MEDIUM

[webapps] C-MOR 6.0104 - Directory Traversal

Exploit-DB • Aug 31, 2026

MEDIUM

[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)

Exploit-DB • Aug 31, 2026

MEDIUM

[webapps] CubeCart 6.7.4 - SQL injection

Exploit-DB • Aug 31, 2026

MEDIUM

[webapps] CubeCart 6.7.4 - SQL

Exploit-DB • Aug 31, 2026

MEDIUM

[webapps] CubeCart 6.7.4 - Stored XSS

Exploit-DB • Aug 31, 2026

MEDIUM

[webapps] CubeCart 6.7.4 - Cross-Site Scripting

Exploit-DB • Aug 31, 2026

HIGH

[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution

Exploit-DB • Aug 31, 2026

HIGH

[webapps] flyto-core 2.26.7 - Arbitrary File Write

Exploit-DB • Aug 18, 2026

MEDIUM

[webapps] Discuz! X5.0 - Authentication Bypass

Exploit-DB • Jul 07, 2026

HIGH

[webapps] Tenable Nessus 10.12.1 - SQL Injection

Exploit-DB • Jul 07, 2026

MEDIUM

[webapps] KeepInMind 0.8.4.2 - Stored XSS

Exploit-DB • Jul 06, 2026

MEDIUM

[webapps] KNX visualisering - Broken Access Control

Exploit-DB • Jul 06, 2026

MEDIUM

[webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting

Exploit-DB • May 30, 2026

MEDIUM

[webapps] YAMCS yamcs-core 5.12.7 - User Enumeration

Exploit-DB • May 30, 2026

MEDIUM

[webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection

Exploit-DB • May 30, 2026

HIGH

[webapps] scramble - Remote Code Execution

Exploit-DB • May 27, 2026

MEDIUM

[webapps] OpenCATS 0.9.7.4 - SQL Injection

Exploit-DB • May 27, 2026

CRITICAL

[webapps] FUXA 1.2.9 - RCE

Exploit-DB • May 21, 2026

INFO

Chromium: CVE-2026-8019 Insufficient policy enforcement in WebApp

Microsoft Security Response Center • May 07, 2026

MEDIUM

[webapps] Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)

Exploit-DB • May 04, 2026

HIGH

[webapps] WeGIA 3.5.0 - SQL Injection

Exploit-DB • Mar 03, 2026

MEDIUM

[webapps] Boss Mini v1.4.0 - Local File Inclusion (LFI)

Exploit-DB • Mar 03, 2026

MEDIUM

[webapps] RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS)

Exploit-DB • Feb 02, 2026