Latest public exploits (page 12)
Page 12 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.
CVEs with public exploits, newest evidence first (page 12 of 20)
| CVE | Severity | Exploitation evidence | Evidence date | Summary |
|---|---|---|---|---|
CVE-2024-9644 | Critical 9.8 | 1 PoC | The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. | |
CVE-2023-43364 | Critical 9.8 | 4 PoCs | main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution. | |
CVE-2023-37679 | Critical 9.8 | Metasploit, 1 PoC | A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server. | |
CVE-2019-7256 | Critical 9.8 | CISA KEV, Metasploit, 1 PoC | Linear eMerge E3-Series devices allow Command Injections. | |
CVE-2014-9583 | — | Metasploit, 1 PoC | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a… | |
CVE-2026-92744 | — | 1 PoC | Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem. | |
CVE-2026-82384 | Critical 9.8 | 2 PoCs | Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor e… | |
CVE-2026-6516 | Critical 10.0 | 1 PoC | Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API. | |
CVE-2026-49468 | Critical 9.8 | 2 PoCs | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. | |
CVE-2026-38751 | High 7.2 | 7 PoCs | OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php) | |
CVE-2026-109566 | Critical 9.8 | 1 PoC | Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@larave… | |
CVE-2026-106378 | High 8.3 | 1 PoC | Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a… | |
CVE-2026-104623 | Medium 6.3 | 1 PoC | A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11… | |
CVE-2026-103409 | Critical 9.8 | 1 PoC | A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing c… | |
CVE-2026-103056 | Critical 9.0 | 1 PoC | AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parame… | |
CVE-2025-43520 | Medium 5.5 | CISA KEV, 1 PoC | A memory corruption issue was addressed with improved memory handling. | |
CVE-2025-31277 | High 8.8 | CISA KEV, 2 PoCs | The issue was addressed with improved memory handling. | |
CVE-2025-28137 | Critical 9.8 | 1 PoC | The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. | |
CVE-2025-0890 | Critical 9.8 | 2 PoCs | **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in… | |
CVE-2024-9441 | Critical 9.8 | 6 PoCs | The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. | |
CVE-2024-47066 | Critical 9.0 | 2 PoCs | Lobe Chat is an open-source artificial intelligence chat framework. | |
CVE-2024-40891 | High 8.8 | CISA KEV, 2 PoCs | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could… | |
CVE-2023-48022 | Critical 9.8 | Metasploit, 3 PoCs | Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. | |
CVE-2023-42495 | Critical 9.8 | 1 PoC | Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | |
CVE-2023-41348 | High 8.8 | 1 PoC | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. | |
CVE-2023-41346 | High 8.8 | 1 PoC | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. | |
CVE-2023-41011 | Critical 9.8 | 1 PoC | Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcut_telnet.cg component. | |
CVE-2023-32315 | High 8.6 | CISA KEV, Metasploit, 17 PoCs | Openfire is an XMPP server licensed under the Open Source Apache License. | |
CVE-2023-39780 | High 8.8 | CISA KEV, 1 PoC | On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. | |
CVE-2023-32311 | High 7.1 | 1 PoC | CloudExplorer Lite is an open source cloud management platform. | |
CVE-2022-40624 | Critical 9.8 | 2 PoCs | pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814. | |
CVE-2021-27177 | Critical 9.8 | 1 PoC | An issue was discovered on FiberHome HG6245D devices through RP2613. | |
CVE-2020-8958 | High 7.2 | 3 PoCs | Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in… | |
CVE-2014-8361 | Critical 9.8 | CISA KEV, Metasploit, 1 PoC | The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. | |
CVE-2026-48500 | Medium 6.5 | 2 PoCs | Filament is a collection of full-stack components for accelerated Laravel development. | |
CVE-2026-40489 | — | 1 PoC | editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. | |
CVE-2026-29000 | Critical 9.1 | 26 PoCs | pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authenticat… | |
CVE-2026-1337 | Medium 5.4 | 3 PoCs | Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. | |
CVE-2026-116191 | High 7.5 | 2 PoCs | Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. | |
CVE-2026-116165 | — | 1 PoC | Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB deployments that lets clients without the master key delete the stored schema of… | |
CVE-2026-114820 | Critical 9.1 | 2 PoCs | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | |
CVE-2026-114625 | Critical 9.9 | CISA KEV, 3 PoCs | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. | |
CVE-2026-112705 | Medium 5.5 | 2 PoCs | An out-of-bounds write issue was addressed with improved bounds checking. | |
CVE-2026-112621 | High 7.5 | 4 PoCs | An out-of-bounds write issue was addressed with improved bounds checking. | |
CVE-2026-107326 | High 8.8 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. | |
CVE-2024-30090 | High 7.0 | 2 PoCs | Microsoft Streaming Service Elevation of Privilege Vulnerability | |
CVE-2026-93489 | — | 1 PoC | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operat… | |
CVE-2026-119025 | High 7.5 | 1 PoC | open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. | |
CVE-2026-88772 | High 8.1 | CISA KEV, Metasploit, 9 PoCs | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. | |
CVE-2026-88771 | Critical 9.8 | CISA KEV, Metasploit, 18 PoCs | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. |