Exploit threats

454 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	KEVEPSS 62%	CVE-2026-0770Langflow 1.3.0 · Remote Code Execution Critical9.8KEVEPSS 62%2026-05-29Exploit-DB RSS FeedCVE-2026-0770 Langflow 1.3.0 - Remote Code Execution KEVEPSS 62%Report on CVE-2026-0770 Exploit CWE-829 #remote #web	Exploit-DB RSS Feed	2026-05-29
High	–	EPSS 1.5%	CVE-2026-44680https://github.com/mikro-orm/mikro-orm · MikroORM 7.0.13 · SQL Injection HighEPSS 1.5%2026-05-29Exploit-DB RSS FeedCVE-2026-44680 MikroORM 7.0.13 - SQL Injection EPSS 1.5%Exploit https://mikro-orm.io #web #exploit #docker / debian bookworm / node.js 18 / mariadb 10.x	Exploit-DB RSS Feed	2026-05-29
Critical	–		Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks Critical2026-05-28SecurityWeek Fortinet rolled out hotfixes for the security defect in April, warning that it had been exploited in the wild as a zero-day and urging immediate patching. The post Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks appeared first on SecurityWeek . Exploit	SecurityWeek	2026-05-28
Critical	–		CISA gives feds 4 days to patch actively exploited cPanel plugin flaw Critical2026-05-27Bleeping Computer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S.federal agencies four days to secure their servers against a critical vulnerability in the LiteSpeed cPanel user-end plugin, which is actively being exploited in attacks. [...] Exploit	Bleeping Computer	2026-05-27
Medium	–		Realtek rtl819x · Local Privilege Medium2026-05-27Exploit-DB RSS Feed Realtek rtl819x - Local Privilege Exploit #local #exploit	Exploit-DB RSS Feed	2026-05-27
High	–		MeiG Smart FORGE_SLT711 · OS Command Injection High2026-05-27Exploit-DB RSS Feed MeiG Smart FORGE_SLT711 - OS Command Injection Exploit #exploit #meig forge_slt711 (ortel 4g lte cpe), qualcomm mdm9607, linux 3.18.48	Exploit-DB RSS Feed	2026-05-27
Critical	–		https://github.com/dedoc/scramble · scramble · Remote Code Execution Critical2026-05-27Exploit-DB RSS Feed scramble - Remote Code Execution Exploit https://scramble.dedoc.co #remote #web #exploit	Exploit-DB RSS Feed	2026-05-27
High	–		https://github.com/opencats/OpenCATS · OpenCATS 0.9.7.4 · SQL Injection High2026-05-27Exploit-DB RSS Feed OpenCATS 0.9.7.4 - SQL Injection Exploit https://www.opencats.org #web #exploit #ubuntu 22.04 / apache2 / php / mariadb 10.6	Exploit-DB RSS Feed	2026-05-27
Medium	–	EPSS 2.0%	CVE-2026-33534https://github.com/espocrm/espocrm/releases/tag/9.3.3 · EspoCRM 9.3.3 · SSRF MediumEPSS 2.0%2026-05-27Exploit-DB RSS FeedCVE-2026-33534 EspoCRM 9.3.3 - SSRF EPSS 2.0%Exploit https://www.espocrm.com #web #exploit #espocrm 9.3.3, debian/kali, apache/php	Exploit-DB RSS Feed	2026-05-27
Medium	–	EPSS 0.5%	CVE-2026-6815https://github.com/casdoor/casdoor · Casdoor 3.54.1 · Arbitrary File Write via Path Traversal MediumEPSS 0.5%2026-05-27Exploit-DB RSS FeedCVE-2026-6815 Casdoor 3.54.1 - Arbitrary File Write via Path Traversal EPSS 0.5%Exploit https://casdoor.org #web #exploit #linux / docker	Exploit-DB RSS Feed	2026-05-27
Critical	–		KnowledgeDeliver flaw exploited as a zero-day to install web shells Critical2026-05-26Bleeping Computer Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. [...] Exploit #web	Bleeping Computer	2026-05-26
High	–		CISA orders feds to patch actively exploited Drupal vulnerability High2026-05-26Bleeping Computer CISA has given U.S.government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively exploited. [...] Exploit	Bleeping Computer	2026-05-26
Critical	–		https://github.com/getgrav/grav · Grav CMS 2.0.0-beta.2 - Remote Code Execution Critical2026-05-26Exploit-DB RSS Feed Grav CMS 2.0.0-beta.2 - Remote Code Execution Exploit https://getgrav.org #remote #web #exploit	Exploit-DB RSS Feed	2026-05-26
High	–		Linux Kernel 6.8 · Local Privilege Escalation High2026-05-26Exploit-DB RSS Feed Linux Kernel 6.8 - Local Privilege Escalation Exploit #linux #local #exploit	Exploit-DB RSS Feed	2026-05-26
Medium	–		https://www.dlink.com · D-Link DSL2600U - 'rom-0' Admin Password Disclosure Medium2026-05-26Exploit-DB RSS Feed D-Link DSL2600U - 'rom-0' Admin Password Disclosure Exploit #exploit #ubuntu	Exploit-DB RSS Feed	2026-05-26
Medium	–		Ghost CMS Vulnerability Exploited to Hack Over 700 Websites Medium2026-05-25SecurityWeek Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack. The post Ghost CMS Vulnerability Exploited to Hack Over 700 Websites appeared first on SecurityWeek . Exploit #web	SecurityWeek	2026-05-25
Medium	–		https://github.com/frangoteam/FUXA · FUXA 1.2.9 · RCE Medium2026-05-21Exploit-DB RSS Feed FUXA 1.2.9 - RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-05-21
Medium	–		solaredge - (CSRF-OOB-Injection) Medium2026-05-21Exploit-DB RSS Feed solaredge - (CSRF-OOB-Injection) Exploit SolarEdge Technologies #web #csrf #exploit	Exploit-DB RSS Feed	2026-05-21
Medium	–		https://support.lenovo.com/es/es/solutions/legion_space · Lenovo LegionSpace 1.7.11.2 · 'DAService' Unquoted Service Path Medium2026-05-21Exploit-DB RSS Feed Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path Exploit #local #exploit	Exploit-DB RSS Feed	2026-05-21
Medium	–		https://github.com/BookStackApp/BookStack · BookStack 25.12.1 · Denial of Service Medium2026-05-21Exploit-DB RSS Feed BookStack 25.12.1 - Denial of Service Exploit https://www.bookstackapp.com #web #exploit #bookstack v25.12 (docker) + php 8.3 + mysql 8.0	Exploit-DB RSS Feed	2026-05-21

Page 7 of 23