[webapps] Langflow 1.3.0 - Remote Code ExecutionMay 29, 2026
exploit
Langflow 1.3.0 - Remote Code Execution
Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
ZTE Routers - Unauthenticated Denial of Service
ZTE ZXHN H188A V6 - Authentication Bypass
ZTE H298A / H108N - Unauthenticated Credential Exposure
MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication
CVE-2026-45659 Microsoft SharePoint Server Deserialization RCE.
Passive checker for CVE-2026-9082 / SA-CORE-2026-004 (Drupal core SQL injection, PostgreSQL)
CVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC