Latest public exploits (page 16)
Page 16 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.
CVEs with public exploits, newest evidence first (page 16 of 20)
| CVE | Severity | Exploitation evidence | Evidence date | Summary |
|---|---|---|---|---|
CVE-2026-70748 | Critical 9.8 | 1 PoC | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-55944 | Critical 9.8 | 1 PoC | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. | |
CVE-2026-49881 | High 7.8 | 4 PoCs | In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. | |
CVE-2026-53576 | Critical 10.0 | 3 PoCs | Kestra is an open-source, event-driven orchestration platform. | |
CVE-2026-115893 | Critical 9.9 | 1 PoC | Wasmtime is a runtime for WebAssembly. | |
CVE-2023-23752 | Medium 5.3 | CISA KEV, Metasploit, 76 PoCs | An issue was discovered in Joomla! | |
CVE-2026-90932 | High 7.2 | 1 PoC | LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. | |
CVE-2026-90931 | Medium 5.4 | 1 PoC | LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files cont… | |
CVE-2026-50787 | High 7.5 | 1 PoC | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. | |
CVE-2026-43621 | High 8.1 | 1 PoC | Simple Machines Forum (SMF) through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gai… | |
CVE-2026-39902 | High 7.2 | 1 PoC | Cacti is an open source performance and fault management framework. | |
CVE-2026-31158 | Critical 9.8 | 1 PoC | SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page | |
CVE-2026-116370 | Medium 6.3 | 1 PoC | A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. | |
CVE-2026-116106 | High 7.3 | 1 PoC | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. | |
CVE-2026-116105 | Low 3.7 | 1 PoC | A weakness has been identified in HeyCyan App 1.0.103 on Android. | |
CVE-2026-116004 | Low 3.5 | 1 PoC | A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. | |
CVE-2026-116000 | High 7.3 | 1 PoC | A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. | |
CVE-2026-106781 | High 7.8 | 1 PoC | An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges. | |
CVE-2017-0143 | High 8.8 | CISA KEV, Metasploit, 25 PoCs | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | |
CVE-2026-21902 | Critical 9.8 | 2 PoCs | An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-… | |
CVE-2026-107092 | Critical 9.8 | 1 PoC | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. | |
CVE-2026-0303 | — | 2 PoCs | A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file… | |
CVE-2024-43047 | High 7.8 | CISA KEV, 1 PoC | Memory corruption while maintaining memory maps of HLOS memory. | |
CVE-2022-24355 | High 8.8 | 2 PoCs | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. | |
CVE-2021-3560 | High 7.8 | CISA KEV, Metasploit, 43 PoCs | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. | |
CVE-2026-4372 | High 7.8 | 1 PoC | A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. | |
CVE-2026-22679 | Critical 9.8 | 2 PoCs | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows att… | |
CVE-2026-1281 | Critical 9.8 | CISA KEV, Metasploit, 3 PoCs | A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | |
CVE-2026-116488 | Medium 6.8 | 1 PoC | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLengt… | |
CVE-2026-116487 | Medium 4.6 | 1 PoC | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOf… | |
CVE-2024-13985 | — | 2 PoCs | A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. | |
CVE-2023-37569 | High 8.8 | 1 PoC | This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. | |
CVE-2023-28771 | Critical 9.8 | CISA KEV, Metasploit, 7 PoCs | Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, an… | |
CVE-2022-2639 | High 7.8 | 6 PoCs | An integer coercion error was found in the openvswitch kernel module. | |
CVE-2022-24803 | Critical 10.0 | 1 PoC | Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. | |
CVE-2021-28164 | Medium 5.3 | Metasploit, 3 PoCs | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF direc… | |
CVE-2026-84589 | Medium 5.5 | 1 PoC | A permissions issue was addressed with additional restrictions. | |
CVE-2026-75650 | Critical 10.0 | CISA KEV, 7 PoCs | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. | |
CVE-2026-116063 | Medium 4.7 | 1 PoC | A weakness has been identified in DedeCMS up to 5.7.118. | |
CVE-2018-20062 | Critical 9.8 | CISA KEV, Metasploit, 5 PoCs | An issue was discovered in NoneCms V1.3. | |
CVE-2017-1000028 | High 7.5 | Metasploit, 3 PoCs | Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP G… | |
CVE-2026-18107 | High 7.8 | 1 PoC | A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. | |
CVE-2026-59248 | — | 1 PoC | Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a deni… | |
CVE-2026-14440 | Medium 6.8 | 1 PoC | Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. | |
CVE-2026-112866 | Critical 9.3 | 1 PoC | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects… | |
CVE-2025-26326 | High 8.8 | 2 PoCs | A vulnerability was identified in the NVDA Remote (version 2.6.4) and Tele NVDA Remote (version 2025.3.3) remote connection add-ons, which allows an attacker to obtain total control of the remote sys… | |
CVE-2025-0651 | High 7.1 | 1 PoC | Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. | |
CVE-2015-1805 | — | 7 PoCs | The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inat… | |
CVE-2026-83548 | Critical 10.0 | CISA KEV, Metasploit, 4 PoCs | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. | |
CVE-2026-74580 | High 8.8 | 4 PoCs | In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring … |