Blog RSSExploits RSSFacebook
CVE Certified

The Exploit Database

GHDB

 

The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database.


Remote Exploits

Date D   Description Plat. Author
2026-10-21   South River Technologies Titan MFT Server 26.0.0 - code execution 2 REMOTE Rubbish Research Team
2026-10-21   Synametrics Syncrify 6.2 - command execution 2 REMOTE Rubbish Research Team
2026-10-21   Edimax BR-6478AC firmware v2.20 - authenticated command injection 2 REMOTE Rubbish Research Team
2026-10-21   Exasol Database 7.1.30 - command execution 2 REMOTE Rubbish Research Team
2026-10-21   Parasoft Continuous Testing Platform 10.7.5 - JSP command execution 6 REMOTE Rubbish Research Team
2026-10-21   ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root 5 REMOTE Rubbish Research Team
2026-10-01   Teltonika_RutOS 00.07.06.21 - command injection 81 REMOTE Rubbish Research Team
2026-10-01   Ecava_ntegraXor IGX_16.0.701.10 - RCE 49 REMOTE Rubbish Research Team
2026-09-24   MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 - RCE 50 REMOTE DigiProSec
2026-09-11   CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.2 134 REMOTE DigiProSec

Local Exploits

Date D   Description Plat. Author
2026-08-10   Microsoft Edge 150.0.4078.48 - RCE 109 LOCAL banyamer
2026-07-07   ProtonVPN v4.4.1 - Unquoted Service Path 103 LOCAL Milad karimi
2026-07-06   MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation 141 LOCAL Mohammad
2026-07-06   Windows Defender (MsMpEng.exe) - Race Condition 138 LOCAL nu11secur1ty
2026-05-29   ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion 116 LOCAL Jose Rivas
2026-05-29   ZTE Routers - Unauthenticated Denial of Service 135 LOCAL Mina Nageh Salalma
2026-05-29   ZTE ZXHN H188A V6 - Authentication Bypass 158 LOCAL Mina Nageh Salalma
2026-05-29   ZTE H298A / H108N - Unauthenticated Credential Exposure 140 LOCAL Mina Nageh Salalma
2026-05-29   Linux Kernel - Local Privilege Escalation 183 LOCAL nu11secur1ty
2026-05-27   Linux Kernel - Local Privilege Escalation 154 LOCAL nu11secur1ty

Web Applications

Date D   Description Plat. Author
2026-10-21   pizzafy-1.0 - SQLi 1 WEB nu11secur1ty
2026-10-21   Keycloak 26.7.2 - Unauthenticated Account Takeover 1 WEB Abel Maldonado
2026-10-21   Open eClass 3.15 - RCE 2 WEB Georgios Roumeliotis
2026-10-21   Automotive Shop Management System 1.0 - SQLi 2 WEB nu11secur1ty
2026-10-01   TigerGraph_Community_Edition 4.2.4 - arbitrary file write 46 WEB Rubbish Research Team
2026-10-01   WordPress 7.0.2 - Path Travesal 56 WEB Robert Ressl
2026-10-01   Food-Ordering 1.0 - LFI 39 WEB nu11secur1ty
2026-10-01   Krayin CRM 2.2.4 - IDOR 34 WEB bl4dsc4n
2026-10-01   SuiteCRM 8.10.1 - Authenticated SSRF 34 WEB Max Gabriel
2026-10-01   InvoicePlane 1.7.1 - RCE 36 WEB Mustafa Murat Akgül

DoS/PoC

Date D   Description Plat. Author
2026-09-02   EVerest 2025.9.0 - DoS 80 DOS Ranjit Kumar Singh
2026-08-18   NanaZip 6.5 - DoS 83 DOS Jorge González Milla
2026-08-17   NanaZip 6.5 - DoS 65 DOS Jorge González Milla
2026-08-17   Nmap 7.99 - Extension Header Integer Underflow 76 DOS banyamer
2026-08-11   LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting 82 DOS banyamer
2026-05-29   strongSwan 5.9.13 - DoS 128 DOS Lukas Johannes Moeller
2025-07-28   Xlight FTP 1.1 - Denial Of Service (DOS) 231 DOS Fernando Mengali
2024-08-28   Windows TCP/IP - RCE Checker and Denial of Service 245 DOS Photubias
2024-03-28   RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service 257 DOS ice-wzl
2024-02-26   Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS' 215 DOS hyp3rlinx

Shellcode

Date D   Description Plat. Author
2026-05-29   Win32 - Calc Shellcode 145 SHELLCODE Fernando Mengali
2025-08-04   Linux/x86_64 - execve(_/bin/sh__[_-c__cmd]_NULL) Arbitrary Command Execution She 253 SHELLCODE Muzaffer Umut ŞAHİN
2025-05-21   Windows 11 x64 - Reverse TCP Shellcode (564 bytes) 378 SHELLCODE Victor Huerlimann
2025-05-21   Linux/x86 - Reverse TCP Shellcode (95 bytes) 282 SHELLCODE Al Baradi Joy
2025-05-21   Linux/x86-64 - execve(_/bin/sh_) Shellcode (36 bytes) 228 SHELLCODE Sayan Ray
2023-09-08   Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode (476 Bytes) 197 SHELLCODE Senzee
2023-08-21   Linux/x64 - memfd_create ELF loader Shellcode (170 bytes) 212 SHELLCODE Ivan Nikolsky
2023-07-28   Windows/x64 - PIC Null-Free Calc.exe Shellcode (169 Bytes) 197 SHELLCODE Senzee
2023-04-25   Windows/x64 - Delete File shellcode / Dynamic PEB method null-free Shellcode 203 SHELLCODE Nayani
2023-04-05   Linux/x86_64 - bash Shellcode with xor encoding 198 SHELLCODE Jeenika Anadani

Papers

Date D   Description Plat. Author
2018-11-16   The Powerful Resource of PHP Stream Wrappers 870 PAPERS Netsparker
2018-11-01   Phrack: Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability (Adam 822 PAPERS phrack
2018-10-09   A Red Teamer’s guide to pivoting 767 PAPERS Artem Kondratenko
2018-10-08   Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) 1737 PAPERS phrack
2018-01-15   Phrack: .NET Instrumentation via MSIL bytecode injection (Antonio "s4tan" Parata 1601 PAPERS phrack
2017-08-28   Abusing Token Privileges For LPE 1145 PAPERS drone and breenmachine
2017-01-12   OpenSSL - Weak KDF 1161 PAPERS anonymous
2014-08-27   SSDP Amplification Scanner 872 PAPERS SaMaN
2014-06-26   [Hacking-Contest] SSH Server wrapper 856 PAPERS Jakob Lell
2012-03-20   Full MSSQL Injection PWNage 2242 PAPERS CWH Underground