Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 5m ago

#webapps — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#webapps

0 stories this week · 15 this month · 23 in 6 months · mostly security

stories per day · 30 days

Related#poc 12 #exploit-db 6 #cubecart 4 #rce 4 #sql-injection 4 #e-commerce 3 #exploit 3 #stored-xss 3 #xss 3 #blind-sqli 2 #bludit 2 #cms 2 #auth-bypass 1 #c-mor 1 #cross-site-scripting 1 #easyappointments 1 #freepbx 1 #grav-cms 1

23 stories, newest first · one card per story

Exploit-DB·24d ago

[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution

#exploit #exploit-db #metabase

Exploit / PoC

1

Exploit-DB·24d ago

[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)

#exploit #exploit-db #freepbx

Exploit / PoC

2

Exploit-DB·25d ago

[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

#bludit #cms #exploit-db

Exploit / PoC

1

Exploit-DB·25d ago

[webapps] PodcastGenerator 3.2.9 - Stored XSS

#exploit-db #poc #podcastgenerator

Exploit / PoC

1

Exploit-DB·26d ago

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection

#blind-sqli #easyappointments #poc

Exploit / PoC

1

Exploit-DB·26d ago

[webapps] Grav CMS 2.0.7 - RCE

#exploit #grav-cms #poc

Exploit / PoC

Exploit-DB·26d ago

[webapps] Payload CMS 3.72.0 - Blind SQL Injection

#blind-sqli #payload-cms #poc

Exploit / PoC

1

Exploit-DB·26d ago

[webapps] Bludit CMS - Stored XSS

#bludit #cms #exploit-db

Exploit / PoC

1

Exploit-DB·26d ago

[webapps] Wolf CMS 0.8.3.1 - RCE v

#poc #rce #webapps

Exploit / PoC

1

Exploit-DB·26d ago

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

#auth-bypass #miniorange #poc

Exploit / PoC

Exploit-DB·27d ago

[webapps] CubeCart 6.7.4 - Stored XSS

#cubecart #e-commerce #poc

Exploit / PoC

1

Exploit-DB·27d ago

[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)

#c-mor #poc #surveillance

Exploit / PoC

1

Exploit-DB·27d ago

[webapps] CubeCart 6.7.4 - SQL

#cubecart #e-commerce #poc

Exploit / PoC

1

Exploit-DB·27d ago

[webapps] CubeCart 6.7.4 - Cross-Site Scripting

#cross-site-scripting #cubecart #exploit-db

Exploit / PoC

Exploit-DB·27d ago

[webapps] CubeCart 6.7.4 - SQL injection

#cubecart #e-commerce #poc

Exploit / PoC

1

Exploit-DB·Aug 18, 2026

[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF

#exploit-db #linuxfabrik #monitoring

Exploit / PoC

1

Exploit-DB·Aug 18, 2026

[webapps] flyto-core 2.26.7 - Arbitrary File Write

#arbitrary-file-write #exploit-db #flyto-core

Exploit / PoC

Exploit-DB·Aug 11, 2026

[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

#file-read #planyo #poc

Exploit / PoC

Exploit-DB·Aug 11, 2026

[webapps] Apache Gravitino 1.2.1 - SSRF

#apache-gravitino #exploit-db #poc

Exploit / PoC

1

Exploit-DB·Aug 11, 2026 high

[webapps] Blocksy Companion 2.1.46 - RCE

#blocksy-companion #plugin #poc

Exploit / PoC

Exploit-DB·Aug 11, 2026

[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion

#anyscale #directory-traversal #lfi

Exploit / PoC

Exploit-DB·Aug 10, 2026

[webapps] CorgetGpsDget 2_3.2 - OS Command Injection

#command-injection #corgetgpsdget #exploit-db

Exploit / PoC

Exploit-DB·Aug 10, 2026 high

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

#conductor #exploit-db #orkes

Exploit / PoC

1