I have had some sort of a dorks page in the past on my blog. Continuing the tradition with a generic page that lists all such dorks from Shodan, ZoomEye, Fofa, Google, etc.
This research is published strictly for defensive posture improvement, vulnerability management, and threat detection engineering. No actionable exploit material or functional attack payloads are hosted or will be provided.
CVE-2026-67276: MikroTik RouterOS
shodan: http.title:"mikrotik routeros > administration"
fofa: title="mikrotik routeros > administration"
google: intitle:"mikrotik routeros > administration"CVE-2026-48710: Starlette
shodan: http.html:"starlette"
fofa: body="starlette"CVE-2026-21962: Oracle WebLogic Server
shodan: product:"Oracle HTTP Server" http.component:"weblogic" http.header:"X-WebLogic-KeepAlive"
fofa: app="Oracle-Fusion-Middleware" app="BEA-WebLogic-Server" header="X-WebLogic-KeepAlive" header="Server: Oracle-HTTP-Server"
censys: host.services.software.product:"Oracle HTTP Server" host.services.software.product:"WebLogic"
google: intitle:"Oracle HTTP Server" OR intitle:"WebLogic Server"CVE-2026-52715: GEO my WP plugin for WordPress SQL injection
shodan: http.html:"/wp-content/plugins/geo-my-wp/"