[remote] Ruflo MCP Bridge 3.16.2 - Remote Code Execution
Ruflo MCP Bridge 3.16.2 - Remote Code Execution
Exploit-DB 50
Covers: Vulnerabilities & Patching
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
[remote] Pro Soft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
[remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
[remote] Exasol Database 7.1.30 - command execution
Exasol Database 7.1.30 - command execution
[remote] Edimax BR-6478AC firmware v2.20 - authenticated command injection
Edimax BR-6478AC firmware v2.20 - authenticated command injection
[webapps] Automotive Shop Management System 1.0 - SQLi
Automotive Shop Management System 1.0 - SQLi
[webapps] Open eClass 3.15 - RCE
Open eClass 3.15 - RCE
[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover
Keycloak 26.7.2 - Unauthenticated Account Takeover
[remote] Synametrics Syncrify 6.2 - command execution
Synametrics Syncrify 6.2 - command execution
[remote] South River Technologies Titan MFT Server 26.0.0 - code execution
South River Technologies Titan MFT Server 26.0.0 - code execution
[webapps] pizzafy-1.0 - SQLi
pizzafy-1.0 - SQLi
[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
POMS oretnom23v1.0 - SQLi vulnerabilities
[webapps] Invoice Plane 1.7.1 - RCE
InvoicePlane 1.7.1 - RCE
[webapps] SuiteCRM 8.10.1 - Authenticated SSRF
SuiteCRM 8.10.1 - Authenticated SSRF
[webapps] Krayin CRM 2.2.4 - IDOR
Krayin CRM 2.2.4 - IDOR
[remote] Ecava_ntegra Xor IGX_16.0.701.10 - RCE
Ecava_ntegraXor IGX_16.0.701.10 - RCE
[webapps] Food-Ordering 1.0 - LFI
Food-Ordering 1.0 - LFI
[webapps] Word Press 7.0.2 - Path Travesal
WordPress 7.0.2 - Path Travesal
[webapps] Tiger Graph_Community_Edition 4.2.4 - arbitrary file write
TigerGraph_Community_Edition 4.2.4 - arbitrary file write
[remote] Teltonika_RutOS 00.07.06.21 - command injection
Teltonika_RutOS 00.07.06.21 - command injection
[remote] Mikro Trick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Metabase 0.61.0 - Authenticated Remote Code Execution
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
FreePBX 17.0.2 - Remote Code Execution (RCE)
[webapps] Marimo 0.20.4 - RCE
Marimo 0.20.4 - RCE
[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities
Fullhan FH8626V100 - Multiple Vulnerabilities
[webapps] Langflow 1.10.0 - RCE
Langflow 1.10.0 - RCE
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution
Ghost_CMS 6.19.0 - Remote Code Execution
[webapps] Podcast Generator 3.2.9 - Stored XSS
PodcastGenerator 3.2.9 - Stored XSS