Lucene search
K

274103 matches found

Exploit DB
Exploit DB
added 2026/05/29 12:0 a.m.56 views

ZTE Routers - Unauthenticated Denial of Service

Exploit Title: ZTE Routers - Unauthenticated Denial of Service Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link: https://github.com/minanagehsalalma/cve-2026-34473-unauthenticated-dos-zte-routers Version: Multiple ZTE router...

7.5CVSS5.8AI score0.02053EPSS
Exploits3
Exploit DB
Exploit DB
added 2026/05/29 12:0 a.m.61 views

ZTE ZXHN H188A V6 - Authentication Bypass

Exploit Title: ZTE ZXHN H188A V6 - Authentication Bypass Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link: https://github.com/minanagehsalalma/cve-2026-34472-auth-bypass-zte-h188a-router Version: ZXHN H188A V6.0.10P2TE,...

7.1CVSS5.8AI score0.01979EPSS
Exploits3
Exploit DB
Exploit DB
added 2026/05/29 12:0 a.m.65 views

MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution

Exploit Title: MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution Date: 2026-05-14 Exploit Author: cardosource Vendor Homepage: https://github.com/mix-php/mix Software Link: https://github.com/mix-php/mix Version: 2.x through 2.2.17 Tested on: Ubuntu 26.04 LTS / PHP 8.3.6 CVE:...

8.1CVSS5.8AI score0.01247EPSS
Exploits2
Exploit DB
Exploit DB
added 2026/05/29 12:0 a.m.64 views

CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

Exploit Title: CubeCart alert"Test!" 3- Press Enter. 4- Observe the alert box popping up on the screen, confirming the XSS execution. Alternative Direct Link: https://TARGET/cubecart/search?searchkeywords=SAMSUNG%20alert"Test!"&a=category Important Note for Reproduction For the payload to execute...

6.1CVSS5.8AI score0.00526EPSS
Exploits2
Exploit DB
Exploit DB
added 2026/05/29 12:0 a.m.51 views

Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution

Exploit Title: Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution Google Dork: N/A Date: 2026-05-22 Exploit Author: cardosource Vendor Homepage: https://quickplayground.com Software Link: https://downloads.wordpress.org/plugin/quick-playground.1.3.1.zip Version: \ wp...

9.8CVSS5.8AI score0.02288EPSS
Exploits3
Packet Storm
Packet Storm
added 2026/05/29 12:0 a.m.43 views

📄 WordPress Temporary Login 1.0.0 Authentication Bypass

WordPress Temporary Login plugin versions 1.0.0 and below suffer from an authentication bypass vulnerability. Exploit Title: Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover Date: 2026-05-02 Exploit Author: Amir Hossein Jamshidi Vendor Homepage...

9.8CVSS5.8AI score0.09246EPSS
Exploits3
Packet Storm
Packet Storm
added 2026/05/29 12:0 a.m.39 views

📄 OpenCATS 0.9.7.4 SQL Injection

OpenCATS version 0.9.7.4 suffers from a remote SQL injection vulnerability. Exploit Title: OpenCATS 0.9.7.4 - SQL Injection Exploit Author: Gabriel Rodrigues TEXUGO from HAKAI Vendor Homepage: https://www.opencats.org Software Link: https://github.com/opencats/OpenCATS Version: 1 else...

5.9AI score
Exploits0
Packet Storm
Packet Storm
added 2026/05/29 12:0 a.m.39 views

📄 MeiG Smart FORGE_SLT711 Command Injection

MeiG Smart FORGESLT711 proof of concept remote command injection exploit. Exploit Title: MeiG Smart FORGESLT711 - OS Command Injection Date: 2026-05-03 Exploit Author: Daniil Gordeev Vendor Homepage: http://www.meigsmart.com Software Link: N/A firmware distributed via carrier channels Version:...

9.1CVSS5.8AI score0.13584EPSS
Exploits3
Packet Storm
Packet Storm
added 2026/05/29 12:0 a.m.36 views

📄 Langflow 1.3.0 Remote Code Execution

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. Exploit Title: Langflow 1.3.0 - Remote...

9.8CVSS8.1AI score0.10371EPSS
Exploits8
GithubExploit
GithubExploit
added 2026/05/28 10:25 p.m.103 views

Notepad-8.9.6-PoC

Notepad++ PoCs CVE-2026-48770 / CVE-2026-48778 / CVE-2026-488...

5.8AI score0.0002EPSS
Exploits5
GithubExploit
GithubExploit
added 2026/05/28 9:45 p.m.70 views

Exploit for CVE-2026-49009

▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██...

3.1CVSS6.6AI score0.0043EPSS
Exploits2
GithubExploit
GithubExploit
added 2026/05/28 8:6 p.m.54 views

Exploit for CVE-2026-8832

EXPLOIT CVE-2026-8832 !Bannerhttps://img.shields.io/badge/...

8.8CVSS6.5AI score0.00622EPSS
Exploits2
GithubExploit
GithubExploit
added 2026/05/28 7:49 p.m.68 views

Exploit for CVE-2026-8832

EXPLOIT...

8.8CVSS5.8AI score0.00622EPSS
Exploits2
GithubExploit
GithubExploit
added 2026/05/28 7:27 p.m.44 views

Exploit for CVE-2026-38444

CVE Disclosures Coordinated vulnerability disclosures and CVE...

5.8AI score
Exploits1
GithubExploit
GithubExploit
added 2026/05/28 7:7 p.m.42 views

LTD_Communication

LTD Communication — Cybersecurity Course Project Vulnerable...

6AI score
Exploits0
GithubExploit
GithubExploit
added 2026/05/28 5:12 p.m.56 views

Exploit for CVE-2026-39292

No d...

5.8AI score0.00472EPSS
Exploits1
GithubExploit
GithubExploit
added 2026/05/28 4:54 p.m.56 views

project_hydra

Project HYDRA Automated vulnerability discovery & exploitat...

5.9AI score
Exploits0
GithubExploit
GithubExploit
added 2026/05/28 4:47 p.m.74 views

Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cpanel_Plugin

CVE-2026-48172 - LiteSpeed cPanel Plugin Vulnerability Auditor...

10CVSS6AI score0.01233EPSS
Exploits1
GithubExploit
GithubExploit
added 2026/05/28 4:45 p.m.58 views

Exploit for Deserialization of Untrusted Data in Facebook React

HTB: Reactor !Difficultyhttps://img.shields.io/badge/Diffi...

10CVSS7.9AI score0.99562EPSS
Exploits366
GithubExploit
GithubExploit
added 2026/05/28 4:35 p.m.54 views

gogs-rce

Gogs RCE — Argument Injection in git rebase CWE-88 Authen...

6.6AI score
Exploits0
Rows per page
Query Builder