Exploit Database

Exploit Description	Date
Microsoft Exploit, NTLMv2 Hash Capture REMOTE Author: u11secur1t	2026/05/29
MikroORM 7.0.13 Exploit, SQL Injection WEBAPPS Author: ardosourc	2026/05/29
Prodigy Commerce 3.3.0 Exploit, Local File Inclusion WEBAPPS Author: iamorphin	2026/05/29
Langflow 1.3.0 Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/05/29
Quick Playground for WordPress 1.3.1 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
ImageMagick Exploit, Infinite Loop in the MIFF decoder can lead to CPU exhaustion LOCAL Author: Jose Rivas	2026/05/29
ZTE Routers Exploit, Unauthenticated Denial of Service LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE ZXHN H188A V6 Exploit, Authentication Bypass LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE H298A / H108N Exploit, Unauthenticated Credential Exposure LOCAL Author: Mina Nageh Salalma	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/29
MixPHP Framework 2.2.17 Exploit, Unsafe Deserialization Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
Wing FTP Server 8.1.3 Exploit, Authenticated Remote Code Execution REMOTE Author: Ünsal Furkan Harani	2026/05/29
CubeCart < 6.7.0 Exploit, Reflected Cross-Site Scripting (XSS) (Unauthenticated) WEBAPPS Author: h3-SAx1	2026/05/29
strongSwan 5.9.13 Exploit, libsimaka EAP-SIM/AKA heap buffer overflow REMOTE Author: Lukas Johannes Moeller	2026/05/29
strongSwan 5.9.13 Exploit, DoS DOS Author: Lukas Johannes Moeller	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/27
Casdoor 3.54.1 Exploit, Arbitrary File Write via Path Traversal WEBAPPS Author: ixpai	2026/05/27
EspoCRM 9.3.3 Exploit, SSRF WEBAPPS Author: Max Gabriel	2026/05/27
scramble Exploit, Remote Code Execution WEBAPPS Author: oshu	2026/05/27
MeiG Smart FORGE_SLT711 Exploit, OS Command Injection HARDWARE Author: Daniil Gordeev	2026/05/27
Realtek rtl819x Exploit, Local Privilege LOCAL Author: Daniil Gordeev	2026/05/27
OpenCATS 0.9.7.4 Exploit, SQL Injection WEBAPPS Author: Gabriel Rodrigues	2026/05/27
Grav CMS 2.0.0-beta.2 Exploit, Remote Code Execution WEBAPPS Author: Mustafa Murat Akgül	2026/05/26
Apache HTTP Server 2.4.66 Exploit, 'mod_http2' Double-Free Denial of Service WEBAPPS Author: lisunbu	2026/05/26
D-Link DSL2600U Exploit, 'rom-0' Admin Password Disclosure HARDWARE Author: Amir Hossein Jamshidi	2026/05/26
Wordpress Temporary Login Plugin 1.0.0 Exploit, 'temp-login-token' Authentication Bypass to Account Takeover WEBAPPS Author: Amir Hossein Jamshidi	2026/05/26
cPanel Exploit, CRLF Injection WEBAPPS Author: u11secur1t	2026/05/26
Linux Kernel 6.8 Exploit, Local Privilege Escalation LOCAL Author: Long Fong Chan	2026/05/26
Cockpit 359 Exploit, RCE WEBAPPS Author: Abdelazim Mohammed	2026/05/21
BookStack 25.12.1 Exploit, Denial of Service WEBAPPS Author: Gabriel Rodrigues	2026/05/21
Lenovo LegionSpace 1.7.11.2 Exploit, 'DAService' Unquoted Service Path LOCAL Author: ENACIF-M	2026/05/21
solaredge Exploit, (CSRF-OOB-Injection) WEBAPPS Author: u11secur1t	2026/05/21
FUXA 1.2.9 Exploit, RCE WEBAPPS Author: Anthony Cihan	2026/05/21
Windows Snipping Tool Exploit, NTLMv2 Hash Hijack LOCAL Author: u11secur1t	2026/05/15
Remote Sunrise Helper for Windows 2026.14 Exploit, Unauthenticated File/Directory Listing LOCAL Author: Chokri Hammedi	2026/05/15
Remote Sunrise Helper for Windows 2026.14 Exploit, Remote Code Execution LOCAL Author: Chokri Hammedi	2026/05/15
WordPress Plugin Supsystic Contact Form 1.7.36 Exploit, SSTI WEBAPPS Author: ootstrapboo	2026/05/14
Apache HertzBeat 1.8.0 Exploit, Remote Code Execution WEBAPPS Author: Brett Gervasoni	2026/05/14
ePati Antikor NGFW 2.0.1301 Exploit, Authentication Bypass WEBAPPS Author: adi	2026/05/14
PJPROJECT 2.16 Exploit, Heap Bufferoverflow WEBAPPS Author: abismo45	2026/05/14
Ninja Forms Uploads Exploit, Unauthenticated PHP File Upload WEBAPPS Author: elim.lanoua	2026/05/13
glances 4.5.2 Exploit, command injection WEBAPPS Author: est.sel	2026/05/13
coreruleset 4.21.0 Exploit, Firewall Bypass WEBAPPS Author: nonimiceru	2026/05/13
Flowise < 3.0.5 Exploit, Missing Authentication for Critical Function WEBAPPS Author: ndersoncezar04	2026/05/13
telnetd 2.7 Exploit, Buffer Overflow REMOTE Author: effbarro	2026/05/07
Ghost CMS 6.19.0 Exploit, SQLi WEBAPPS Author: Maksim Rogov	2026/05/07
LuaJIT 2.1.1774638290 Exploit, Arbitrary Code Execution WEBAPPS Author: Taurus Omar	2026/05/07
Bludit CMS 3.18.4 Exploit, RCE WEBAPPS Author: ahi	2026/05/07
NocoBase 2.0.27 Exploit, VM Sandbox Escape LOCAL Author: nurcangencbilken	2026/05/07
ThingsBoard IoT Platform 4.2.0 Exploit, Server-Side Request Forgery (SSRF) WEBAPPS Author: tamilmath	2026/05/07
Linux Kernel proc_readdir_de() 6.18-rc5 Exploit, Local Privilege Escalation LOCAL Author: viralyash2	2026/05/04
Linux nf_tables 6.19.3 Exploit, Local Privilege Escalation LOCAL Author: viralyash2	2026/05/04
Linksys E1200 2.0.04 Exploit, Authenticated Stack Buffer Overflow (RCE) HARDWARE Author: arret	2026/05/04
MindsDB 25.9.1.1 Exploit, Path Traversal WEBAPPS Author: hewhiteh4	2026/05/04
Windows 11 24H2 Exploit, Local Privilege Escalation LOCAL Author: 30250967	2026/05/04
Traccar GPS Tracking System 6.11.1 Exploit, Cross-Site WebSocket Hijacking (CSWSH) WEBAPPS Author: aza	2026/05/04
FUXA 1.2.8 Exploit, Authentication Bypass + RCE Exploit WEBAPPS Author: oshu	2026/04/30
Python-Multipart 0.0.22 Exploit, Path Traversal WEBAPPS Author: efersoncardoso.de	2026/04/30
Google Chrome 145.0.7632.75 Exploit, CSSFontFeatureValuesMap LOCAL Author: u11secur1t	2026/04/30
Windows 11 23H2 Exploit, Denial of Service (DoS) LOCAL Author: ryhardertry	2026/04/30
Repetier-Server 1.4.10 Exploit, Path Traversal WEBAPPS Author: anyame	2026/04/30
HUSTOJ Zip-Slip v26.01.24 Exploit, RCE WEBAPPS Author: Marshall Whittaker	2026/04/30
BusyBox 1.37.0 Exploit, Path Traversal WEBAPPS Author: Calil Khalil	2026/04/30
Windows 11 25H2 Exploit, Heap Overflow LOCAL Author: u11secur1t	2026/04/30
JUNG Smart Visu Server 1.1.1050 Exploit, Dos WEBAPPS Author: anyame	2026/04/30
SumatraPDF 3.5.2 Exploit, Remote Code Execution WEBAPPS Author: anyame	2026/04/30
NiceGUI 3.6.1 Exploit, Path Traversal WEBAPPS Author: anyame	2026/04/30
Frigate NVR 0.16.3 Exploit, Remote Code Execution WEBAPPS Author: duardo270	2026/04/30
Js2Py 0.74 Exploit, RCE WEBAPPS Author: lisunbu	2026/04/30
Camaleon CMS v2.9.0 Exploit, Path Traversal WEBAPPS Author: elampudisaksh	2026/04/30
Cybersecurity AI (CAI) Framework 0.5.10 Exploit, Command Injection WEBAPPS Author: anyame	2026/04/30
Erugo 0.2.14 Exploit, Remote Code Execution (RCE) WEBAPPS Author: bdulmoi	2026/04/30
deephas 1.0.7 Exploit, Prototype Pollution WEBAPPS Author: anyame	2026/04/30
SUSE Manager 4.3.15 Exploit, Code Execution WEBAPPS Author: jmaj9	2026/04/30
HAX CMS 24.x Exploit, Stored Cross-Site Scripting (XSS) WEBAPPS Author: anyame	2026/04/29
Craft CMS 5.6.16 Exploit, RCE WEBAPPS Author: anyame	2026/04/29
GNU InetUtils 2.6 Exploit, Telnetd Remote Privilege Escalation LOCAL Author: liguliye	2026/04/29
phpMyFAQ 4.0.16 Exploit, Improper Authorization WEBAPPS Author: ontac	2026/04/29
GeographicLib v2.5.1 Exploit, stack buffer overflow WEBAPPS Author: osari	2026/04/29
OpenWrt 23.05 Exploit, Authenticated Remote Code Execution (RCE) LOCAL Author: Ahmet Mersin	2026/04/29
OpenKM 6.3.12 Exploit, Multiple WEBAPPS Author: kuma	2026/04/29
GUnet OpenEclass E-learning platform < 4.2 Exploit, Remote Code Execution (RCE) WEBAPPS Author: nico007	2026/04/29
JuzaWeb CMS 3.4.2 Exploit, Authenticated Remote Code Execution WEBAPPS Author: ardordev0	2026/04/29
FacturaScripts 2025.43 Exploit, XSS WEBAPPS Author: vettrivel00	2026/04/29
Xibo CMS 4.3.0 Exploit, RCE via SSTI WEBAPPS Author: Cristian Branet	2026/04/29
Fedora Exploit, Local Privilege Escalation LOCAL Author: hri	2026/04/29
LangChain Core 1.2.4 Exploit, SSTI/RCE WEBAPPS Author: anyame	2026/04/29
Atlona ATOMERX21 Exploit, Authenticated Command Injection LOCAL Author: izzzio	2026/04/29
Throttlestop Kernel Driver Exploit, Kernel Out-of-Bounds Write Privilege Escalation LOCAL Author: Xavi Beltran	2026/04/22
WordPress Plugin 5.2.0 Exploit, Broken Access Control WEBAPPS Author: ydev.turin	2026/04/22
AVAST Antivirus 25.11 Exploit, Unquoted Service Path LOCAL Author: Milad Karimi (Ex3ptionaL)	2026/04/22
NetBT e-Fatura Exploit, Privilege Escalation LOCAL Author: eccop	2026/04/10
D-Link DIR-650IN Exploit, Authenticated Command Injection WEBAPPS Author: Sanjay Singh	2026/04/10
React Server 19.2.0 Exploit, Remote Code Execution WEBAPPS Author: anieljavanra	2026/04/09
RomM 4.4.0 Exploit, XSS_CSRF Chain WEBAPPS Author: mohammedhesham	2026/04/09
Jumbo Website Manager Exploit, Remote Code Execution WEBAPPS Author: Mirabbas Ağalarov	2026/04/09
ZSH 5.9 Exploit, RCE LOCAL Author: inanadilran	2026/04/09
FortiWeb 8.0.2 Exploit, Remote Code Execution WEBAPPS Author: Mohammed Idrees Banyamer	2026/04/08
7-Zip 24.00 Exploit, Directory Traversal LOCAL Author: Mohammed Idrees Banyamer	2026/04/08
xibocms 3.3.4 Exploit, RCE WEBAPPS Author: omplexusprad	2026/04/08

Microsoft Exploit, NTLMv2 Hash Capture
REMOTE Author: u11secur1t

2026/05/29

MikroORM 7.0.13 Exploit, SQL Injection
WEBAPPS Author: ardosourc

2026/05/29

Prodigy Commerce 3.3.0 Exploit, Local File Inclusion
WEBAPPS Author: iamorphin

2026/05/29

Langflow 1.3.0 Exploit, Remote Code Execution
WEBAPPS Author: iamorphin

2026/05/29

Quick Playground for WordPress 1.3.1 Exploit, Unauthenticated Remote Code Execution
WEBAPPS Author: ardosourc

2026/05/29

ImageMagick Exploit, Infinite Loop in the MIFF decoder can lead to CPU exhaustion
LOCAL Author: Jose Rivas

2026/05/29