CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

274234 matches found

Packet Storm•added 2026/04/21 12:0 a.m.•142 views

📄 Below Symlink Privilege Escalation

This Python script demonstrates a potential privilege escalation technique related to CVE-2025-27591, leveraging symbolic link symlink manipulation in a logging directory used by the below utility. Versions prior to 0.9.0 are affected...

6.8CVSS7AI score0.0036EPSS

Exploits22

Packet Storm•added 2026/04/21 12:0 a.m.•115 views

📄 ASP.net 8.0.10 Core Kestrel HTTP Request Smuggling

This Metasploit auxiliary module targets a critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel caused by improper parsing of malformed chunked transfer encoding notably LF-only line handling and case-variant headers like chUnKEd...

9.9CVSS5.8AI score0.66258EPSS

Exploits5

Packet Storm•added 2026/04/21 12:0 a.m.•62 views

📄 Trojan-Spy.Win32.Small MVID-2026-0705 Remote Command Execution

Trojan-Spy.Win32.Small malware opens a listener on TCP port 65535, allowing unauthenticated remote attackers with network access to execute arbitrary operating system commands on the infected host. Discovery / credits: Malvuln John Page aka hyp3rlinx c 2026 Original source:...

6.2AI score

Exploits0

Packet Storm•added 2026/04/21 12:0 a.m.•153 views

📄 Below Log File Symlink Privilege Escalation

This Metasploit module exploits a local privilege escalation vulnerability in the below utility when executed with sudo. This affects versions prior to 0.9.0. ================================================================================================================================== | Title...

6.8CVSS7.1AI score0.0036EPSS

Exploits22

Packet Storm•added 2026/04/21 12:0 a.m.•89 views

📄 Bludit CMS 3.18.2 Shell Upload

This Metasploit module targets a vulnerability in Bludit CMS version 3.18.2 targeting the API file upload mechanism which allows authenticated users with a valid API token to upload arbitrary files without proper validation. This can result in a shell upload...

8.8CVSS5.9AI score0.01919EPSS

Exploits4