webapps category and enables reproduction of the injection. No in-the-wild exploitation or CVE identifier is stated in the listing.

Exploit-DB · 15d agoExploit / PoC1

[webapps] Bludit CMS - Stored XSS

A stored cross-site scripting (XSS) vulnerability in Bludit CMS was disclosed through a public proof-of-concept published on Exploit-DB.

Exploit-DB published a webapps entry for a stored XSS flaw in Bludit CMS, an open-source flat-file content management system. Stored XSS allows an attacker to persist malicious scripts that execute in other users' browsers, potentially enabling session theft or unauthorized actions. The listing did not include a CVE identifier or affected version range.

Exploit-DB · 15d agoExploit / PoC1

[webapps] Wolf CMS 0.8.3.1 - RCE v

A proof-of-concept exploit for remote code execution in Wolf CMS 0.8.3.1 has been published on Exploit-DB.

Exploit-DB lists a public proof-of-concept exploit for a remote code execution vulnerability in Wolf CMS 0.8.3.1. The listing is categorized under web applications. No exploitation in the wild or CVE identifier is stated in the listing.

Exploit-DB · 15d agoExploit / PoC1

[webapps] Grav CMS 2.0.7 - RCE

A proof-of-concept exploit for remote code execution in Grav CMS 2.0.7 has been published on Exploit-DB.

Exploit-DB lists a public proof-of-concept exploit for a remote code execution vulnerability in Grav CMS 2.0.7. The listing is for web applications and provides code defenders can use to reproduce the issue. No exploitation in the wild or CVE assignment is stated in the listing.

Exploit-DB · 15d agoExploit / PoC

[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

A proof-of-concept for unauthenticated OS command injection in Linksys E1200 router firmware 2.0.04 has been published on Exploit-DB.

Exploit-DB entry 52660 discloses an unauthenticated OS command injection affecting the Linksys E1200 wireless router running firmware version 2.0.04. The flaw is categorized as a web application vulnerability. No CVE identifier or evidence of in-the-wild exploitation is provided in the listing.

Exploit-DB · 16d agoExploit / PoC

[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution

A path traversal to remote code execution exploit for Langflow 1.8.4, a popular LLM application builder, was published on Exploit-DB.

Exploit-DB lists a proof-of-concept exploit chaining path traversal to remote code execution in Langflow 1.8.4, an open-source tool used to build LLM applications and agents. The chain allows an attacker to write arbitrary files outside the intended directory and achieve code execution on the host. The provided text does not include a CVE identifier or reports of exploitation in the wild, but RCE in a widely deployed AI tooling product is notable for defenders.

Exploit-DB · 16d agoExploit / PoC1

[webapps] CubeCart 6.7.4 - SQL

A proof-of-concept SQL injection exploit targeting CubeCart 6.7.4 was published on Exploit-DB.

Exploit-DB carries a proof-of-concept exploit for a SQL injection vulnerability in CubeCart 6.7.4, an open-source e-commerce platform. The listing demonstrates the injection issue but the provided text includes no CVE identifier or evidence of active exploitation. SQL injection in the storefront could expose or modify store data.

Exploit-DB · 16d agoExploit / PoC1

[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)

A proof-of-concept cross-site scripting exploit for C-MOR video surveillance software 6.0104 appeared on Exploit-DB.

Exploit-DB published a proof-of-concept cross-site scripting (XSS) exploit against C-MOR 6.0104, an IP video surveillance platform. The listing demonstrates script injection in the web interface, but the provided text contains no CVE identifier or indication of active exploitation. Successful XSS against the surveillance console could enable session hijacking or manipulation of the monitoring interface.

Exploit-DB · 16d agoExploit / PoC1

[webapps] CubeCart 6.7.4 - SQL injection

A second proof-of-concept SQL injection exploit for CubeCart 6.7.4 was published on Exploit-DB.

Exploit-DB lists a SQL injection proof-of-concept affecting CubeCart 6.7.4, the open-source shopping cart application. The entry demonstrates the flaw but the provided text does not include a CVE identifier or reports of exploitation in the wild. It appears alongside related CubeCart XSS and SQL injection listings published the same day.

Exploit-DB · 16d agoExploit / PoC1

[webapps] CubeCart 6.7.4 - Stored XSS

A proof-of-concept stored cross-site scripting exploit targeting CubeCart 6.7.4 was published on Exploit-DB.

Exploit-DB lists a proof-of-concept exploit for a stored cross-site scripting (XSS) vulnerability in CubeCart 6.7.4, a PHP-based e-commerce web application. The listing demonstrates injection of attacker-controlled script that persists in the application, but no exploitation in the wild or CVE assignment is reported in the provided text.

Exploit-DB · 16d agoExploit / PoC1

[webapps] C-MOR 6.0104 - Directory Traversal

A directory traversal proof-of-concept for video surveillance software C-MOR version 6.0104 has been published on Exploit-DB.

Exploit-DB entry 52666 discloses a directory traversal vulnerability in C-MOR version 6.0104, a video surveillance platform. The issue is listed under web application vulnerabilities. No CVE identifier or exploitation evidence is included in the listing.

Exploit-DB · 16d agoExploit / PoC

[webapps] CubeCart 6.7.4 - Cross-Site Scripting

A cross-site scripting exploit targeting CubeCart 6.7.4 web applications was published on Exploit-DB as entry 52661.

Exploit-DB listing 52661 discloses a cross-site scripting vulnerability in CubeCart version 6.7.4, classified under webapps. The listing makes a public exploit available, but no CVE id, exploitation evidence, or vendor patch status is provided in the item text.

Exploit-DB · 16d agoExploit / PoC

[webapps] flyto-core 2.26.7 - Arbitrary File Write

flyto-core 2.26.7 has an arbitrary file write vulnerability with a public proof-of-concept exploit on Exploit-DB.

Exploit-DB listing 52655 discloses an arbitrary file write vulnerability in flyto-core version 2.26.7. A proof-of-concept exploit is publicly available. The listing provides no CVE identifier and no indication of active exploitation; arbitrary file writes can potentially enable code execution depending on write locations.

Exploit-DB · 29d agoExploit / PoC

[webapps] Nodemailer 9.0.0 - File Read/ SSRF

A public proof-of-concept demonstrates arbitrary file read and SSRF in Nodemailer 9.0.0.

Exploit-DB entry 52654 contains a webapps proof-of-concept for Nodemailer 9.0.0 demonstrating both arbitrary file read and server-side request forgery. Nodemailer is a widely used Node.js email-sending library, so affected deployments could expose local files or internal services. The listing does not include a CVE identifier or evidence of in-the-wild exploitation.

Exploit-DB · 29d agoExploit / PoC

[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF

A public proof-of-concept exploit for an SSRF flaw in Linuxfabrik monitoring_plugins 6.0.0 appeared on Exploit-DB.

Exploit-DB listing 52653 discloses a server-side request forgery (SSRF) vulnerability in Linuxfabrik monitoring_plugins version 6.0.0, classified under web applications. A proof-of-concept exploit is publicly available. No CVE identifier or evidence of in-the-wild exploitation is provided in the listing.

Exploit-DB · 29d agoExploit / PoC

[webapps] Probo 0.222.2 - IDOR

A public proof-of-concept exploit was released for an IDOR vulnerability in web application Probo 0.222.2.

Exploit-DB published exploit #52650 targeting Probo version 0.222.2. The flaw is an Insecure Direct Object Reference (IDOR) in this web application. No exploitation in the wild is reported in the disclosure text.

Exploit-DB · Aug 17, 2026Exploit / PoC

[webapps] webpack_devserver 5.2.5 - CSRF

Exploit-DB published a cross-site request forgery proof of concept for webpack_devserver 5.2.5.

Exploit-DB lists a webapps CSRF proof-of-concept against webpack_devserver version 5.2.5. The flaw affects the local webpack development server, where cross-site requests could be issued against it. No CVE id is cited in the entry and no active exploitation is reported.

Exploit-DB · Aug 17, 2026Exploit / PoC

[webapps] flyto_core 2.26.7 - Server-Side Request Forgery

Exploit-DB published a server-side request forgery proof of concept for flyto_core 2.26.7.

Exploit-DB lists a proof-of-concept for server-side request forgery affecting flyto_core version 2.26.7. SSRF flaws can allow attackers to make arbitrary requests from the server toward internal resources. No CVE id is cited and no in-the-wild exploitation is reported.

Exploit-DB · Aug 17, 2026Exploit / PoC

[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak

A public exploit exposes JWT signing key leakage in backup software Duplicati 2.2.0.3, risking session forgery.

Exploit-DB published exploit #52646 for Duplicati 2.2.0.3, a backup application. The issue leaks the JWT signing key, which could let an attacker forge authentication tokens. The disclosure does not report any exploitation in the wild.

Exploit-DB · Aug 17, 2026Exploit / PoC

[webapps] Joomla JCE_2.9.15 - Remote Code Execution

A remote code execution proof of concept for Joomla Content Editor (JCE) 2.9.15 was published on Exploit-DB.

Exploit-DB added a webapps proof-of-concept for remote code execution affecting the Joomla Content Editor (JCE) component version 2.9.15. JCE is a widely deployed editor extension used on Joomla websites. The entry provides no CVE id and no evidence of in-the-wild exploitation.

Exploit-DB · Aug 17, 2026Exploit / PoC1

[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

An unauthenticated arbitrary file upload exploit was released for a WooCommerce component version 1.5.0, risking site compromise.

Exploit-DB published exploit #52642 targeting WooCommerce 1.5.0. The flaw allows unauthenticated arbitrary file uploads, which can lead to remote code execution on affected web servers. The disclosure text does not report exploitation in the wild.

Exploit-DB · Aug 17, 2026Exploit / PoC

[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

Exploit demonstrates arbitrary file read via SSRF in Planyo Online Reservation System 3.0.

Exploit-DB entry 52636 documents an arbitrary file read vulnerability in Planyo Online Reservation System version 3.0, reachable through a server-side request forgery condition. The public PoC shows how the web application can be manipulated to fetch and disclose local files. Sites running the vulnerable version could expose sensitive server files.

Exploit-DB · Aug 11, 2026Exploit / PoC

[webapps] Blocksy Companion 2.1.46 - RCE

Public RCE exploit published for Blocksy Companion 2.1.46, a popular WordPress plugin by CreativeThemes.

Exploit-DB entry 52640 documents a remote code execution vulnerability in Blocksy Companion version 2.1.46, a widely installed WordPress page-building plugin. A public exploit allows attackers to achieve code execution on sites running the vulnerable plugin version. Administrators should verify the installed version and update if a patched release is available.

Exploit-DB · Aug 11, 2026Exploit / PoC

[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion

Public exploit released for directory traversal and local file inclusion in Ray 2.56.0, the widely used distributed ML framework.

Exploit-DB entry 52635 publishes a web application exploit targeting Ray 2.56.0, the distributed computing framework from Anyscale commonly used for ML workloads. The PoC demonstrates a directory traversal and local file inclusion condition, allowing attackers to read files outside the intended path on an exposed Ray instance. Ray dashboard instances exposed to the internet could leak sensitive files such as credentials and configuration.

Exploit-DB · Aug 11, 2026Exploit / PoC

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

Exploit-DB publishes unauthenticated remote code execution exploit for Orkes Conductor 3.30.2 workflow orchestration platform.

A public exploit demonstrates unauthenticated remote code execution in Orkes Conductor version 3.30.2. The flaw allows arbitrary code execution on exposed Conductor instances without any authentication. Organizations running the workflow orchestration platform should patch or restrict exposure immediately.

Exploit-DB · Aug 10, 2026Exploit / PoC

[webapps] CorgetGpsDget 2_3.2 - OS Command Injection

Exploit-DB publishes OS command injection exploit for the obscure CorgetGpsDget 2_3.2 web application.

A public exploit demonstrates OS command injection in CorgetGpsDget version 2_3.2. The flaw could allow attackers to execute arbitrary operating system commands on the hosting server. The product appears to have limited deployment, reducing real-world exposure.

Exploit-DB · Aug 10, 2026Exploit / PoC