Exploit intelligence
Public proof-of-concept and exploit references linked to known vulnerabilities — 34,744 tracked.
CVE-2026-80428CRITICAL9.3exploit-db · exploit-dbCVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 - RCEby DigiProSec
Exploit
8d agoCVE-2026-59827CRITICAL9.9exploit-db · exploit-dbMetabase 0.61.0 - Authenticated Remote Code Executionby Gutierre0x80
Exploit
17d agoCVE-2025-57819CRITICAL10.0exploit-db · exploit-dbFreePBX 17.0.2 - Remote Code Execution (RCE)by Jared Brits
CISA KEVExploitHigh EPSS
17d agoCVE-2025-70336MEDIUM4.8exploit-db · exploit-dbPodcastGenerator 3.2.9 - Stored XSSby Sahil Arya
Exploit
18d agoCVE-2026-39987CRITICAL9.3exploit-db · exploit-dbMarimo 0.20.4 - RCEby Jason Bernier
CISA KEVExploitHigh EPSS
18d agoCVE-2026-9198CRITICAL9.8exploit-db · exploit-dbLangflow 1.10.0 - RCEby Richard Howe
CISA KEVExploitHigh EPSS
18d agoCVE-2026-29053HIGH7.7exploit-db · exploit-dbGhost_CMS 6.19.0 - Remote Code Executionby Maksim Rogov
Exploit
18d agoCVE-2026-41456MEDIUM5.1exploit-db · exploit-dbBludit CMS 3.20.0 - Reflected Cross-Site Scriptingby Ranjit Kumar Singh
Exploit
18d agoCVE-2025-68137HIGH8.4exploit-db · exploit-dbEVerest 2025.9.0 - DoSby Ranjit Kumar Singh
Exploit
18d agoCVE-2026-67206HIGH8.7exploit-db · exploit-dbWolf CMS 0.8.3.1 - RCE vby Balachandar Gowrisankar
Exploit
19d agoCVE-2026-25544CRITICAL9.8exploit-db · exploit-dbPayload CMS 3.72.0 - Blind SQL Injectionby cardosource
Exploit
19d agoCVE-2026-15013CRITICAL9.8exploit-db · exploit-dbminiOrange 5.4.3 - Unauthenticated Auth Bypassby zer0dayf
Exploit
19d agoCVE-2025-50455CRITICAL9.1exploit-db · exploit-dbEasyAppointments 1.5.1 - Blind SQL Injectionby Michael Chesang
Exploit
19d agoCVE-2026-54645MEDIUM4.8exploit-db · exploit-dbCubeCart 6.7.4 - Stored XSSby Mikail KOCADAĞ
Exploit
2d agoCVE-2026-54647HIGH7.2exploit-db · exploit-dbCubeCart 6.7.4 - SQL injectionby Mikail KOCADAĞ
Exploit
2d agoCVE-2026-54644MEDIUM6.1exploit-db · exploit-dbCubeCart 6.7.4 - Cross-Site Scriptingby Mikail KOCADAĞ
Exploit
2d agoCVE-2026-51134HIGH7.5exploit-db · exploit-dbC-MOR 6.0104 - Directory Traversalby Samir Shamdin
Exploit
5d agoCVE-2026-51133MEDIUM6.1exploit-db · exploit-dbC-MOR 6.0104 - Cross-Site Scripting (XSS)by Samir Shamdin
Exploit
5d agoCVE-2026-5027HIGH8.8exploit-db · exploit-dbLangflow 1.8.4 - Path Traversal to Remote Code Executionby cardosource
Exploit
20d agoCVE-2025-60689MEDIUM5.4exploit-db · exploit-dbLinksys E1200_2.0.04 - Unauthenticated OS Command Injectionby jarrett
Exploit
20d agoCVE-2026-42167HIGH8.1exploit-db · exploit-dbCVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCEby youcef-!
Exploit
25d agoCVE-2025-4871MEDIUM6.9exploit-db · exploit-dbPCMan 2.0.7 - Buffer Overflowby Thiago Cunha
Exploit
8/19/2026CVE-2026-55584HIGH7.5exploit-db · exploit-dbphpSysInfo 3.4.5 - IP Allowlist Bypassby Muhammed Mirac Kayikci
Exploit
23d agoCVE-2026-3891CRITICAL9.8exploit-db · exploit-dbWooCommerce 1.5.0 - Unauthenticated Arbitrary File Uploadby Mohammad Hossein Sadeghian
Exploit
8/18/2026CVE-2026-14620MEDIUM4.7exploit-db · exploit-dbwebpack_devserver 5.2.5 - CSRFby Jorge González Milla
Exploit
8/18/2026CVE-2026-48907CRITICAL10.0exploit-db · exploit-dbJoomla JCE_2.9.15 - Remote Code Executionby Jared Brits
CISA KEVExploitHigh EPSS
8/18/2026CVE-2026-58058MEDIUM6.9exploit-db · exploit-dbNmap 7.99 - Extension Header Integer Underflowby banyamer
Exploit
8/18/2026CVE-2024-10914CRITICAL9.2exploit-db · exploit-dbD-Link DNS_340L - OS Command Injectionby Jared Brits
ExploitHigh EPSS
8/18/2026CVE-2026-3576HIGH7.2exploit-db · exploit-dbPlanyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRFby Balachandar Gowrisankar
Exploit
8/12/2026CVE-2026-58480CRITICAL9.2exploit-db · exploit-dbBlocksy Companion 2.1.46 - RCEby banyamer
Exploit
8/12/2026CVE-2026-61447CRITICAL10.0exploit-db · exploit-dbPraisonAI praisonaiagents 1.6.77 - Remote Code Executionby banyamer
Exploit
8/12/2026CVE-2026-61459CRITICAL9.3exploit-db · exploit-dbmcp-server-kubernetes 3.8.x - Argument Injectionby banyamer
Exploit
8/12/2026CVE-2026-61876CRITICAL9.4exploit-db · exploit-dbLuCI DHCPv6 - Lease Hostname Stored Cross-Site Scriptingby banyamer
Exploit
8/12/2026CVE-2026-58138CRITICAL9.3exploit-db · exploit-dbOrkesConductor 3.30.2 - Unauthenticated Remote Code Executionby banyamer
Exploit
8/11/2026CVE-2026-48907CRITICAL10.0exploit-db · exploit-dbJoomla 2.9.99.4 - Unauthenticated Remote Code Executionby Jared Brits
CISA KEVExploitHigh EPSS
8/11/2026CVE-2026-58289CRITICAL9.0exploit-db · exploit-dbMicrosoft Edge 150.0.4078.48 - RCEby banyamer
Exploit
8/11/2026CVE-2026-33017CRITICAL9.3exploit-db · exploit-dbLangflow 1.9.0 - RCEby Diamorphine
CISA KEVExploitHigh EPSS
7/9/2026CVE-2026-38526CRITICAL9.9exploit-db · exploit-dbKrayin CRM v2.2.x - Authenticated Remote Code Executionby Diamorphine
Exploit
7/9/2026CVE-2026-56290CRITICAL10.0exploit-db · exploit-dbJoomla Page Builder CK 3.5.10 - Arbitrary File Uploadby M@rAz Ali
CISA KEVExploit
7/9/2026CVE-2025-60188HIGH7.5exploit-db · exploit-dbAtarim WordPress Plugin 4.2.2 - Sensitive Information Exposureby Mohammad Hossein Sadeghian
Exploit
7/9/2026CVE-2024-25600CRITICAL10.0exploit-db · exploit-dbWordPress Bricks Builder Theme - RCEby Jared Brits
ExploitHigh EPSS
7/8/2026CVE-2026-57588LOW1.6exploit-db · exploit-dbTenable Nessus 10.12.1 - SQL Injectionby banyamer
Exploit
7/8/2026CVE-2026-23744CRITICAL9.8exploit-db · exploit-dbMCPJam Inspector - Remote Code Executionby Diamorphine
ExploitHigh EPSS
7/8/2026CVE-2026-58057LOW2.3exploit-db · exploit-dbFlowise 3.1.3 - arbitrary code executionby banyamer
Exploit
7/8/2026CVE-2026-49952CRITICAL9.3exploit-db · exploit-dbDiscuz! X5.0 - Authentication Bypassby banyamer
Exploit
7/8/2026CVE-2026-36213HIGH7.8exploit-db · exploit-dbMEmu Android Emulator 9.2.7.0 - Local Privilege Escalationby Mohammad
Exploit
7/7/2026