Exploit intelligence
Public proof-of-concept and exploit references linked to known vulnerabilities — 34,643 tracked.
CVE-2026-42167HIGH8.1exploit-db · exploit-dbCVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCEby youcef-!
Exploit
1d agoCVE-2025-4871MEDIUM6.9exploit-db · exploit-dbPCMan 2.0.7 - Buffer Overflowby Thiago Cunha
Exploit
8d agoCVE-2026-3891CRITICAL9.8exploit-db · exploit-dbWooCommerce 1.5.0 - Unauthenticated Arbitrary File Uploadby Mohammad Hossein Sadeghian
Exploit
9d agoCVE-2026-14620MEDIUM4.7exploit-db · exploit-dbwebpack_devserver 5.2.5 - CSRFby Jorge González Milla
Exploit
9d agoCVE-2026-48907CRITICAL10.0exploit-db · exploit-dbJoomla JCE_2.9.15 - Remote Code Executionby Jared Brits
CISA KEVExploitHigh EPSS
9d agoCVE-2026-58058MEDIUM6.9exploit-db · exploit-dbNmap 7.99 - Extension Header Integer Underflowby banyamer
Exploit
9d agoCVE-2024-10914CRITICAL9.2exploit-db · exploit-dbD-Link DNS_340L - OS Command Injectionby Jared Brits
ExploitHigh EPSS
9d agoCVE-2026-3576HIGH7.2exploit-db · exploit-dbPlanyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRFby Balachandar Gowrisankar
Exploit
15d agoCVE-2026-58480CRITICAL9.2exploit-db · exploit-dbBlocksy Companion 2.1.46 - RCEby banyamer
Exploit
15d agoCVE-2026-61447CRITICAL10.0exploit-db · exploit-dbPraisonAI praisonaiagents 1.6.77 - Remote Code Executionby banyamer
Exploit
15d agoCVE-2026-61459CRITICAL9.3exploit-db · exploit-dbmcp-server-kubernetes 3.8.x - Argument Injectionby banyamer
Exploit
15d agoCVE-2026-61876CRITICAL9.4exploit-db · exploit-dbLuCI DHCPv6 - Lease Hostname Stored Cross-Site Scriptingby banyamer
Exploit
15d agoCVE-2026-58138CRITICAL9.3exploit-db · exploit-dbOrkesConductor 3.30.2 - Unauthenticated Remote Code Executionby banyamer
Exploit
16d agoCVE-2026-48907CRITICAL10.0exploit-db · exploit-dbJoomla 2.9.99.4 - Unauthenticated Remote Code Executionby Jared Brits
CISA KEVExploitHigh EPSS
16d agoCVE-2026-58289CRITICAL9.0exploit-db · exploit-dbMicrosoft Edge 150.0.4078.48 - RCEby banyamer
Exploit
16d agoCVE-2026-33017CRITICAL9.3exploit-db · exploit-dbLangflow 1.9.0 - RCEby Diamorphine
CISA KEVExploitHigh EPSS
7/9/2026CVE-2026-38526CRITICAL9.9exploit-db · exploit-dbKrayin CRM v2.2.x - Authenticated Remote Code Executionby Diamorphine
Exploit
7/9/2026CVE-2026-56290CRITICAL10.0exploit-db · exploit-dbJoomla Page Builder CK 3.5.10 - Arbitrary File Uploadby M@rAz Ali
CISA KEVExploit
7/9/2026CVE-2025-60188HIGH7.5exploit-db · exploit-dbAtarim WordPress Plugin 4.2.2 - Sensitive Information Exposureby Mohammad Hossein Sadeghian
Exploit
7/9/2026CVE-2024-25600CRITICAL10.0exploit-db · exploit-dbWordPress Bricks Builder Theme - RCEby Jared Brits
ExploitHigh EPSS
7/8/2026CVE-2026-57588LOW1.6exploit-db · exploit-dbTenable Nessus 10.12.1 - SQL Injectionby banyamer
Exploit
7/8/2026CVE-2026-23744CRITICAL9.8exploit-db · exploit-dbMCPJam Inspector - Remote Code Executionby Diamorphine
Exploit
7/8/2026CVE-2026-58057LOW2.3exploit-db · exploit-dbFlowise 3.1.3 - arbitrary code executionby banyamer
Exploit
7/8/2026CVE-2026-49952CRITICAL9.3exploit-db · exploit-dbDiscuz! X5.0 - Authentication Bypassby banyamer
Exploit
7/8/2026CVE-2026-36213HIGH7.8exploit-db · exploit-dbMEmu Android Emulator 9.2.7.0 - Local Privilege Escalationby Mohammad
Exploit
7/7/2026CVE-2026-48909CRITICAL9.5exploit-db · exploit-dbJoomla Extension 4.1.4 - PHP Object injectionby Amin İsayev
Exploit
7/7/2026CVE-2026-49069HIGH7.1exploit-db · exploit-dbWordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)by Kent Apostol
Exploit
7/7/2026CVE-2026-44225CRITICAL9.3exploit-db · exploit-dbPulpy 0.1.1-Beta - Filesystem Sandbox Bypassby Onur BILICI
Exploit
7/7/2026CVE-2026-9271MEDIUM5.9exploit-db · exploit-dbKeepInMind 0.8.4.2 - Stored XSSby Pavan N
Exploit
7/7/2026CVE-2026-24849CRITICAL10.0exploit-db · exploit-dbOpenEMR 7.0.2 - Arbitrary File Readby doany1
Exploit
7/1/2026CVE-2026-3180HIGH7.5exploit-db · exploit-dbWordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injectionby cardosource
Exploit
7/1/2026CVE-2026-9082MEDIUM6.5exploit-db · exploit-dbDrupal Core 10.5.5 - Error-Based SQL Injectionby cardosource
CISA KEVExploitHigh EPSS
7/1/2026CVE-2025-10162HIGH7.5exploit-db · exploit-dbWordPress OrderConvo 14 - Path Traversalby Diamorphine
Exploit
7/1/2026CVE-2026-44595MEDIUM4.3exploit-db · exploit-dbYAMCS yamcs-core 5.12.7 - User Enumerationby Daniel Miranda
Exploit
7/17/2026CVE-2026-44596MEDIUM6.5exploit-db · exploit-dbYAMCS yamcs-core 5.12.7 - No Rate Limitingby Daniel Miranda
Exploit
7/17/2026CVE-2026-48778HIGH7.8exploit-db · exploit-dbNotepad++ 8.9.6 - Arbitrary Code Executionby Kavin Jindal
Exploit
7/1/2026CVE-2026-42568MEDIUM4.3exploit-db · exploit-dbYAMCS yamcs-core 5.12.7 - LDAP Injectionby Daniel Miranda
Exploit
7/1/2026CVE-2026-32202MEDIUM4.3exploit-db · exploit-dbMicrosoft - NTLMv2 Hash Captureby nu11secur1ty
CISA KEVExploitHigh EPSS
7/1/2026CVE-2026-42471HIGH8.1exploit-db · exploit-dbMixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Executionby cardosource
Exploit
7/1/2026CVE-2026-1830CRITICAL9.8exploit-db · exploit-dbQuick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Executionby cardosource
Exploit
7/1/2026CVE-2026-0926CRITICAL9.8exploit-db · exploit-dbProdigy Commerce 3.3.0 - Local File Inclusionby Diamorphine
Exploit
7/1/2026CVE-2026-44680HIGH7.6exploit-db · exploit-dbMikroORM 7.0.13 - SQL Injectionby cardosource
Exploit
7/1/2026CVE-2026-0770CRITICAL9.8exploit-db · exploit-dbLangflow 1.3.0 - Remote Code Executionby Diamorphine
CISA KEVExploitHigh EPSS
7/1/2026CVE-2026-44376MEDIUM6.1exploit-db · exploit-dbCubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)by Th3-SAx11
Exploit
7/1/2026CVE-2026-44403HIGH8.6exploit-db · exploit-dbWing FTP Server 8.1.3 - Authenticated Remote Code Executionby Ünsal Furkan Harani
Exploit
7/1/2026CVE-2026-34472HIGH7.1exploit-db · exploit-dbZTE ZXHN H188A V6 - Authentication Bypassby Mina Nageh Salalma
Exploit
7/1/2026CVE-2026-34473HIGH7.5exploit-db · exploit-dbZTE Routers - Unauthenticated Denial of Serviceby Mina Nageh Salalma
Exploit
7/1/2026CVE-2026-34474HIGH7.5exploit-db · exploit-dbZTE H298A / H108N - Unauthenticated Credential Exposureby Mina Nageh Salalma
Exploit
7/1/2026