EXPLOITS – …it’s not IF, it’s WHEN.

[local] Windows 11 25H2 - Heap Overflow
Source: exploit-db Published on 2026-04-30
[webapps] BusyBox 1.37.0 - Path Traversal
Source: exploit-db Published on 2026-04-30
[webapps] SumatraPDF 3.5.2 - Remote Code Execution
Source: exploit-db Published on 2026-04-30
[webapps] NiceGUI 3.6.1 - Path Traversal
Source: exploit-db Published on 2026-04-30
[webapps] Js2Py 0.74 - RCE
Source: exploit-db Published on 2026-04-30
[webapps] Frigate NVR 0.16.3 - Remote Code Execution
Source: exploit-db Published on 2026-04-30
[webapps] HUSTOJ Zip-Slip v26.01.24 - RCE
Source: exploit-db Published on 2026-04-30
[local] Windows 11 23H2 - Denial of Service (DoS)
Source: exploit-db Published on 2026-04-30
[local] Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap
Source: exploit-db Published on 2026-04-30
[webapps] Repetier-Server 1.4.10 - Path Traversal
Source: exploit-db Published on 2026-04-30
[webapps] Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection
Source: exploit-db Published on 2026-04-30
[webapps] Python-Multipart 0.0.22 - Path Traversal
Source: exploit-db Published on 2026-04-30
[webapps] SUSE Manager 4.3.15 - Code Execution
Source: exploit-db Published on 2026-04-30
[webapps] FUXA 1.2.8 - Authentication Bypass + RCE Exploit
Source: exploit-db Published on 2026-04-30
[webapps] deephas 1.0.7 - Prototype Pollution
Source: exploit-db Published on 2026-04-30
[webapps] Erugo 0.2.14 - Remote Code Execution (RCE)
Source: exploit-db Published on 2026-04-30
[webapps] Camaleon CMS v2.9.0 - Path Traversal
Source: exploit-db Published on 2026-04-30
[webapps] JUNG Smart Visu Server 1.1.1050 - Dos
Source: exploit-db Published on 2026-04-30
[webapps] JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
Source: exploit-db Published on 2026-04-29
[webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
Source: exploit-db Published on 2026-04-29