HTTP2-Bomb

Ghost Content API SQL Injection

Math.js Expression Parser RCE

Langflow Arbitrary Directory Deletion

OpenClaw Authentication Token Exfiltration

Ni8mare, n8n RCE

Hibernate ORM Second-Order SQL Injection

SQL Injection vulnerability in MikroORM

Handlebars.js AST Injection Remote Code Execution Vulnerability

Sequelize JSON Cast SQL Injection

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal

Langflow RCE

Apache Tomcat RCE

React2Shell

Strongkey FIDO Server Authorization Bypass

Langflow Remote Code Execution

Next.js middleware bypass exploit

JSONPath-plus Remote Code Execution

Git clone Remote Code Execution exploit

Adobe Commerce XXE exploit

Pgadmin4 Sensitive Information Exposure

PfSense Stored XSS lead to Arbitrary Code Execution exploit

GiveWP PHP Object Injection exploit

File upload logic flaw in Apache Struts2 exploit

XSS to RCE in RenderTune v1.1.4 exploit

Arbitrary File Read and DoS in vendure-ecommerce exploit

GiveWP PHP Object Injection exploit

Exercise for the race condition attack

Cross-Site Scripting vulnerability in Advanced REST Client v.17.0.9 exploit