<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Exploit-DB.com RSS Feed</title>
        <link>https://www.exploit-db.com</link>
        <atom:link href="https://www.exploit-db.com/rss.xml" rel="self" type="application/rss+xml" />
        <language>en-us</language>
        <description>The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.</description>
        <pubDate>Thu, 13 Aug 2026 15:00:05 +0000</pubDate>
        <lastBuildDate>Thu, 13 Aug 2026 15:00:05 +0000</lastBuildDate>
        <copyright></copyright>
         <item>
            <title>[webapps] Apache Gravitino 1.2.1 - SSRF</title>
            <link>https://www.exploit-db.com/exploits/52641</link>
            <description>Apache Gravitino 1.2.1 - SSRF</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52641</guid>
        </item>
         <item>
            <title>[webapps] Blocksy Companion  2.1.46 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52640</link>
            <description>Blocksy Companion  2.1.46 - RCE</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52640</guid>
        </item>
         <item>
            <title>[remote] PraisonAI praisonaiagents  1.6.77 - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52639</link>
            <description>PraisonAI praisonaiagents  1.6.77 - Remote Code Execution</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52639</guid>
        </item>
         <item>
            <title>[remote] mcp-server-kubernetes 3.8.x - Argument Injection</title>
            <link>https://www.exploit-db.com/exploits/52638</link>
            <description>mcp-server-kubernetes 3.8.x - Argument Injection</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52638</guid>
        </item>
         <item>
            <title>[dos] LuCI DHCPv6 -  Lease Hostname Stored Cross-Site Scripting</title>
            <link>https://www.exploit-db.com/exploits/52637</link>
            <description>LuCI DHCPv6 -  Lease Hostname Stored Cross-Site Scripting</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52637</guid>
        </item>
         <item>
            <title>[webapps] Planyo_Online_Reservation_System  3.0 - Arbitrary File Read via SSRF</title>
            <link>https://www.exploit-db.com/exploits/52636</link>
            <description>Planyo_Online_Reservation_System  3.0 - Arbitrary File Read via SSRF</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52636</guid>
        </item>
         <item>
            <title>[webapps] Ray 2.56.0 - Directory Traversal &amp; Local File Inclusion</title>
            <link>https://www.exploit-db.com/exploits/52635</link>
            <description>Ray 2.56.0 - Directory Traversal &amp; Local File Inclusion</description>
            <pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52635</guid>
        </item>
         <item>
            <title>[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52633</link>
            <description>OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52633</guid>
        </item>
         <item>
            <title>[local] Microsoft Edge 150.0.4078.48 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52632</link>
            <description>Microsoft Edge 150.0.4078.48 - RCE</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52632</guid>
        </item>
         <item>
            <title>[webapps] CorgetGpsDget 2_3.2 - OS Command Injection</title>
            <link>https://www.exploit-db.com/exploits/52631</link>
            <description>CorgetGpsDget 2_3.2 - OS Command Injection</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52631</guid>
        </item>
         <item>
            <title>[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52630</link>
            <description>Joomla 2.9.99.4 - Unauthenticated Remote Code Execution</description>
            <pubDate>Mon, 10 Aug 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52630</guid>
        </item>
         <item>
            <title>[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52629</link>
            <description>Krayin CRM v2.2.x - Authenticated Remote Code Execution</description>
            <pubDate>Wed, 08 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52629</guid>
        </item>
         <item>
            <title>[webapps] Atarim WordPress Plugin  4.2.2 - Sensitive Information Exposure</title>
            <link>https://www.exploit-db.com/exploits/52628</link>
            <description>Atarim WordPress Plugin  4.2.2 - Sensitive Information Exposure</description>
            <pubDate>Wed, 08 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52628</guid>
        </item>
         <item>
            <title>[webapps] Langflow 1.9.0 - RCE</title>
            <link>https://www.exploit-db.com/exploits/52627</link>
            <description>Langflow 1.9.0 - RCE</description>
            <pubDate>Wed, 08 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52627</guid>
        </item>
         <item>
            <title>[webapps] Joomla Page Builder CK  3.5.10 -  Arbitrary File Upload</title>
            <link>https://www.exploit-db.com/exploits/52626</link>
            <description>Joomla Page Builder CK  3.5.10 -  Arbitrary File Upload</description>
            <pubDate>Wed, 08 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52626</guid>
        </item>
         <item>
            <title>[webapps] MCPJam Inspector - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52625</link>
            <description>MCPJam Inspector - Remote Code Execution</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52625</guid>
        </item>
         <item>
            <title>[local] ProtonVPN v4.4.1 - Unquoted Service Path</title>
            <link>https://www.exploit-db.com/exploits/52624</link>
            <description>ProtonVPN v4.4.1 - Unquoted Service Path</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52624</guid>
        </item>
         <item>
            <title>[webapps] Flowise  3.1.3 - arbitrary code execution</title>
            <link>https://www.exploit-db.com/exploits/52623</link>
            <description>Flowise  3.1.3 - arbitrary code execution</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52623</guid>
        </item>
         <item>
            <title>[remote] Hydra - Stack Buffer Overflow</title>
            <link>https://www.exploit-db.com/exploits/52622</link>
            <description>Hydra - Stack Buffer Overflow</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52622</guid>
        </item>
         <item>
            <title>[webapps] Discuz! X5.0 - Authentication Bypass</title>
            <link>https://www.exploit-db.com/exploits/52621</link>
            <description>Discuz! X5.0 - Authentication Bypass</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52621</guid>
        </item>
         <item>
            <title>[webapps] Tenable Nessus 10.12.1 - SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52620</link>
            <description>Tenable Nessus 10.12.1 - SQL Injection</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52620</guid>
        </item>
         <item>
            <title>[webapps] WordPress Bricks Builder Theme  -  RCE</title>
            <link>https://www.exploit-db.com/exploits/52619</link>
            <description>WordPress Bricks Builder Theme  -  RCE</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52619</guid>
        </item>
         <item>
            <title>[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter</title>
            <link>https://www.exploit-db.com/exploits/52618</link>
            <description>iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter</description>
            <pubDate>Tue, 07 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52618</guid>
        </item>
         <item>
            <title>[webapps] Joomla Extension 4.1.4 - PHP Object injection</title>
            <link>https://www.exploit-db.com/exploits/52617</link>
            <description>Joomla Extension 4.1.4 - PHP Object injection</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52617</guid>
        </item>
         <item>
            <title>[webapps] Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass</title>
            <link>https://www.exploit-db.com/exploits/52616</link>
            <description>Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52616</guid>
        </item>
         <item>
            <title>[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation</title>
            <link>https://www.exploit-db.com/exploits/52615</link>
            <description>MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52615</guid>
        </item>
         <item>
            <title>[webapps] KeepInMind 0.8.4.2 -  Stored XSS</title>
            <link>https://www.exploit-db.com/exploits/52614</link>
            <description>KeepInMind 0.8.4.2 -  Stored XSS</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52614</guid>
        </item>
         <item>
            <title>[webapps] KNX visualisering - Broken Access Control</title>
            <link>https://www.exploit-db.com/exploits/52613</link>
            <description>KNX visualisering - Broken Access Control</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52613</guid>
        </item>
         <item>
            <title>[local] Windows Defender (MsMpEng.exe) - Race Condition</title>
            <link>https://www.exploit-db.com/exploits/52612</link>
            <description>Windows Defender (MsMpEng.exe) - Race Condition</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52612</guid>
        </item>
         <item>
            <title>[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 -  Reflected Cross-Site Scripting (XSS)</title>
            <link>https://www.exploit-db.com/exploits/52611</link>
            <description>WordPress Plugin WPZOOM Portfolio 1.4.21 -  Reflected Cross-Site Scripting (XSS)</description>
            <pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52611</guid>
        </item>
         <item>
            <title>[webapps] OpenEMR 7.0.2 - Arbitrary File Read</title>
            <link>https://www.exploit-db.com/exploits/52610</link>
            <description>OpenEMR 7.0.2 - Arbitrary File Read</description>
            <pubDate>Mon, 08 Jun 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52610</guid>
        </item>
         <item>
            <title>[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52609</link>
            <description>WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection</description>
            <pubDate>Fri, 05 Jun 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52609</guid>
        </item>
         <item>
            <title>[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52608</link>
            <description>Drupal Core 10.5.5 - Error-Based SQL Injection</description>
            <pubDate>Mon, 01 Jun 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52608</guid>
        </item>
         <item>
            <title>[webapps] WordPress OrderConvo 14 - Path Traversal</title>
            <link>https://www.exploit-db.com/exploits/52607</link>
            <description>WordPress OrderConvo 14 - Path Traversal</description>
            <pubDate>Mon, 01 Jun 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52607</guid>
        </item>
         <item>
            <title>[remote] Notepad++ 8.9.6 - Arbitrary Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52606</link>
            <description>Notepad++ 8.9.6 - Arbitrary Code Execution</description>
            <pubDate>Sat, 30 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52606</guid>
        </item>
         <item>
            <title>[webapps] YAMCS yamcs-core  5.12.7 - No Rate Limiting</title>
            <link>https://www.exploit-db.com/exploits/52605</link>
            <description>YAMCS yamcs-core  5.12.7 - No Rate Limiting</description>
            <pubDate>Sat, 30 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52605</guid>
        </item>
         <item>
            <title>[webapps] YAMCS yamcs-core  5.12.7 - User Enumeration</title>
            <link>https://www.exploit-db.com/exploits/52604</link>
            <description>YAMCS yamcs-core  5.12.7 - User Enumeration</description>
            <pubDate>Sat, 30 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52604</guid>
        </item>
         <item>
            <title>[webapps] YAMCS yamcs-core  5.12.7 - LDAP Injection</title>
            <link>https://www.exploit-db.com/exploits/52603</link>
            <description>YAMCS yamcs-core  5.12.7 - LDAP Injection</description>
            <pubDate>Sat, 30 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52603</guid>
        </item>
         <item>
            <title>[remote] Microsoft - NTLMv2 Hash Capture</title>
            <link>https://www.exploit-db.com/exploits/52601</link>
            <description>Microsoft - NTLMv2 Hash Capture</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52601</guid>
        </item>
         <item>
            <title>[webapps] MikroORM   7.0.13 - SQL Injection</title>
            <link>https://www.exploit-db.com/exploits/52600</link>
            <description>MikroORM   7.0.13 - SQL Injection</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52600</guid>
        </item>
         <item>
            <title>[webapps] Prodigy Commerce 3.3.0 - Local File Inclusion</title>
            <link>https://www.exploit-db.com/exploits/52598</link>
            <description>Prodigy Commerce 3.3.0 - Local File Inclusion</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52598</guid>
        </item>
         <item>
            <title>[webapps] Langflow 1.3.0 - Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52597</link>
            <description>Langflow 1.3.0 - Remote Code Execution</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52597</guid>
        </item>
         <item>
            <title>[webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52596</link>
            <description>Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52596</guid>
        </item>
         <item>
            <title>[local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion</title>
            <link>https://www.exploit-db.com/exploits/52595</link>
            <description>ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52595</guid>
        </item>
         <item>
            <title>[local] ZTE Routers  - Unauthenticated Denial of Service</title>
            <link>https://www.exploit-db.com/exploits/52594</link>
            <description>ZTE Routers  - Unauthenticated Denial of Service</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52594</guid>
        </item>
         <item>
            <title>[local] ZTE ZXHN H188A V6 - Authentication Bypass</title>
            <link>https://www.exploit-db.com/exploits/52593</link>
            <description>ZTE ZXHN H188A V6 - Authentication Bypass</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52593</guid>
        </item>
         <item>
            <title>[local] ZTE H298A / H108N - Unauthenticated Credential Exposure</title>
            <link>https://www.exploit-db.com/exploits/52592</link>
            <description>ZTE H298A / H108N - Unauthenticated Credential Exposure</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52592</guid>
        </item>
         <item>
            <title>[local] Linux Kernel -  Local Privilege Escalation</title>
            <link>https://www.exploit-db.com/exploits/52591</link>
            <description>Linux Kernel -  Local Privilege Escalation</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52591</guid>
        </item>
         <item>
            <title>[webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52590</link>
            <description>MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52590</guid>
        </item>
         <item>
            <title>[remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution</title>
            <link>https://www.exploit-db.com/exploits/52589</link>
            <description>Wing FTP Server 8.1.3 - Authenticated Remote Code Execution</description>
            <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
            <guid isPermaLink='true'>https://www.exploit-db.com/exploits/52589</guid>
        </item>
    </channel>
</rss>