Latest public exploits (page 10)

Page 10 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.

CVEs with public exploits, newest evidence first (page 10 of 20)

CVESeverityExploitation evidenceEvidence dateSummary
CVE-2018-16763Critical 9.843 PoCsFUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.
CVE-2026-92183High 7.81 PoCGIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVE-2026-80587Critical 9.81 PoCIn the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also b…
CVE-2026-112689High 8.41 PoCAn out-of-bounds write issue was addressed with improved input validation.
CVE-2021-4034High 7.8CISA KEV, Metasploit, 218 PoCsA local privilege escalation vulnerability was found on polkit's pkexec utility.
CVE-2019-11478Medium 5.31 PoCJonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.
CVE-2009-4496—2 PoCsBoa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwri…
CVE-2024-27834Medium 5.5CISA KEVThe issue was addressed with improved checks.
CVE-2026-59795High 8.11 PoCIn JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
CVE-2024-25600Critical 10.0Metasploit, 31 PoCsImproper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
CVE-2024-21626High 8.6Metasploit, 25 PoCsrunc is a CLI tool for spawning and running containers on Linux according to the OCI specification.
CVE-2026-120318High 7.21 PoCProduct Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf…
CVE-2026-106991High 7.11 PoChustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control.
CVE-2025-48384High 8.0CISA KEV, 55 PoCsGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
CVE-2024-32002Critical 9.095 PoCsGit is a revision control system.
CVE-2026-20687High 7.15 PoCsA use after free issue was addressed with improved memory management.
CVE-2025-41450High 8.23 PoCsImproper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
CVE-2023-29017Critical 10.05 PoCsvm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.
CVE-2026-82474High 7.81 PoCSudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
CVE-2026-117561High 7.81 PoCCodefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values.
CVE-2026-105863Critical 9.41 PoCPayload is a free and open source headless content management system.
CVE-2025-46673Medium 4.91 PoCNASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).
CVE-2025-24054Medium 6.5CISA KEV, 14 PoCsExternal control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2024-10441Critical 9.84 PoCsImproper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.2-64570-4, 7.2.1-690…
CVE-2023-34634High 7.8Metasploit, 2 PoCsGreenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
CVE-2026-115904Critical 9.61 PoCTopluyo is a social networking platform.
CVE-2026-112688High 8.81 PoCA memory corruption issue was addressed with improved memory handling.
CVE-2026-110447Critical 9.8CISA KEV, 4 PoCsCollabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerabi…
CVE-2024-1086High 7.8CISA KEV, 20 PoCsA use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVE-2021-3156High 7.8CISA KEV, Metasploit, 108 PoCsSudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…
CVE-2026-74583High 7.81 PoCIn the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores ra…
CVE-2026-53157High 7.81 PoCIn the Linux kernel, the following vulnerability has been resolved: net: phonet: free phonet_device after RCU grace period phonet_device_destroy() removes a phonet_device from the per-net device li…
CVE-2026-33186Critical 9.12 PoCsgRPC-Go is the Go language implementation of gRPC.
CVE-2026-14900Critical 9.81 PoCThe Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the js_to_php function.
CVE-2026-112816—4 PoCsImproper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trus…
CVE-2025-8110High 8.8CISA KEV, 30 PoCsImproper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
CVE-2023-37474High 7.52 PoCsCopyparty is a portable file server.
CVE-2026-9151—1 PoCAn OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1.
CVE-2026-14431High 8.82 PoCsType Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2024-48990High 7.8Metasploit, 26 PoCsQualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlle…
CVE-2023-30856High 8.31 PoCeDEX-UI is a science fiction terminal emulator.
CVE-2026-86962Medium 5.51 PoCA double free issue was addressed with improved memory management.
CVE-2026-43715High 8.81 PoCA use-after-free issue was addressed with improved memory management.
CVE-2026-19971Medium 4.71 PoCA flaw has been found in LB-Link WR1210M 1.0.3.
CVE-2026-120218Low 3.51 PoCA flaw has been found in Typemill up to 2.26.0.
CVE-2026-116296Medium 6.51 PoCThe API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories.
CVE-2026-114509—10 PoCsLaravel is a web application framework.
CVE-2026-105192Critical 9.82 PoCsLMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks.
CVE-2023-30861High 7.53 PoCsFlask is a lightweight WSGI web application framework.
CVE-2022-36532High 8.82 PoCsBolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.