Lucene search
+L

131 matches found

GithubExploit
GithubExploit
โ€ขadded 2026/08/08 4:50 p.m.โ€ข25 views

Exploit for CVE-2026-64638

CVE-2026-64638 Reflected XSS on Login Screen Leading to PH...

8.9CVSS6.5AI score0.00894EPSS
SaveExploits31
GithubExploit
GithubExploit
โ€ขadded 2026/08/08 1:20 a.m.โ€ข27 views

Exploit for CVE-2026-64638

CVE-2026-64638 โ€” XSS2Shell Pre-Authentication Reflected X...

8.9CVSS6.6AI score0.00894EPSS
SaveExploits31
GithubExploit
GithubExploit
โ€ขadded 2026/05/04 10:32 a.m.โ€ข164 views

Exploit for Use of Externally-Controlled Format String in Ghs Integrity_Rtos

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Ful...

7.5CVSS6AI score0.01499EPSS
SaveExploits2
The Hacker News
The Hacker News
โ€ขadded 2026/04/23 11:30 a.m.โ€ข32 views

Project Glasswing Proved AI Can Find the Bugs. Who's Going to Fix Them?

Last week, Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that they took the extraordinary step of postponing its public release. Instead, the company has given access to Apple, Microsoft, Google, Amazon, and a coalition of others to find a...

6AI score
SaveExploits0
GithubExploit
GithubExploit
โ€ขadded 2026/04/01 7:8 p.m.โ€ข478 views

MyPortIO-Exploit

MyPortIO-Exploit Local privilege escalation via arbitrary phy...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
โ€ขadded 2026/03/19 6:53 a.m.โ€ข271 views

Exploit for CVE-2024-11114

Chromium Exploit Development Toolkit A toolkit for weaponizing...

9.6CVSS6.2AI score0.20547EPSS
SaveExploits4
GithubExploit
GithubExploit
โ€ขadded 2026/02/27 7:37 p.m.โ€ข307 views

Exploit for CVE-2026-28515

openDCIM - SQLi to RCE via Config Poisoning Remote code execu...

6.4AI score0.05648EPSS
SaveExploits5
Cvelist
Cvelist
โ€ขadded 2026/01/20 2:26 p.m.โ€ข26 views

CVE-2026-0726 Nexter Extension โ€“ Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace'

The Nexter Extension โ€“ Site Enhancements Toolkit plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.6 via deserialization of untrusted input in the 'nxtunserializereplace' function. This makes it possible for unauthenticated attackers to inject a...

8.1CVSS0.00479EPSS
SaveExploits0References2
EUVD
EUVD
โ€ขadded 2025/10/07 12:30 a.m.โ€ข11 views

EUVD-2019-5471

Malware in sbrugna...

9CVSS7AI score0.0527EPSS
SaveExploits1References2
EUVD
EUVD
โ€ขadded 2025/10/07 12:30 a.m.โ€ข8 views

EUVD-2018-20790

Malware in sbrugna...

7.8CVSS7.7AI score0.00382EPSS
SaveExploits0References3
EUVD
EUVD
โ€ขadded 2025/10/07 12:30 a.m.โ€ข8 views

EUVD-2018-1827

Malware in sbrugna...

5.5CVSS6.2AI score0.01644EPSS
SaveExploits0References12
EUVD
EUVD
โ€ขadded 2025/10/03 8:7 p.m.โ€ข12 views

EUVD-2024-2126

Malicious code in bioql PyPI...

4.7CVSS6.3AI score0.00366EPSS
SaveExploits1References4
CNNVD
CNNVD
โ€ขadded 2025/09/19 12:0 a.m.โ€ข7 views

Vasion Print Virtual Appliance Hostๅ’ŒVasion Print Application ๅฎ‰ๅ…จๆผๆดž

Vasion Print Virtual Appliance Host and Vasion Print Application are both products of Vasion Corporation of the U.S.A. Vasion Print Virtual Appliance Host is a print management software.Vasion Print Application is a printer management application. A security vulnerability exists in Vasion Print...

9.8CVSS6.6AI score0.00813EPSS
SaveExploits1References5
Packet Storm
Packet Storm
โ€ขadded 2025/09/17 12:0 a.m.โ€ข192 views

๐Ÿ“„ Commvault CLI Argument Injection / Traversal / Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution exploit chain for Commvault, tracked as CVE-2025-57790 and CVE-2025-57791. A command-line injection permits unauthenticated access to the localadmin account, which then facilitates code execution via expression language...

8.8CVSS8.7AI score0.86186EPSS
SaveExploits12
GithubExploit
GithubExploit
โ€ขadded 2025/07/30 10:3 p.m.โ€ข401 views

Exploit for CVE-2025-6018

๐Ÿ”’ CVE-2025-6018: Linux PAM to Root Privilege Escalation ๐Ÿ”’ ---...

7.8CVSS7.5AI score0.01018EPSS
SaveExploits19
RedhatCVE
RedhatCVE
โ€ขadded 2025/05/22 8:7 a.m.โ€ข12 views

CVE-2019-14224

An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr...

9CVSS7.9AI score0.0527EPSS
SaveExploits1References1
Rapid7 Blog
Rapid7 Blog
โ€ขadded 2025/05/16 11:0 a.m.โ€ข11 views

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

8.8CVSS9.4AI score0.99927EPSS
SaveExploits10
Information Security Automation
Information Security Automation
โ€ขadded 2025/04/07 8:39 a.m.โ€ข22 views

About Elevation of Privilege โ€“ Windows Cloud Files Mini Filter Driver (CVE-2024-30085) vulnerability

About Elevation of Privilege - Windows Cloud Files Mini Filter Driver CVE-2024-30085 vulnerability. cldflt.sys is a Windows Cloud Files Mini Filter driver responsible for representing cloud-stored files and folders as if they were located on the local machine. The vulnerability in this driver,...

7.8CVSS8.8AI score0.1432EPSS
SaveExploits3
OSV
OSV
โ€ขadded 2025/03/22 5:15 a.m.โ€ข9 views

CVE-2025-0724

The ProfileGrid โ€“ User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.4.5 via deserialization of untrusted input in the getusermetafieldshtml function. This makes it possible for authenticated attackers, with...

8.8CVSS7.5AI score0.00574EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
โ€ขadded 2025/02/05 12:11 a.m.โ€ข34 views

CVE-2024-4157

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.1.15 via deserialization of untrusted input in the extractDynamicValues function. This makes it possible for...

9.8CVSS9.4AI score0.02333EPSS
SaveExploits2References1
Rows per page
Query Builder