Latest public exploits (page 15)
Page 15 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.
CVEs with public exploits, newest evidence first (page 15 of 20)
| CVE | Severity | Exploitation evidence | Evidence date | Summary |
|---|---|---|---|---|
CVE-2026-19632 | Critical 9.8 | 5 PoCs | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trp_get… | |
CVE-2026-116692 | Critical 9.8 | 2 PoCs | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. | |
CVE-2026-112706 | Medium 5.5 | 1 PoC | A permissions issue was addressed with additional restrictions. | |
CVE-2025-58443 | Critical 9.1 | 2 PoCs | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. | |
CVE-2025-5548 | High 7.3 | 39 PoCs | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. | |
CVE-2025-54726 | Critical 9.3 | 2 PoCs | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows SQL Injection.This issue affects… | |
CVE-2025-30567 | High 7.5 | 2 PoCs | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through <= 2.6.2. | |
CVE-2025-27740 | High 8.8 | 2 PoCs | Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network. | |
CVE-2025-24000 | High 8.8 | 2 PoCs | Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through <= 3.2.0. | |
CVE-2024-8503 | Critical 9.8 | Metasploit, 2 PoCs | An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. | |
CVE-2024-7120 | Medium 6.3 | 5 PoCs | A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. | |
CVE-2024-4443 | Critical 9.8 | 2 PoCs | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and incl… | |
CVE-2023-42824 | High 7.8 | CISA KEV, 2 PoCs | The issue was addressed with improved checks. | |
CVE-2022-1388 | Critical 9.8 | CISA KEV, Metasploit, 93 PoCs | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed… | |
CVE-2020-19750 | High 7.5 | 1 PoC | An issue was discovered in gpac 0.8.0. | |
CVE-2019-18935 | Critical 9.8 | CISA KEV, Metasploit, 19 PoCs | Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. | |
CVE-2017-1000486 | Critical 9.8 | CISA KEV, Metasploit, 9 PoCs | Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution | |
CVE-2026-96778 | High 8.8 | 1 PoC | Pillow is a Python imaging library. | |
CVE-2026-86426 | Critical 9.8 | 2 PoCs | LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string… | |
CVE-2026-38056 | High 8.8 | 1 PoC | A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. | |
CVE-2021-42574 | High 8.3 | 14 PoCs | An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. | |
CVE-2019-16759 | Critical 9.8 | CISA KEV, Metasploit, 15 PoCs | vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. | |
CVE-2018-17246 | Critical 9.8 | 3 PoCs | Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. | |
CVE-2026-1277 | Medium 4.7 | 2 PoCs | The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dism… | |
CVE-2024-49138 | High 7.8 | CISA KEV, 18 PoCs | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
CVE-2022-30781 | High 7.5 | Metasploit, 2 PoCs | Gitea before 1.16.7 does not escape git fetch remote. | |
CVE-2014-3153 | High 7.8 | CISA KEV, Metasploit, 10 PoCs | The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte… | |
CVE-2026-41709 | Low 2.7 | CISA KEV | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged. | |
CVE-2026-40281 | Critical 10.0 | 5 PoCs | Gotenberg is a Docker-powered stateless API for PDF files. | |
CVE-2026-116471 | Medium 4.3 | 1 PoC | A security flaw has been discovered in BKWLD Decoy up to 5.11.1. | |
CVE-2026-102785 | — | 4 PoCs | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized im… | |
CVE-2026-9539 | Medium 6.5 | 1 PoC | An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a pr… | |
CVE-2026-8467 | — | 2 PoCs | Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. | |
CVE-2026-80097 | High 8.6 | 1 PoC | Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally. | |
CVE-2026-16723 | Critical 9.0 | 15 PoCs | A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. | |
CVE-2026-15176 | High 8.1 | 1 PoC | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_fil… | |
CVE-2026-1306 | Critical 9.8 | 2 PoCs | The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1… | |
CVE-2026-1296 | Medium 6.1 | 1 PoC | The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POS… | |
CVE-2026-117532 | Critical 9.8 | 1 PoC | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. | |
CVE-2026-110720 | Critical 9.9 | 1 PoC | Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. | |
CVE-2025-24813 | Critical 9.8 | CISA KEV, Metasploit, 73 PoCs | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apach… | |
CVE-2024-50379 | Critical 9.8 | 21 PoCs | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (… | |
CVE-2024-47167 | Critical 9.8 | 2 PoCs | Gradio is an open-source Python package designed for quick prototyping. | |
CVE-2024-1561 | High 7.5 | 5 PoCs | An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. | |
CVE-2026-97629 | Medium 6.5 | 2 PoCs | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL sessio… | |
CVE-2026-97205 | High 8.1 | 2 PoCs | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. | |
CVE-2026-93328 | — | 1 PoC | Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attac… | |
CVE-2026-90817 | Critical 9.8 | 7 PoCs | An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipula… | |
CVE-2026-84636 | Medium 5.5 | 1 PoC | An authorization issue was addressed with improved state management. | |
CVE-2026-77647 | Critical 9.8 | Metasploit, 2 PoCs | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. |