PoC Archive PoC Archive

tag

Low-Code

Budibase Unauthenticated NoSQL Operator Injection (CVE-2026-54350)
CVE-2026-54350 (GHSA-8qv3-p479-cj62) web Patched
CVE-2026-54350webCRITICAL 10Patched2026-07-27Budibase Authentication Bypass to Plugin-Upload Reverse Shell — CVE-2026-31816 EPSS 15%
CVE-2026-31816 web Unverified
CVE-2026-31816webCRITICALUnverified2026-07-05Appsmith Table Widget Stored XSS to Admin Account Takeover — CVE-2026-30862
CVE-2026-30862 (GHSA-5hw4-whxv-6794) web Patched
CVE-2026-30862webCRITICAL 9.1Patched2026-07-05