The Exploit Database
The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database.
Remote Exploits
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-10-01 |
|
Teltonika_RutOS 00.07.06.21 - command injection | 63 | REMOTE | Rubbish Research Team |
| 2026-10-01 |
|
Ecava_ntegraXor IGX_16.0.701.10 - RCE | 37 | REMOTE | Rubbish Research Team |
| 2026-09-24 |
|
MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 - RCE | 39 | REMOTE | DigiProSec |
| 2026-09-11 |
|
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.2 | 112 | REMOTE | DigiProSec |
| 2026-08-25 |
|
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE | 142 | REMOTE | youcef-! |
| 2026-08-18 |
|
PCMan 2.0.7 - Buffer Overflow | 96 | REMOTE | Thiago Cunha |
| 2026-08-17 |
|
phpSysInfo 3.4.5 - IP Allowlist Bypass | 85 | REMOTE | Muhammed Mirac Kayikci |
| 2026-08-17 |
|
ipTIME A3004T - Remote Code Execution | 90 | REMOTE | Paccaron |
| 2026-08-17 |
|
D-Link DNS_340L - OS Command Injection | 78 | REMOTE | Jared Brits |
| 2026-08-11 |
|
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution | 80 | REMOTE | banyamer |
Local Exploits
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-08-10 |
|
Microsoft Edge 150.0.4078.48 - RCE | 93 | LOCAL | banyamer |
| 2026-07-07 |
|
ProtonVPN v4.4.1 - Unquoted Service Path | 94 | LOCAL | Milad karimi |
| 2026-07-06 |
|
MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation | 132 | LOCAL | Mohammad |
| 2026-07-06 |
|
Windows Defender (MsMpEng.exe) - Race Condition | 129 | LOCAL | nu11secur1ty |
| 2026-05-29 |
|
ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion | 108 | LOCAL | Jose Rivas |
| 2026-05-29 |
|
ZTE Routers - Unauthenticated Denial of Service | 126 | LOCAL | Mina Nageh Salalma |
| 2026-05-29 |
|
ZTE ZXHN H188A V6 - Authentication Bypass | 148 | LOCAL | Mina Nageh Salalma |
| 2026-05-29 |
|
ZTE H298A / H108N - Unauthenticated Credential Exposure | 128 | LOCAL | Mina Nageh Salalma |
| 2026-05-29 |
|
Linux Kernel - Local Privilege Escalation | 171 | LOCAL | nu11secur1ty |
| 2026-05-27 |
|
Linux Kernel - Local Privilege Escalation | 145 | LOCAL | nu11secur1ty |
Web Applications
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-10-01 | |
TigerGraph_Community_Edition 4.2.4 - arbitrary file write | 39 | WEB | Rubbish Research Team |
| 2026-10-01 | |
WordPress 7.0.2 - Path Travesal | 38 | WEB | Robert Ressl |
| 2026-10-01 | |
Food-Ordering 1.0 - LFI | 30 | WEB | nu11secur1ty |
| 2026-10-01 | |
Krayin CRM 2.2.4 - IDOR | 27 | WEB | bl4dsc4n |
| 2026-10-01 | |
SuiteCRM 8.10.1 - Authenticated SSRF | 26 | WEB | Max Gabriel |
| 2026-10-01 | |
InvoicePlane 1.7.1 - RCE | 28 | WEB | Mustafa Murat Akgül |
| 2026-10-01 | |
POMS oretnom23v1.0 - SQLi vulnerabilities | 25 | WEB | nu11secur1ty |
| 2026-09-03 | |
FreePBX 17.0.2 - Remote Code Execution (RCE) | 104 | WEB | Jared Brits |
| 2026-09-03 | |
Metabase 0.61.0 - Authenticated Remote Code Execution | 62 | WEB | Gutierre0x80 |
| 2026-09-02 | |
Bludit CMS 3.20.0 - Reflected Cross-Site Scripting | 55 | WEB | Ranjit Kumar Singh |
DoS/PoC
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-09-02 | |
EVerest 2025.9.0 - DoS | 65 | DOS | Ranjit Kumar Singh |
| 2026-08-18 | |
NanaZip 6.5 - DoS | 71 | DOS | Jorge González Milla |
| 2026-08-17 | |
NanaZip 6.5 - DoS | 55 | DOS | Jorge González Milla |
| 2026-08-17 | |
Nmap 7.99 - Extension Header Integer Underflow | 65 | DOS | banyamer |
| 2026-08-11 | |
LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting | 72 | DOS | banyamer |
| 2026-05-29 | |
strongSwan 5.9.13 - DoS | 118 | DOS | Lukas Johannes Moeller |
| 2025-07-28 | |
Xlight FTP 1.1 - Denial Of Service (DOS) | 220 | DOS | Fernando Mengali |
| 2024-08-28 | |
Windows TCP/IP - RCE Checker and Denial of Service | 235 | DOS | Photubias |
| 2024-03-28 | |
RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service | 248 | DOS | ice-wzl |
| 2024-02-26 | |
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS' | 205 | DOS | hyp3rlinx |
Shellcode
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-05-29 | |
Win32 - Calc Shellcode | 130 | SHELLCODE | Fernando Mengali |
| 2025-08-04 | |
Linux/x86_64 - execve(_/bin/sh__[_-c__cmd]_NULL) Arbitrary Command Execution She | 244 | SHELLCODE | Muzaffer Umut ŞAHİN |
| 2025-05-21 | |
Windows 11 x64 - Reverse TCP Shellcode (564 bytes) | 370 | SHELLCODE | Victor Huerlimann |
| 2025-05-21 | |
Linux/x86 - Reverse TCP Shellcode (95 bytes) | 271 | SHELLCODE | Al Baradi Joy |
| 2025-05-21 | |
Linux/x86-64 - execve(_/bin/sh_) Shellcode (36 bytes) | 220 | SHELLCODE | Sayan Ray |
| 2023-09-08 | |
Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode (476 Bytes) | 189 | SHELLCODE | Senzee |
| 2023-08-21 | |
Linux/x64 - memfd_create ELF loader Shellcode (170 bytes) | 201 | SHELLCODE | Ivan Nikolsky |
| 2023-07-28 | |
Windows/x64 - PIC Null-Free Calc.exe Shellcode (169 Bytes) | 192 | SHELLCODE | Senzee |
| 2023-04-25 | |
Windows/x64 - Delete File shellcode / Dynamic PEB method null-free Shellcode | 197 | SHELLCODE | Nayani |
| 2023-04-05 | |
Linux/x86_64 - bash Shellcode with xor encoding | 193 | SHELLCODE | Jeenika Anadani |
Papers
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2018-11-16 | |
The Powerful Resource of PHP Stream Wrappers | 861 | PAPERS | Netsparker |
| 2018-11-01 | |
Phrack: Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability (Adam | 814 | PAPERS | phrack |
| 2018-10-09 | |
A Red Teamer’s guide to pivoting | 760 | PAPERS | Artem Kondratenko |
| 2018-10-08 | |
Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) | 1729 | PAPERS | phrack |
| 2018-01-15 | |
Phrack: .NET Instrumentation via MSIL bytecode injection (Antonio "s4tan" Parata | 1593 | PAPERS | phrack |
| 2017-08-28 | |
Abusing Token Privileges For LPE | 1136 | PAPERS | drone and breenmachine |
| 2017-01-12 | |
OpenSSL - Weak KDF | 1154 | PAPERS | anonymous |
| 2014-08-27 | |
SSDP Amplification Scanner | 866 | PAPERS | SaMaN |
| 2014-06-26 | |
[Hacking-Contest] SSH Server wrapper | 847 | PAPERS | Jakob Lell |
| 2012-03-20 | |
Full MSSQL Injection PWNage | 2235 | PAPERS | CWH Underground |