Exploits

Marimo 0.20.4 - RCE

PodcastGenerator 3.2.9 - Stored XSS

Ghost_CMS 6.19.0 - Remote Code Execution

Langflow 1.10.0 - RCE

EVerest 2025.9.0 - DoS

Wolf CMS 0.8.3.1 - RCE v

Payload CMS 3.72.0 - Blind SQL Injection

Bludit CMS - Stored XSS

Grav CMS 2.0.7 - RCE

miniOrange 5.4.3 - Unauthenticated Auth Bypass

EasyAppointments 1.5.1 - Blind SQL Injection

C-MOR 6.0104 - Directory Traversal

C-MOR 6.0104 - Cross-Site Scripting (XSS)

CubeCart 6.7.4 - SQL injection

CubeCart 6.7.4 - SQL

CubeCart 6.7.4 - Stored XSS

CubeCart 6.7.4 - Cross-Site Scripting

Linksys E1200_2.0.04 - Unauthenticated OS Command Injection