The Exploit Database
The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database.
Remote Exploits
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-02-04 |
|
windows 10/11 - NTLM Hash Disclosure Spoofing | 0 | REMOTE | beatrizfn |
| 2026-02-04 |
|
Redis 8.0.2 - RCE | 2 | REMOTE | Beatriz Fresno Naumova |
| 2026-02-04 |
|
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE | 1 | REMOTE | Beatriz Fresno Naumova |
| 2025-09-16 |
|
Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell | 286 | REMOTE | LiquidWorm |
| 2025-09-16 |
|
ClipBucket 5.5.0 - Arbitrary File Upload | 181 | REMOTE | Mukundsinh Solanki (r00td3str0y3r) |
| 2025-09-16 |
|
ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF) | 105 | REMOTE | Mukundsinh Solanki (r00td3str0y3r) |
| 2025-09-16 |
|
HTTP/2 2.0 - Denial Of Service (DOS) | 88 | REMOTE | Madhusudhan Rajappa |
| 2025-09-16 |
|
HTMLDOC 1.9.13 - Stack Buffer Overflow | 83 | REMOTE | wulfgarpro |
| 2025-08-26 |
|
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE) | 197 | REMOTE | Giorgi Dograshvili |
| 2025-08-26 |
|
Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass | 100 | REMOTE | İbrahimsql |
Local Exploits
Web Applications
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-02-04 | ![]() |
OctoPrint 1.11.2 - File Upload | 1 | WEB | prabhat |
| 2026-02-04 | ![]() |
aiohttp 3.9.1 - directory traversal PoC | 2 | WEB | Beatriz Fresno Naumova |
| 2026-02-04 | ![]() |
FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution | 2 | WEB | Milad Karimi (Ex3ptionaL) |
| 2026-02-02 | ![]() |
Piranha CMS 12.0 - Stored XSS in Text Block | 7 | WEB | terminalvenoms |
| 2026-02-02 | ![]() |
RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS) | 7 | WEB | Beatriz Fresno Naumova |
| 2026-02-02 | ![]() |
D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS) | 8 | WEB | Beatriz Fresno Naumova |
| 2026-01-17 | ![]() |
RPi-Jukebox-RFID 2.8.0 - Remote Command Execution | 31 | WEB | Beatriz Fresno Naumova |
| 2026-01-17 | ![]() |
Siklu EtherHaul Series EH-8010 - Arbitrary File Upload | 20 | WEB | semaja2 |
| 2026-01-17 | ![]() |
Siklu EtherHaul Series EH-8010 - Remote Command Execution | 14 | WEB | semaja2 |
| 2025-12-25 | ![]() |
WordPress Quiz Maker 6.7.0.56 - SQL Injection | 83 | WEB | Rahul Sreenivasan |
DoS/PoC
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2025-07-28 | ![]() |
Xlight FTP 1.1 - Denial Of Service (DOS) | 90 | DOS | Fernando Mengali |
| 2024-08-28 | ![]() |
Windows TCP/IP - RCE Checker and Denial of Service | 85 | DOS | Photubias |
| 2024-03-28 | ![]() |
RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service | 74 | DOS | ice-wzl |
| 2024-02-26 | ![]() |
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS' | 73 | DOS | hyp3rlinx |
| 2024-02-19 | ![]() |
XAMPP - Buffer Overflow POC | 69 | DOS | Talson |
| 2024-02-13 | ![]() |
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Remote Denial Of Service | 66 | DOS | LiquidWorm |
| 2024-02-09 | ![]() |
Elasticsearch - StackOverflow DoS | 84 | DOS | TOUHAMI Kasbaoui |
| 2024-02-02 | ![]() |
Electrolink FM/DAB/TV Transmitter - Unauthenticated Remote DoS | 94 | DOS | LiquidWorm |
| 2023-10-09 | ![]() |
OpenPLC WebServer 3 - Denial of Service | 50 | DOS | Kai Feng |
| 2023-10-09 | ![]() |
Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service | 68 | DOS | LiquidWorm |
Shellcode
Papers
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2018-11-16 | ![]() |
The Powerful Resource of PHP Stream Wrappers | 693 | PAPERS | Netsparker |
| 2018-11-01 | ![]() |
Phrack: Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability (Adam | 603 | PAPERS | phrack |
| 2018-10-09 | ![]() |
A Red Teamer’s guide to pivoting | 558 | PAPERS | Artem Kondratenko |
| 2018-10-08 | ![]() |
Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) | 1556 | PAPERS | phrack |
| 2018-01-15 | ![]() |
Phrack: .NET Instrumentation via MSIL bytecode injection (Antonio "s4tan" Parata | 1421 | PAPERS | phrack |
| 2017-08-28 | ![]() |
Abusing Token Privileges For LPE | 934 | PAPERS | drone and breenmachine |
| 2017-01-12 | ![]() |
OpenSSL - Weak KDF | 1005 | PAPERS | anonymous |
| 2014-08-27 | ![]() |
SSDP Amplification Scanner | 761 | PAPERS | SaMaN |
| 2014-06-26 | ![]() |
[Hacking-Contest] SSH Server wrapper | 717 | PAPERS | Jakob Lell |
| 2012-03-20 | ![]() |
Full MSSQL Injection PWNage | 967 | PAPERS | CWH Underground |



