Blog RSSExploits RSSFacebook
CVE Certified

The Exploit Database

GHDB

 

The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database.


Remote Exploits

Date D   Description Plat. Author
2025-09-16 Exploit Code Downloads   Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell 163 REMOTE LiquidWorm
2025-09-16 Exploit Code Downloads   ClipBucket 5.5.0 - Arbitrary File Upload 79 REMOTE Mukundsinh Solanki (r00td3str0y3r)
2025-09-16 Exploit Code Downloads   ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF) 56 REMOTE Mukundsinh Solanki (r00td3str0y3r)
2025-09-16 Exploit Code Downloads   HTTP/2 2.0 - Denial Of Service (DOS) 46 REMOTE Madhusudhan Rajappa
2025-09-16 Exploit Code Downloads   HTMLDOC 1.9.13 - Stack Buffer Overflow 39 REMOTE wulfgarpro
2025-08-26 Exploit Code Downloads   GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE) 134 REMOTE Giorgi Dograshvili
2025-08-26 Exploit Code Downloads   Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass 62 REMOTE İbrahimsql
2025-08-18 Exploit Code Downloads   Tenda AC20 16.03.08.12 - Command Injection 120 REMOTE Byte Reaper
2025-08-18 Exploit Code Downloads   Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure 70 REMOTE Ruben Enkaoua
2025-08-18 Exploit Code Downloads   PHPMyAdmin 3.0 - Bruteforce Login Bypass 116 REMOTE Nikola Markovic

Local Exploits

Date D   Description Plat. Author
2025-09-16 Exploit Code Downloads   Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of P 67 LOCAL Milad Karimi (Ex3ptionaL)
2025-09-16 Exploit Code Downloads   Mbed TLS 3.6.4 - Use-After-Free 33 LOCAL Byte Reaper
2025-08-26 Exploit Code Downloads   GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure 55 LOCAL Giorgi Dograshvili
2025-08-11 Exploit Code Downloads   Microsoft Windows - Storage QoS Filter Driver Checker 44 LOCAL nu11secur1ty
2025-08-03 Exploit Code Downloads   Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE) 71 LOCAL nu11secur1ty
2025-07-28 Exploit Code Downloads   Linux PAM Environment - Variable Injection Local Privilege Escalation 47 LOCAL İbrahimsql
2025-07-16 Exploit Code Downloads   Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of 46 LOCAL nu11secur1ty
2025-07-16 Exploit Code Downloads   Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege 63 LOCAL nu11secur1ty
2025-07-08 Exploit Code Downloads   Microsoft Defender for Endpoint (MDE) - Elevation of Privilege 78 LOCAL Rich Mirch
2025-07-08 Exploit Code Downloads   Sudo 1.9.17 Host Option - Elevation of Privilege 88 LOCAL Rich Mirch

Web Applications

Date D   Description Plat. Author
2025-10-31 Exploit Code Downloads   Flowise 3.0.4 - Remote Code Execution (RCE) 42 WEB nltt0
2025-10-29 Exploit Code Downloads   Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF) 22 WEB Van Lam Nguyen
2025-09-16 Exploit Code Downloads   Tourism Management System 2.0 - Arbitrary Shell Upload 98 WEB Debug Security
2025-09-16 Exploit Code Downloads   Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF) 42 WEB Van Lam Nguyen
2025-09-16 Exploit Code Downloads   dotCMS 25.07.02-1 - Authenticated Blind SQL Injection 45 WEB Matan Sandori (OSCP_ OSEP_ OSWE)
2025-09-16 Exploit Code Downloads   ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection 39 WEB Byte Reaper
2025-09-16 Exploit Code Downloads   XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE) 42 WEB Maksim Rogov
2025-09-16 Exploit Code Downloads   Concrete CMS 9.4.3 - Stored XSS 35 WEB Chokri Hammedi
2025-08-26 Exploit Code Downloads   StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload 91 WEB xpl0dec
2025-08-26 Exploit Code Downloads   Lingdang CRM 8.6.4.7 - SQL Injection 73 WEB Beatriz Fresno Naumova

DoS/PoC

Date D   Description Plat. Author
2025-07-28 Exploit Code Downloads   Xlight FTP 1.1 - Denial Of Service (DOS) 49 DOS Fernando Mengali
2024-08-28 Exploit Code Downloads   Windows TCP/IP - RCE Checker and Denial of Service 71 DOS Photubias
2024-03-28 Exploit Code Downloads   RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service 61 DOS ice-wzl
2024-02-26 Exploit Code Downloads   Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS' 56 DOS hyp3rlinx
2024-02-19 Exploit Code Downloads   XAMPP - Buffer Overflow POC 60 DOS Talson
2024-02-13 Exploit Code Downloads   VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Remote Denial Of Service 47 DOS LiquidWorm
2024-02-09 Exploit Code Downloads   Elasticsearch - StackOverflow DoS 65 DOS TOUHAMI Kasbaoui
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter - Unauthenticated Remote DoS 84 DOS LiquidWorm
2023-10-09 Exploit Code Downloads   OpenPLC WebServer 3 - Denial of Service 39 DOS Kai Feng
2023-10-09 Exploit Code Downloads   Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service 49 DOS LiquidWorm

Shellcode

Date D   Description Plat. Author
2025-08-04 Exploit Code Downloads   Linux/x86_64 - execve(_/bin/sh__[_-c__cmd]_NULL) Arbitrary Command Execution She 69 SHELLCODE Muzaffer Umut ŞAHİN
2025-05-21 Exploit Code Downloads   Windows 11 x64 - Reverse TCP Shellcode (564 bytes) 126 SHELLCODE Victor Huerlimann
2025-05-21 Exploit Code Downloads   Linux/x86 - Reverse TCP Shellcode (95 bytes) 84 SHELLCODE Al Baradi Joy
2025-05-21 Exploit Code Downloads   Linux/x86-64 - execve(_/bin/sh_) Shellcode (36 bytes) 70 SHELLCODE Sayan Ray
2023-09-08 Exploit Code Downloads   Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode (476 Bytes) 48 SHELLCODE Senzee
2023-08-21 Exploit Code Downloads   Linux/x64 - memfd_create ELF loader Shellcode (170 bytes) 49 SHELLCODE Ivan Nikolsky
2023-07-28 Exploit Code Downloads   Windows/x64 - PIC Null-Free Calc.exe Shellcode (169 Bytes) 57 SHELLCODE Senzee
2023-04-25 Exploit Code Downloads   Windows/x64 - Delete File shellcode / Dynamic PEB method null-free Shellcode 61 SHELLCODE Nayani
2023-04-05 Exploit Code Downloads   Linux/x86_64 - bash Shellcode with xor encoding 45 SHELLCODE Jeenika Anadani
2023-04-03 Exploit Code Downloads   Windows/x86 - Create Administrator User / Dynamic PEB & EDT method null-free She 60 SHELLCODE Xavi Beltran

Papers

Date D   Description Plat. Author
2018-11-16 Exploit Code Downloads   The Powerful Resource of PHP Stream Wrappers 671 PAPERS Netsparker
2018-11-01 Exploit Code Downloads   Phrack: Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability (Adam 583 PAPERS phrack
2018-10-09 Exploit Code Downloads   A Red Teamer’s guide to pivoting 521 PAPERS Artem Kondratenko
2018-10-08 Exploit Code Downloads   Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) 1540 PAPERS phrack
2018-01-15 Exploit Code Downloads   Phrack: .NET Instrumentation via MSIL bytecode injection (Antonio "s4tan" Parata 1399 PAPERS phrack
2017-08-28 Exploit Code Downloads   Abusing Token Privileges For LPE 906 PAPERS drone and breenmachine
2017-01-12 Exploit Code Downloads   OpenSSL - Weak KDF 991 PAPERS anonymous
2014-08-27 Exploit Code Downloads   SSDP Amplification Scanner 746 PAPERS SaMaN
2014-06-26 Exploit Code Downloads   [Hacking-Contest] SSH Server wrapper 702 PAPERS Jakob Lell
2012-03-20 Exploit Code Downloads   Full MSSQL Injection PWNage 940 PAPERS CWH Underground