Exploit for CVE-2026-28443

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /{projectId}/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0.

Published: 2026-03-05

CVSS: 9.8

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download Exploit for CVE-2026-28443 here:

Use Tor Browser to access .onion site.

https://sonitex.com/exploit-373-cve-2026-2584/

https://sonitex.com/exploit-131-cve-2024-58041/

https://sonitex.com/exploit-674-cve-2026-3808/

https://sonitex.com/exploit-299-cve-2026-25945/

https://sonitex.com/exploit-473-cve-2026-28783/