Exploit Database

Exploit Description	Date
PCMan 2.0.7 Exploit, Buffer Overflow REMOTE Author: Thiago Cunha	2026/08/18
NanaZip 6.5 Exploit, DoS DOS Author: Jorge González Milla	2026/08/18
flyto-core 2.26.7 Exploit, Arbitrary File Write WEBAPPS Author: Jorge González Milla	2026/08/18
Nodemailer 9.0.0 Exploit, File Read/ SSRF WEBAPPS Author: Jorge González Milla	2026/08/18
Linuxfabrik monitoring_plugins_6.0.0 Exploit, SSRF WEBAPPS Author: Jorge González Milla	2026/08/18
NanaZip 6.5 Exploit, DoS DOS Author: Jorge González Milla	2026/08/17
flyto_core 2.26.7 Exploit, Server-Side Request Forgery WEBAPPS Author: Jorge González Milla	2026/08/17
Probo 0.222.2 Exploit, IDOR WEBAPPS Author: Jorge González Milla	2026/08/17
webpack_devserver 5.2.5 Exploit, CSRF WEBAPPS Author: Jorge González Milla	2026/08/17
phpSysInfo 3.4.5 Exploit, IP Allowlist Bypass REMOTE Author: Muhammed Mirac Kayikci	2026/08/17
Nmap 7.99 Exploit, Extension Header Integer Underflow DOS Author: anyame	2026/08/17
Duplicati 2.2.0.3 Exploit, JWT Signing Key Leak WEBAPPS Author: Gabriel Rodrigues	2026/08/17
Joomla JCE_2.9.15 Exploit, Remote Code Execution WEBAPPS Author: Jared Brits	2026/08/17
ipTIME A3004T Exploit, Remote Code Execution REMOTE Author: accaro	2026/08/17
D-Link DNS_340L Exploit, OS Command Injection REMOTE Author: Jared Brits	2026/08/17
WooCommerce 1.5.0 Exploit, Unauthenticated Arbitrary File Upload WEBAPPS Author: Mohammad Hossein Sadeghian	2026/08/17
Apache Gravitino 1.2.1 Exploit, SSRF WEBAPPS Author: Ajay Rajpurohit	2026/08/11
Blocksy Companion 2.1.46 Exploit, RCE WEBAPPS Author: anyame	2026/08/11
PraisonAI praisonaiagents 1.6.77 Exploit, Remote Code Execution REMOTE Author: anyame	2026/08/11
mcp-server-kubernetes 3.8.x Exploit, Argument Injection REMOTE Author: anyame	2026/08/11
LuCI DHCPv6 Exploit, Lease Hostname Stored Cross-Site Scripting DOS Author: anyame	2026/08/11
Planyo_Online_Reservation_System 3.0 Exploit, Arbitrary File Read via SSRF WEBAPPS Author: Balachandar Gowrisankar	2026/08/11
Ray 2.56.0 Exploit, Directory Traversal & Local File Inclusion WEBAPPS Author: Richard Howe	2026/08/11
OrkesConductor 3.30.2 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: anyame	2026/08/10
Microsoft Edge 150.0.4078.48 Exploit, RCE LOCAL Author: anyame	2026/08/10
CorgetGpsDget 2_3.2 Exploit, OS Command Injection WEBAPPS Author: ytetobreac	2026/08/10
Joomla 2.9.99.4 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: Jared Brits	2026/08/10
Krayin CRM v2.2.x Exploit, Authenticated Remote Code Execution WEBAPPS Author: iamorphin	2026/07/08
Atarim WordPress Plugin 4.2.2 Exploit, Sensitive Information Exposure WEBAPPS Author: Mohammad Hossein Sadeghian	2026/07/08
Langflow 1.9.0 Exploit, RCE WEBAPPS Author: iamorphin	2026/07/08
Joomla Page Builder CK 3.5.10 Exploit, Arbitrary File Upload WEBAPPS Author: M@rAz Ali	2026/07/08
MCPJam Inspector Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/07/07
ProtonVPN v4.4.1 Exploit, Unquoted Service Path LOCAL Author: Milad karimi	2026/07/07
Flowise 3.1.3 Exploit, arbitrary code execution WEBAPPS Author: anyame	2026/07/07
Hydra Exploit, Stack Buffer Overflow REMOTE Author: anyame	2026/07/07
Discuz! X5.0 Exploit, Authentication Bypass WEBAPPS Author: anyame	2026/07/07
Tenable Nessus 10.12.1 Exploit, SQL Injection WEBAPPS Author: anyame	2026/07/07
WordPress Bricks Builder Theme Exploit, RCE WEBAPPS Author: Jared Brits	2026/07/07
iOS Bluetooth PAN Exploit Exploit, Ethernet Gateway without Adapter REMOTE Author: Fares Dahoumane	2026/07/07
Joomla Extension 4.1.4 Exploit, PHP Object injection WEBAPPS Author: Amin İsayev	2026/07/06
Pulpy 0.1.1-Beta Exploit, Filesystem Sandbox Bypass WEBAPPS Author: Onur BILICI	2026/07/06
MEmu Android Emulator 9.2.7.0 Exploit, Local Privilege Escalation LOCAL Author: ohamma	2026/07/06
KeepInMind 0.8.4.2 Exploit, Stored XSS WEBAPPS Author: Pavan N	2026/07/06
KNX visualisering Exploit, Broken Access Control WEBAPPS Author: Parsa Rezaie Khiabanloo	2026/07/06
Windows Defender (MsMpEng.exe) Exploit, Race Condition LOCAL Author: u11secur1t	2026/07/06
WordPress Plugin WPZOOM Portfolio 1.4.21 Exploit, Reflected Cross-Site Scripting (XSS) WEBAPPS Author: Kent Apostol	2026/07/06
OpenEMR 7.0.2 Exploit, Arbitrary File Read WEBAPPS Author: oany	2026/06/08
WordPress Contest Gallery 28.1.4 Exploit, Unauthenticated Blind SQL Injection WEBAPPS Author: ardosourc	2026/06/05
Drupal Core 10.5.5 Exploit, Error-Based SQL Injection WEBAPPS Author: ardosourc	2026/06/01
WordPress OrderConvo 14 Exploit, Path Traversal WEBAPPS Author: iamorphin	2026/06/01
Notepad++ 8.9.6 Exploit, Arbitrary Code Execution REMOTE Author: Kavin Jindal	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, No Rate Limiting WEBAPPS Author: Daniel Miranda	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, User Enumeration WEBAPPS Author: Daniel Miranda	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, LDAP Injection WEBAPPS Author: Daniel Miranda	2026/05/30
Microsoft Exploit, NTLMv2 Hash Capture REMOTE Author: u11secur1t	2026/05/29
MikroORM 7.0.13 Exploit, SQL Injection WEBAPPS Author: ardosourc	2026/05/29
Prodigy Commerce 3.3.0 Exploit, Local File Inclusion WEBAPPS Author: iamorphin	2026/05/29
Langflow 1.3.0 Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/05/29
Quick Playground for WordPress 1.3.1 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
ImageMagick Exploit, Infinite Loop in the MIFF decoder can lead to CPU exhaustion LOCAL Author: Jose Rivas	2026/05/29
ZTE Routers Exploit, Unauthenticated Denial of Service LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE ZXHN H188A V6 Exploit, Authentication Bypass LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE H298A / H108N Exploit, Unauthenticated Credential Exposure LOCAL Author: Mina Nageh Salalma	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/29
MixPHP Framework 2.2.17 Exploit, Unsafe Deserialization Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
Wing FTP Server 8.1.3 Exploit, Authenticated Remote Code Execution REMOTE Author: Ünsal Furkan Harani	2026/05/29
CubeCart < 6.7.0 Exploit, Reflected Cross-Site Scripting (XSS) (Unauthenticated) WEBAPPS Author: h3-SAx1	2026/05/29
strongSwan 5.9.13 Exploit, libsimaka EAP-SIM/AKA heap buffer overflow REMOTE Author: Lukas Johannes Moeller	2026/05/29
strongSwan 5.9.13 Exploit, DoS DOS Author: Lukas Johannes Moeller	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/27
Casdoor 3.54.1 Exploit, Arbitrary File Write via Path Traversal WEBAPPS Author: ixpai	2026/05/27
EspoCRM 9.3.3 Exploit, SSRF WEBAPPS Author: Max Gabriel	2026/05/27
scramble Exploit, Remote Code Execution WEBAPPS Author: oshu	2026/05/27
MeiG Smart FORGE_SLT711 Exploit, OS Command Injection HARDWARE Author: Daniil Gordeev	2026/05/27
Realtek rtl819x Exploit, Local Privilege LOCAL Author: Daniil Gordeev	2026/05/27
OpenCATS 0.9.7.4 Exploit, SQL Injection WEBAPPS Author: Gabriel Rodrigues	2026/05/27
Grav CMS 2.0.0-beta.2 Exploit, Remote Code Execution WEBAPPS Author: Mustafa Murat Akgül	2026/05/26
Apache HTTP Server 2.4.66 Exploit, 'mod_http2' Double-Free Denial of Service WEBAPPS Author: lisunbu	2026/05/26
D-Link DSL2600U Exploit, 'rom-0' Admin Password Disclosure HARDWARE Author: Amir Hossein Jamshidi	2026/05/26
Wordpress Temporary Login Plugin 1.0.0 Exploit, 'temp-login-token' Authentication Bypass to Account Takeover WEBAPPS Author: Amir Hossein Jamshidi	2026/05/26
cPanel Exploit, CRLF Injection WEBAPPS Author: u11secur1t	2026/05/26
Linux Kernel 6.8 Exploit, Local Privilege Escalation LOCAL Author: Long Fong Chan	2026/05/26
Cockpit 359 Exploit, RCE WEBAPPS Author: Abdelazim Mohammed	2026/05/21
BookStack 25.12.1 Exploit, Denial of Service WEBAPPS Author: Gabriel Rodrigues	2026/05/21
Lenovo LegionSpace 1.7.11.2 Exploit, 'DAService' Unquoted Service Path LOCAL Author: ENACIF-M	2026/05/21
solaredge Exploit, (CSRF-OOB-Injection) WEBAPPS Author: u11secur1t	2026/05/21
FUXA 1.2.9 Exploit, RCE WEBAPPS Author: Anthony Cihan	2026/05/21
Windows Snipping Tool Exploit, NTLMv2 Hash Hijack LOCAL Author: u11secur1t	2026/05/15
Remote Sunrise Helper for Windows 2026.14 Exploit, Unauthenticated File/Directory Listing LOCAL Author: Chokri Hammedi	2026/05/15
Remote Sunrise Helper for Windows 2026.14 Exploit, Remote Code Execution LOCAL Author: Chokri Hammedi	2026/05/15
WordPress Plugin Supsystic Contact Form 1.7.36 Exploit, SSTI WEBAPPS Author: ootstrapboo	2026/05/14
Apache HertzBeat 1.8.0 Exploit, Remote Code Execution WEBAPPS Author: Brett Gervasoni	2026/05/14
ePati Antikor NGFW 2.0.1301 Exploit, Authentication Bypass WEBAPPS Author: adi	2026/05/14
PJPROJECT 2.16 Exploit, Heap Bufferoverflow WEBAPPS Author: abismo45	2026/05/14
Ninja Forms Uploads Exploit, Unauthenticated PHP File Upload WEBAPPS Author: elim.lanoua	2026/05/13
glances 4.5.2 Exploit, command injection WEBAPPS Author: est.sel	2026/05/13
coreruleset 4.21.0 Exploit, Firewall Bypass WEBAPPS Author: nonimiceru	2026/05/13
Flowise < 3.0.5 Exploit, Missing Authentication for Critical Function WEBAPPS Author: ndersoncezar04	2026/05/13
telnetd 2.7 Exploit, Buffer Overflow REMOTE Author: effbarro	2026/05/07
Ghost CMS 6.19.0 Exploit, SQLi WEBAPPS Author: Maksim Rogov	2026/05/07

PCMan 2.0.7 Exploit, Buffer Overflow
REMOTE Author: Thiago Cunha

2026/08/18

NanaZip 6.5 Exploit, DoS
DOS Author: Jorge González Milla

2026/08/18

flyto-core 2.26.7 Exploit, Arbitrary File Write
WEBAPPS Author: Jorge González Milla

2026/08/18

Nodemailer 9.0.0 Exploit, File Read/ SSRF
WEBAPPS Author: Jorge González Milla

2026/08/18

Linuxfabrik monitoring_plugins_6.0.0 Exploit, SSRF
WEBAPPS Author: Jorge González Milla

2026/08/18

NanaZip 6.5 Exploit, DoS
DOS Author: Jorge González Milla

2026/08/17