[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE Reviewed by Hackers Spot on 04:44 Rating: 5

[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] Marimo 0.20.4 - RCE Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection Reviewed by Hackers Spot on 06:44 Rating: 5

[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution Reviewed by Hackers Spot on 06:44 Rating: 5

[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE Reviewed by Hackers Spot on 09:44 Rating: 5

[webapps] flyto-core 2.26.7 - Arbitrary File Write Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF Reviewed by Hackers Spot on 06:44 Rating: 5

[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload Reviewed by Hackers Spot on 07:44 Rating: 5

[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion Reviewed by Hackers Spot on 06:44 Rating: 5

[local] Microsoft Edge 150.0.4078.48 - RCE Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution Reviewed by Hackers Spot on 06:44 Rating: 5

[webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Reviewed by Hackers Spot on 06:44 Rating: 5

[webapps] WordPress Bricks Builder Theme - RCE Reviewed by Hackers Spot on 06:44 Rating: 5

[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter Reviewed by Hackers Spot on 05:44 Rating: 5

[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Reviewed by Hackers Spot on 06:44 Rating: 5

[webapps] OpenEMR 7.0.2 - Arbitrary File Read Reviewed by Hackers Spot on 07:44 Rating: 5

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection Reviewed by Hackers Spot on 04:44 Rating: 5