Lucene search
+L

278558 matches found

Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.110 views

📄 Microsoft Windows Kernel ISO Mount / Oplock Deserialization Denial of Service

Proof of concept exploit for a logic-based denial of service vulnerability in Windows 11 25H2 Build 26200 that causes permanent kernel state corruption through ISO mounting, oplocks, and Windows Defender scanning...

5.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.109 views

📄 WordPress Contest Gallery 28.1.4 SQL Injection

WordPress Contest Gallery plugin version 28.1.4 unauthenticated blind SQL Injection exploit written in Python3. ================================================================================================================================== | Title : WordPress Contest Gallery 28.1.4...

7.5CVSS5.9AI score0.00945EPSS
SaveExploits6
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.89 views

📄 WordPress PickPlugins 2.0.46 OTP Bypass

WordPress PickPlugins plugin version 2.0.46 proof of concept user verification OTP authentication bypass exploit. ================================================================================================================================== | Title : WordPress PickPlugins 2.0.46 User...

9.8CVSS5.3AI score0.00578EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.94 views

📄 Genetec RabbitMQ Local Privilege Escalation

Genetec RabbitMQ local privilege escalation proof of concept exploit for Windows mimicking techniques used in token impersonation-based attacks such as Rotten Potato–style methods...

7.8CVSS5.3AI score0.00145EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.87 views

📄 WordPress OrderConvo 13.5 Path Traversal / File Read

This Metasploit module exploits a path traversal vulnerability in WordPress OrderConvo plugin versions prior to 14 for WooCommerce. The vulnerability exists in the download-file endpoint which fails to properly sanitize the filename parameter, allowing attackers to read arbitrary files from the...

7.5CVSS5.5AI score0.03891EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.113 views

📄 Microsoft Windows Defender MsMpEng.exe Race Condition / Privilege Escalation

A race condition exists between Windows Defender's MpCleanCallbackFunction cleanup routine and Volume Shadow Copy creation. This vulnerability allows an attacker to escalate privileges to NT AUTHORITY\SYSTEM. This Metasploit module demonstrates the issue...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.101 views

📄 Grav CMS Zip Slip Remote Code Execution

This Metasploit module exploits a vulnerability in Grav CMS versions prior to 2.0.0-beta.2. The Direct Install feature in the Admin plugin allows administrators to upload plugins as ZIP files...

9.1CVSS5.3AI score0.03938EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.99 views

📄 CMS Academy Booking 1.0 SQL Injection

CMS Academy Booking version 1.0 suffers from a remote SQL injection vulnerability. ================================================================================================================================== | Title : CMS academy booking v1.0 sql injection vulnerability | | Author : indoush...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/06/18 12:00 a.m.90 views

📄 Wing FTP Server 8.1.2 Authenticated Remote Code Execution

Wing FTP Server versions prior to 8.1.3 allows authenticated administrators to execute arbitrary Lua code on the server. ================================================================================================================================== | Title : Wing FTP Server 8.1.2 - Authenticat...

8.6CVSS5.9AI score0.02643EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/06/17 11:48 p.m.110 views

Exploit for Unrestricted Upload of File with Dangerous Type in Eclipse Business_Intelligence_And_Reporting_Tools

CVE-2021-34427 Windows POC for CVE-2021-34427 affec...

9.8CVSS5.3AI score0.57982EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2026/06/17 9:20 p.m.115 views

Exploit for CVE-2015-10141

C...

9.3CVSS5.2AI score0.07386EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/06/17 8:58 p.m.132 views

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC F...

9.3CVSS8.2AI score0.82882EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2026/06/17 7:59 p.m.103 views

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purp...

9.8CVSS5.9AI score0.98064EPSS
SaveExploits68
GithubExploit
GithubExploit
added 2026/06/17 7:44 p.m.137 views

Exploit for Path Traversal in Microsoft

NimbusPwn — networkd-dispatcher...

5.5CVSS5.7AI score0.11761EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2026/06/17 7:31 p.m.139 views

Hadoop-YARN-RCE

Unauthenticated RCE in Apache Hadoop YARN ResourceManager An...

6.3AI score
SaveExploits0
Metasploit
Metasploit
added 2026/06/17 7:03 p.m.289 views

NTLM Relay to Self (HTTP to LDAP) - Post Exploitation

This module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate via...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/06/17 6:37 p.m.128 views

Exploit for OS Command Injection in Buffalo Open_Xdmod

CVE-2...

9.8CVSS5.2AI score0.00388EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/06/17 6:24 p.m.101 views

ExploitDev

Assembly Code Compilation & Shell Generation Follow the steps...

5.5AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/06/17 4:36 p.m.174 views

Exploit for Path Traversal in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File...

6.5CVSS5.7AI score0.28171EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/06/17 4:32 p.m.146 views

Exploit for Out-of-bounds Read in Tcpdump

ENV-CVE-2020-8036 — tcpdump Vulnerability Reproduction Environ...

7.5CVSS7.5AI score0.01479EPSS
SaveExploits1
Rows per page
Query Builder