|
2026-10-22
|
|
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
|
88 |
REMOTE
|
OffSec
|
|
2026-10-21
|
|
South River Technologies Titan MFT Server 26.0.0 - code execution
|
42 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-21
|
|
Synametrics Syncrify 6.2 - command execution
|
29 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-21
|
|
Edimax BR-6478AC firmware v2.20 - authenticated command injection
|
32 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-21
|
|
Exasol Database 7.1.30 - command execution
|
32 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-21
|
|
Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
|
38 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-21
|
|
ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
|
38 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-01
|
|
Teltonika_RutOS 00.07.06.21 - command injection
|
111 |
REMOTE
|
Rubbish Research Team
|
|
2026-10-01
|
|
Ecava_ntegraXor IGX_16.0.701.10 - RCE
|
65 |
REMOTE
|
Rubbish Research Team
|
|
2026-09-24
|
|
MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 - RCE
|
75 |
REMOTE
|
DigiProSec
|
|
2026-09-11
|
|
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.
|
141 |
REMOTE
|
DigiProSec
|
|
2026-08-25
|
|
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
|
160 |
REMOTE
|
youcef-!
|
|
2026-08-18
|
|
PCMan 2.0.7 - Buffer Overflow
|
107 |
REMOTE
|
Thiago Cunha
|
|
2026-08-17
|
|
phpSysInfo 3.4.5 - IP Allowlist Bypass
|
106 |
REMOTE
|
Muhammed Mirac Kayikci
|
|
2026-08-17
|
|
ipTIME A3004T - Remote Code Execution
|
102 |
REMOTE
|
Paccaron
|
|
2026-08-17
|
|
D-Link DNS_340L - OS Command Injection
|
95 |
REMOTE
|
Jared Brits
|
|
2026-08-11
|
|
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
|
90 |
REMOTE
|
banyamer
|
|
2026-08-11
|
|
mcp-server-kubernetes 3.8.x - Argument Injection
|
86 |
REMOTE
|
banyamer
|
|
2026-07-07
|
|
Hydra - Stack Buffer Overflow
|
164 |
REMOTE
|
banyamer
|
|
2026-07-07
|
|
iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
|
121 |
REMOTE
|
Fares Dahoumane
|
|
2026-05-30
|
|
Notepad++ 8.9.6 - Arbitrary Code Execution
|
262 |
REMOTE
|
Kavin Jindal
|
|
2026-05-29
|
|
Microsoft - NTLMv2 Hash Capture
|
225 |
REMOTE
|
nu11secur1ty
|
|
2026-05-29
|
|
Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
|
138 |
REMOTE
|
Ünsal Furkan Harani
|
|
2026-05-29
|
|
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
|
116 |
REMOTE
|
Lukas Johannes Moeller
|
|
2026-05-07
|
|
telnetd 2.7 - Buffer Overflow
|
121 |
REMOTE
|
jeffbarron
|
|
2026-02-11
|
|
Windows 10.0.17763.7009 - spoofing vulnerability
|
369 |
REMOTE
|
beatrizfn
|
|
2026-02-04
|
|
windows 10/11 - NTLM Hash Disclosure Spoofing
|
252 |
REMOTE
|
beatrizfn
|
|
2026-02-04
|
|
Redis 8.0.2 - RCE
|
351 |
REMOTE
|
Beatriz Fresno Naumova
|
|
2026-02-04
|
|
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
|
156 |
REMOTE
|
Beatriz Fresno Naumova
|
|
2025-09-16
|
|
Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell
|
395 |
REMOTE
|
LiquidWorm
|
|
2025-09-16
|
|
ClipBucket 5.5.0 - Arbitrary File Upload
|
303 |
REMOTE
|
Mukundsinh Solanki (r00td3str0y3r)
|
|
2025-09-16
|
|
ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
|
203 |
REMOTE
|
Mukundsinh Solanki (r00td3str0y3r)
|
|
2025-09-16
|
|
HTTP/2 2.0 - Denial Of Service (DOS)
|
203 |
REMOTE
|
Madhusudhan Rajappa
|
|
2025-09-16
|
|
HTMLDOC 1.9.13 - Stack Buffer Overflow
|
189 |
REMOTE
|
wulfgarpro
|
|
2025-08-26
|
|
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
|
283 |
REMOTE
|
Giorgi Dograshvili
|
|
2025-08-26
|
|
Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass
|
166 |
REMOTE
|
İbrahimsql
|
|
2025-08-18
|
|
Tenda AC20 16.03.08.12 - Command Injection
|
216 |
REMOTE
|
Byte Reaper
|
|
2025-08-18
|
|
Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
|
186 |
REMOTE
|
Ruben Enkaoua
|
|
2025-08-18
|
|
PHPMyAdmin 3.0 - Bruteforce Login Bypass
|
229 |
REMOTE
|
Nikola Markovic
|
|
2025-08-11
|
|
Belkin F9K1009 F9K1010 2.00.04/2.00.09 - Hard Coded Credentials
|
115 |
REMOTE
|
Byte Reaper
|
|
2025-08-11
|
|
Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)
|
116 |
REMOTE
|
Agampreet Singh
|
|
2025-08-11
|
|
Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 - Command Injection
|
66 |
REMOTE
|
Byte Reaper
|
|
2025-08-11
|
|
Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
|
80 |
REMOTE
|
Yesith Alvarez
|
|
2025-08-11
|
|
Cisco ISE 3.0 - Authorization Bypass
|
106 |
REMOTE
|
İbrahimsql
|
|
2025-08-11
|
|
Cisco ISE 3.0 - Remote Code Execution (RCE)
|
124 |
REMOTE
|
İbrahimsql
|
|
2025-08-03
|
|
Swagger UI 1.0.3 - Cross-Site Scripting (XSS)
|
94 |
REMOTE
|
Byte Reaper
|
|
2025-08-03
|
|
Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure
|
72 |
REMOTE
|
nu11secur1ty
|
|
2025-07-22
|
|
Tenda FH451 1.0.0.9 Router - Stack-based Buffer Overflow
|
59 |
REMOTE
|
Byte Reaper
|
|
2025-07-22
|
|
Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS)
|
55 |
REMOTE
|
nu11secur1ty
|
|
2025-07-16
|
|
NodeJS 24.x - Path Traversal
|
148 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-07-16
|
|
MikroTik RouterOS 7.19.1 - Reflected XSS
|
107 |
REMOTE
|
Prak Sokchea
|
|
2025-07-16
|
|
Keras 2.15 - Remote Code Execution (RCE)
|
143 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-07-08
|
|
Microsoft Outlook - Remote Code Execution (RCE)
|
200 |
REMOTE
|
nu11secur1ty
|
|
2025-07-08
|
|
ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
|
141 |
REMOTE
|
Alexandre ZANNI
|
|
2025-07-08
|
|
Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
|
103 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-07-02
|
|
Microsoft SharePoint 2019 - NTLM Authentication
|
113 |
REMOTE
|
nu11secur1ty
|
|
2025-07-02
|
|
gogs 0.13.0 - Remote Code Execution (RCE)
|
155 |
REMOTE
|
cybersploit
|
|
2025-07-02
|
|
Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
|
169 |
REMOTE
|
4m3rr0r
|
|
2025-06-26
|
|
McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
|
147 |
REMOTE
|
Keenan Scott
|
|
2025-06-26
|
|
Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)
|
133 |
REMOTE
|
nu11secur1ty
|
|
2025-06-26
|
|
freeSSHd 1.0.9 - Denial of Service (DoS)
|
92 |
REMOTE
|
Fernando Mengali
|
|
2025-06-26
|
|
OneTrust SDK 6.33.0 - Denial Of Service (DoS)
|
74 |
REMOTE
|
Alameen Karim Merali
|
|
2025-06-26
|
|
PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
|
84 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-06-20
|
|
Ingress-NGINX 4.11.0 - Remote Code Execution (RCE)
|
143 |
REMOTE
|
Likhith Appalaneni
|
|
2025-06-20
|
|
FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
|
104 |
REMOTE
|
Shahid Hakim
|
|
2025-06-15
|
|
WebDAV Windows 10 - Remote Code Execution (RCE)
|
132 |
REMOTE
|
Dev Bui Hieu
|
|
2025-06-15
|
|
AirKeyboard iOS App 1.0.5 - Remote Input Injection
|
82 |
REMOTE
|
Chokri Hammedi
|
|
2025-06-15
|
|
Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
|
143 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-06-15
|
|
PCMan FTP Server 2.0.7 - Buffer Overflow
|
90 |
REMOTE
|
Fernando Mengali
|
|
2025-06-13
|
|
Windows File Explorer Windows 10 Pro x64 - TAR Extraction
|
94 |
REMOTE
|
Daniel Miranda
|
|
2025-06-13
|
|
Freefloat FTP Server 1.0 - Remote Buffer Overflow
|
80 |
REMOTE
|
Fernando Mengali
|
|
2025-06-09
|
|
ProSSHD 1.2 20090726 - Denial of Service (DoS)
|
84 |
REMOTE
|
Fernando Mengali
|
|
2025-06-05
|
|
Apache Tomcat 10.1.39 - Denial of Service (DoS)
|
115 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-06-05
|
|
ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
|
82 |
REMOTE
|
LiquidWorm
|
|
2025-06-05
|
|
Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)
|
111 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-06-05
|
|
Grandstream GSD3710 1.0.11.13 - Stack Overflow
|
68 |
REMOTE
|
Pepelux
|
|
2025-05-29
|
|
SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
|
86 |
REMOTE
|
İbrahimsql
|
|
2025-05-29
|
|
Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure
|
75 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-05-29
|
|
Automic Agent 24.3.0 HF4 - Privilege Escalation
|
77 |
REMOTE
|
Flora Schäfer
|
|
2025-05-29
|
|
Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
|
69 |
REMOTE
|
İbrahimsql
|
|
2025-05-25
|
|
ABB Cylon Aspect 3.08.03 - Guest2Root Privilege Escalation
|
72 |
REMOTE
|
LiquidWorm
|
|
2025-05-25
|
|
Grandstream GSD3710 1.0.11.13 - Stack Buffer Overflow
|
74 |
REMOTE
|
Pepelux
|
|
2025-05-25
|
|
Windows 2024.15 - Unauthenticated Desktop Screenshot Capture
|
92 |
REMOTE
|
Chokri Hammedi
|
|
2025-05-21
|
|
Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
|
133 |
REMOTE
|
Chokri Hammedi
|
|
2025-05-18
|
|
CrushFTP 11.3.1 - Authentication Bypass
|
140 |
REMOTE
|
İbrahimsql
|
|
2025-05-18
|
|
Invision Community 5.0.6 - Remote Code Execution (RCE)
|
149 |
REMOTE
|
Egidio Romano
|
|
2025-05-09
|
|
Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
|
116 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-04-22
|
|
Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
|
57 |
REMOTE
|
Milad karimi
|
|
2025-04-22
|
|
code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
|
90 |
REMOTE
|
Pruthu Raut
|
|
2025-04-22
|
|
WonderCMS 3.4.2 - Remote Code Execution (RCE)
|
74 |
REMOTE
|
Milad karimi
|
|
2025-04-22
|
|
OpenSSH server (sshd) 9.8p1 - Race Condition
|
74 |
REMOTE
|
Milad karimi
|
|
2025-04-18
|
|
Langflow 1.3.0 - Remote Code Execution (RCE)
|
64 |
REMOTE
|
VeryLazyTech
|
|
2025-04-17
|
|
TP-Link VN020 F3v(T) TT_V6.2.1021 - Denial Of Service (DOS)
|
50 |
REMOTE
|
Mohamed Maatallah
|
|
2025-04-17
|
|
TP-Link VN020 F3v(T) TT_V6.2.1021 - Buffer Overflow Memory Corruption
|
56 |
REMOTE
|
Mohamed Maatallah
|
|
2025-04-16
|
|
Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE)
|
91 |
REMOTE
|
Photubias
|
|
2025-04-16
|
|
Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass
|
68 |
REMOTE
|
ub3rsick
|
|
2025-04-16
|
|
WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page
|
54 |
REMOTE
|
Rasime Ekici
|
|
2025-04-16
|
|
Hugging Face Transformers MobileViTV2 4.41.1 - Remote Code Execution (RCE)
|
74 |
REMOTE
|
The Kernel Panic
|
|
2025-04-15
|
|
Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
|
70 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-04-15
|
|
Pymatgen 2024.1 - Remote Code Execution (RCE)
|
69 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Remote Command Execution (RCE)
|
79 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Cross-Site Scripting (XSS)
|
57 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Reflected Cross-Site Scripting (Reflected XSS)
|
55 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Stored Cross-Site Scripting (Stored XSS)
|
53 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Cross-Site Request Forgery (CSRF)
|
51 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-10
|
|
K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
|
51 |
REMOTE
|
M. Akil Gündoğan
|
|
2025-04-08
|
|
Sony XAV-AX5500 1.13 - Firmware Update Validation Remote Code Execution (RCE)
|
73 |
REMOTE
|
lkushinada
|
|
2025-04-08
|
|
InfluxDB OSS 2.7.11 - Operator Token Privilege Escalation
|
53 |
REMOTE
|
Andrea Pasin
|
|
2025-04-05
|
|
Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection
|
51 |
REMOTE
|
Armando Huesca Prida
|
|
2025-04-04
|
|
Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)
|
52 |
REMOTE
|
Ravindu Wickramasinghe
|
|
2025-04-04
|
|
Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting
|
54 |
REMOTE
|
Armando Huesca Prida
|
|
2025-04-04
|
|
Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
|
54 |
REMOTE
|
Armando Huesca Prida
|
|
2025-04-03
|
|
Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
|
68 |
REMOTE
|
Metin Yunus Kandemir
|
|
2025-04-03
|
|
Vite 6.2.2 - Arbitrary File Read
|
59 |
REMOTE
|
4m3rr0r
|
|
2025-04-02
|
|
SAP NetWeaver - 7.53 - HTTP Request Smuggling
|
50 |
REMOTE
|
C41Tx90
|
|
2025-03-22
|
|
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
|
65 |
REMOTE
|
Amir Hossein Jamshidi
|
|
2025-03-22
|
|
Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
|
52 |
REMOTE
|
Abinesh kamal K U
|
|
2024-05-13
|
|
CrushFTP < 11.1.0 - Directory Traversal
|
62 |
REMOTE
|
Abdualhadi khalifa
|
|
2024-04-21
|
|
Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
|
52 |
REMOTE
|
Kr0ff
|
|
2024-04-12
|
|
MinIO < 2024-01-31T20-20-33Z - Privilege Escalation
|
60 |
REMOTE
|
Jenson Zhao
|
|
2024-04-08
|
|
Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass
|
50 |
REMOTE
|
LiquidWorm
|
|
2024-04-02
|
|
GL-iNet MT6000 4.5.5 - Arbitrary File Download
|
58 |
REMOTE
|
Bandar Alharbi
|
|
2024-03-28
|
|
WinRAR version 6.22 - Remote Code Execution via ZIP archive
|
75 |
REMOTE
|
E1 Coders
|
|
2024-03-28
|
|
Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure
|
184 |
REMOTE
|
semaja2
|
|
2024-03-28
|
|
Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
|
83 |
REMOTE
|
Sean Pesce
|
