Latest public exploits (page 11)
Page 11 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.
CVEs with public exploits, newest evidence first (page 11 of 20)
| CVE | Severity | Exploitation evidence | Evidence date | Summary |
|---|---|---|---|---|
CVE-2021-43798 | High 7.5 | CISA KEV, Metasploit, 82 PoCs | Grafana is an open-source platform for monitoring and observability. | |
CVE-2026-63765 | High 8.2 | 1 PoC | Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blobs in any tenant acc… | |
CVE-2026-107406 | — | 4 PoCs | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. | |
CVE-2024-57521 | Critical 10.0 | 3 PoCs | SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java. | |
CVE-2017-9822 | High 8.8 | CISA KEV, Metasploit, 4 PoCs | DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." | |
CVE-2026-88773 | Critical 10.0 | Metasploit, 7 PoCs | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. | |
CVE-2026-84295 | Critical 10.0 | 1 PoC | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including… | |
CVE-2026-115965 | High 8.5 | 1 PoC | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows Blind SQL Injection.This issue affects BuddyPress: from n… | |
CVE-2025-1974 | Critical 9.8 | 28 PoCs | A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ing… | |
CVE-2024-4577 | Critical 9.8 | CISA KEV, Metasploit, 106 PoCs | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" b… | |
CVE-2019-11043 | High 8.7 | CISA KEV, Metasploit, 32 PoCs | In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space… | |
CVE-2026-98937 | — | 1 PoC | In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains are requested perf_event_open() currently gates perf_allow_kernel() only on… | |
CVE-2021-27460 | Critical 10.0 | 1 PoC | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will b… | |
CVE-2026-89633 | Critical 9.8 | 1 PoC | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes data pointers directly from s… | |
CVE-2026-77396 | High 7.1 | 1 PoC | PJSIP is a free and open source multimedia communication library written in C. | |
CVE-2026-36425 | Medium 6.5 | 3 PoCs | An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. | |
CVE-2026-32202 | Medium 4.3 | CISA KEV, 9 PoCs | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | |
CVE-2026-18649 | High 7.5 | 2 PoCs | A flaw was found in the GStreamer gst-plugins-good package. | |
CVE-2026-112487 | High 7.8 | 1 PoC | A path handling issue was addressed with improved validation. | |
CVE-2026-111585 | High 8.8 | 1 PoC | An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to… | |
CVE-2026-103039 | Critical 9.8 | 1 PoC | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. | |
CVE-2025-6934 | Critical 9.8 | 14 PoCs | The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all version… | |
CVE-2025-24799 | High 7.5 | Metasploit, 8 PoCs | GLPI is a free asset and IT management software package. | |
CVE-2026-54523 | Critical 9.6 | 1 PoC | Kyverno is a policy engine designed for cloud native platform engineering teams. | |
CVE-2026-100105 | High 7.7 | 1 PoC | A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integration to a legacy schema v… | |
CVE-2024-23334 | Medium 5.9 | 18 PoCs | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. | |
CVE-2021-44142 | High 8.8 | 5 PoCs | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba version… | |
CVE-2026-119712 | Medium 6.4 | 1 PoC | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding i… | |
CVE-2026-116366 | — | 1 PoC | An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server. | |
CVE-2026-116244 | High 8.2 | 1 PoC | When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the Kerberos library fell back to the default credential… | |
CVE-2021-3493 | High 8.8 | CISA KEV, Metasploit, 26 PoCs | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. | |
CVE-2012-0002 | — | Metasploit, 2 PoCs | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 d… | |
CVE-2026-93680 | Critical 9.8 | Metasploit, 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication. | |
CVE-2026-89020 | High 8.8 | 1 PoC | MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to… | |
CVE-2026-62958 | High 7.9 | 1 PoC | libriscv is a RISC-V sandbox and emulator. | |
CVE-2026-61515 | Critical 9.8 | 1 PoC | Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a… | |
CVE-2026-118776 | Low 3.7 | 1 PoC | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-118238 | High 7.2 | 1 PoC | The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. | |
CVE-2026-117184 | High 7.5 | 1 PoC | An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint | |
CVE-2026-117183 | High 7.5 | 1 PoC | A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a cr… | |
CVE-2026-117182 | Medium 5.4 | 1 PoC | An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted… | |
CVE-2026-114148 | High 7.8 | 1 PoC | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. | |
CVE-2026-110200 | Medium 6.5 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information. | |
CVE-2026-109384 | High 8.8 | 1 PoC | The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. | |
CVE-2026-108097 | High 8.1 | 3 PoCs | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. | |
CVE-2026-107329 | Critical 9.9 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation. | |
CVE-2026-107328 | Critical 9.9 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec. | |
CVE-2026-107327 | Critical 9.9 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization. | |
CVE-2026-107268 | Medium 4.3 | 1 PoC | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. | |
CVE-2026-103688 | Critical 9.8 | 1 PoC | The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to acce… |