Exploit Database

Exploit Description	Date
Krayin CRM v2.2.x Exploit, Authenticated Remote Code Execution WEBAPPS Author: iamorphin	2026/07/08
Atarim WordPress Plugin 4.2.2 Exploit, Sensitive Information Exposure WEBAPPS Author: Mohammad Hossein Sadeghian	2026/07/08
Langflow 1.9.0 Exploit, RCE WEBAPPS Author: iamorphin	2026/07/08
Joomla Page Builder CK 3.5.10 Exploit, Arbitrary File Upload WEBAPPS Author: M@rAz Ali	2026/07/08
MCPJam Inspector Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/07/07
ProtonVPN v4.4.1 Exploit, Unquoted Service Path LOCAL Author: Milad karimi	2026/07/07
Flowise 3.1.3 Exploit, arbitrary code execution WEBAPPS Author: anyame	2026/07/07
Hydra Exploit, Stack Buffer Overflow REMOTE Author: anyame	2026/07/07
Discuz! X5.0 Exploit, Authentication Bypass WEBAPPS Author: anyame	2026/07/07
Tenable Nessus 10.12.1 Exploit, SQL Injection WEBAPPS Author: anyame	2026/07/07
WordPress Bricks Builder Theme Exploit, RCE WEBAPPS Author: Jared Brits	2026/07/07
iOS Bluetooth PAN Exploit Exploit, Ethernet Gateway without Adapter REMOTE Author: Fares Dahoumane	2026/07/07
Joomla Extension 4.1.4 Exploit, PHP Object injection WEBAPPS Author: Amin İsayev	2026/07/06
Pulpy 0.1.1-Beta Exploit, Filesystem Sandbox Bypass WEBAPPS Author: Onur BILICI	2026/07/06
MEmu Android Emulator 9.2.7.0 Exploit, Local Privilege Escalation LOCAL Author: ohamma	2026/07/06
KeepInMind 0.8.4.2 Exploit, Stored XSS WEBAPPS Author: Pavan N	2026/07/06
KNX visualisering Exploit, Broken Access Control WEBAPPS Author: Parsa Rezaie Khiabanloo	2026/07/06
Windows Defender (MsMpEng.exe) Exploit, Race Condition LOCAL Author: u11secur1t	2026/07/06
WordPress Plugin WPZOOM Portfolio 1.4.21 Exploit, Reflected Cross-Site Scripting (XSS) WEBAPPS Author: Kent Apostol	2026/07/06
OpenEMR 7.0.2 Exploit, Arbitrary File Read WEBAPPS Author: oany	2026/06/08
WordPress Contest Gallery 28.1.4 Exploit, Unauthenticated Blind SQL Injection WEBAPPS Author: ardosourc	2026/06/05
Drupal Core 10.5.5 Exploit, Error-Based SQL Injection WEBAPPS Author: ardosourc	2026/06/01
WordPress OrderConvo 14 Exploit, Path Traversal WEBAPPS Author: iamorphin	2026/06/01
Notepad++ 8.9.6 Exploit, Arbitrary Code Execution REMOTE Author: Kavin Jindal	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, No Rate Limiting WEBAPPS Author: Daniel Miranda	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, User Enumeration WEBAPPS Author: Daniel Miranda	2026/05/30
YAMCS yamcs-core 5.12.7 Exploit, LDAP Injection WEBAPPS Author: Daniel Miranda	2026/05/30
Microsoft Exploit, NTLMv2 Hash Capture REMOTE Author: u11secur1t	2026/05/29
MikroORM 7.0.13 Exploit, SQL Injection WEBAPPS Author: ardosourc	2026/05/29
Prodigy Commerce 3.3.0 Exploit, Local File Inclusion WEBAPPS Author: iamorphin	2026/05/29
Langflow 1.3.0 Exploit, Remote Code Execution WEBAPPS Author: iamorphin	2026/05/29
Quick Playground for WordPress 1.3.1 Exploit, Unauthenticated Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
ImageMagick Exploit, Infinite Loop in the MIFF decoder can lead to CPU exhaustion LOCAL Author: Jose Rivas	2026/05/29
ZTE Routers Exploit, Unauthenticated Denial of Service LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE ZXHN H188A V6 Exploit, Authentication Bypass LOCAL Author: Mina Nageh Salalma	2026/05/29
ZTE H298A / H108N Exploit, Unauthenticated Credential Exposure LOCAL Author: Mina Nageh Salalma	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/29
MixPHP Framework 2.2.17 Exploit, Unsafe Deserialization Remote Code Execution WEBAPPS Author: ardosourc	2026/05/29
Wing FTP Server 8.1.3 Exploit, Authenticated Remote Code Execution REMOTE Author: Ünsal Furkan Harani	2026/05/29
CubeCart < 6.7.0 Exploit, Reflected Cross-Site Scripting (XSS) (Unauthenticated) WEBAPPS Author: h3-SAx1	2026/05/29
strongSwan 5.9.13 Exploit, libsimaka EAP-SIM/AKA heap buffer overflow REMOTE Author: Lukas Johannes Moeller	2026/05/29
strongSwan 5.9.13 Exploit, DoS DOS Author: Lukas Johannes Moeller	2026/05/29
Linux Kernel Exploit, Local Privilege Escalation LOCAL Author: u11secur1t	2026/05/27
Casdoor 3.54.1 Exploit, Arbitrary File Write via Path Traversal WEBAPPS Author: ixpai	2026/05/27
EspoCRM 9.3.3 Exploit, SSRF WEBAPPS Author: Max Gabriel	2026/05/27
scramble Exploit, Remote Code Execution WEBAPPS Author: oshu	2026/05/27
MeiG Smart FORGE_SLT711 Exploit, OS Command Injection HARDWARE Author: Daniil Gordeev	2026/05/27
Realtek rtl819x Exploit, Local Privilege LOCAL Author: Daniil Gordeev	2026/05/27
OpenCATS 0.9.7.4 Exploit, SQL Injection WEBAPPS Author: Gabriel Rodrigues	2026/05/27
Grav CMS 2.0.0-beta.2 Exploit, Remote Code Execution WEBAPPS Author: Mustafa Murat Akgül	2026/05/26
Apache HTTP Server 2.4.66 Exploit, 'mod_http2' Double-Free Denial of Service WEBAPPS Author: lisunbu	2026/05/26
D-Link DSL2600U Exploit, 'rom-0' Admin Password Disclosure HARDWARE Author: Amir Hossein Jamshidi	2026/05/26
Wordpress Temporary Login Plugin 1.0.0 Exploit, 'temp-login-token' Authentication Bypass to Account Takeover WEBAPPS Author: Amir Hossein Jamshidi	2026/05/26
cPanel Exploit, CRLF Injection WEBAPPS Author: u11secur1t	2026/05/26
Linux Kernel 6.8 Exploit, Local Privilege Escalation LOCAL Author: Long Fong Chan	2026/05/26
Cockpit 359 Exploit, RCE WEBAPPS Author: Abdelazim Mohammed	2026/05/21
BookStack 25.12.1 Exploit, Denial of Service WEBAPPS Author: Gabriel Rodrigues	2026/05/21
Lenovo LegionSpace 1.7.11.2 Exploit, 'DAService' Unquoted Service Path LOCAL Author: ENACIF-M	2026/05/21
solaredge Exploit, (CSRF-OOB-Injection) WEBAPPS Author: u11secur1t	2026/05/21
FUXA 1.2.9 Exploit, RCE WEBAPPS Author: Anthony Cihan	2026/05/21
Windows Snipping Tool Exploit, NTLMv2 Hash Hijack LOCAL Author: u11secur1t	2026/05/15
Remote Sunrise Helper for Windows 2026.14 Exploit, Unauthenticated File/Directory Listing LOCAL Author: Chokri Hammedi	2026/05/15
Remote Sunrise Helper for Windows 2026.14 Exploit, Remote Code Execution LOCAL Author: Chokri Hammedi	2026/05/15
WordPress Plugin Supsystic Contact Form 1.7.36 Exploit, SSTI WEBAPPS Author: ootstrapboo	2026/05/14
Apache HertzBeat 1.8.0 Exploit, Remote Code Execution WEBAPPS Author: Brett Gervasoni	2026/05/14
ePati Antikor NGFW 2.0.1301 Exploit, Authentication Bypass WEBAPPS Author: adi	2026/05/14
PJPROJECT 2.16 Exploit, Heap Bufferoverflow WEBAPPS Author: abismo45	2026/05/14
Ninja Forms Uploads Exploit, Unauthenticated PHP File Upload WEBAPPS Author: elim.lanoua	2026/05/13
glances 4.5.2 Exploit, command injection WEBAPPS Author: est.sel	2026/05/13
coreruleset 4.21.0 Exploit, Firewall Bypass WEBAPPS Author: nonimiceru	2026/05/13
Flowise < 3.0.5 Exploit, Missing Authentication for Critical Function WEBAPPS Author: ndersoncezar04	2026/05/13
telnetd 2.7 Exploit, Buffer Overflow REMOTE Author: effbarro	2026/05/07
Ghost CMS 6.19.0 Exploit, SQLi WEBAPPS Author: Maksim Rogov	2026/05/07
LuaJIT 2.1.1774638290 Exploit, Arbitrary Code Execution WEBAPPS Author: Taurus Omar	2026/05/07
Bludit CMS 3.18.4 Exploit, RCE WEBAPPS Author: ahi	2026/05/07
NocoBase 2.0.27 Exploit, VM Sandbox Escape LOCAL Author: nurcangencbilken	2026/05/07
ThingsBoard IoT Platform 4.2.0 Exploit, Server-Side Request Forgery (SSRF) WEBAPPS Author: tamilmath	2026/05/07
Linux Kernel proc_readdir_de() 6.18-rc5 Exploit, Local Privilege Escalation LOCAL Author: viralyash2	2026/05/04
Linux nf_tables 6.19.3 Exploit, Local Privilege Escalation LOCAL Author: viralyash2	2026/05/04
Linksys E1200 2.0.04 Exploit, Authenticated Stack Buffer Overflow (RCE) HARDWARE Author: arret	2026/05/04
MindsDB 25.9.1.1 Exploit, Path Traversal WEBAPPS Author: hewhiteh4	2026/05/04
Windows 11 24H2 Exploit, Local Privilege Escalation LOCAL Author: 30250967	2026/05/04
Traccar GPS Tracking System 6.11.1 Exploit, Cross-Site WebSocket Hijacking (CSWSH) WEBAPPS Author: aza	2026/05/04
FUXA 1.2.8 Exploit, Authentication Bypass + RCE Exploit WEBAPPS Author: oshu	2026/04/30
Python-Multipart 0.0.22 Exploit, Path Traversal WEBAPPS Author: efersoncardoso.de	2026/04/30
Google Chrome 145.0.7632.75 Exploit, CSSFontFeatureValuesMap LOCAL Author: u11secur1t	2026/04/30
Windows 11 23H2 Exploit, Denial of Service (DoS) LOCAL Author: ryhardertry	2026/04/30
Repetier-Server 1.4.10 Exploit, Path Traversal WEBAPPS Author: anyame	2026/04/30
HUSTOJ Zip-Slip v26.01.24 Exploit, RCE WEBAPPS Author: Marshall Whittaker	2026/04/30
BusyBox 1.37.0 Exploit, Path Traversal WEBAPPS Author: Calil Khalil	2026/04/30
Windows 11 25H2 Exploit, Heap Overflow LOCAL Author: u11secur1t	2026/04/30
JUNG Smart Visu Server 1.1.1050 Exploit, Dos WEBAPPS Author: anyame	2026/04/30
SumatraPDF 3.5.2 Exploit, Remote Code Execution WEBAPPS Author: anyame	2026/04/30
NiceGUI 3.6.1 Exploit, Path Traversal WEBAPPS Author: anyame	2026/04/30
Frigate NVR 0.16.3 Exploit, Remote Code Execution WEBAPPS Author: duardo270	2026/04/30
Js2Py 0.74 Exploit, RCE WEBAPPS Author: lisunbu	2026/04/30
Camaleon CMS v2.9.0 Exploit, Path Traversal WEBAPPS Author: elampudisaksh	2026/04/30
Cybersecurity AI (CAI) Framework 0.5.10 Exploit, Command Injection WEBAPPS Author: anyame	2026/04/30
Erugo 0.2.14 Exploit, Remote Code Execution (RCE) WEBAPPS Author: bdulmoi	2026/04/30
deephas 1.0.7 Exploit, Prototype Pollution WEBAPPS Author: anyame	2026/04/30

Krayin CRM v2.2.x Exploit, Authenticated Remote Code Execution
WEBAPPS Author: iamorphin

2026/07/08

Atarim WordPress Plugin 4.2.2 Exploit, Sensitive Information Exposure
WEBAPPS Author: Mohammad Hossein Sadeghian

2026/07/08

Langflow 1.9.0 Exploit, RCE
WEBAPPS Author: iamorphin

2026/07/08

Joomla Page Builder CK 3.5.10 Exploit, Arbitrary File Upload
WEBAPPS Author: M@rAz Ali

2026/07/08

MCPJam Inspector Exploit, Remote Code Execution
WEBAPPS Author: iamorphin

2026/07/07

ProtonVPN v4.4.1 Exploit, Unquoted Service Path
LOCAL Author: Milad karimi

2026/07/07