Latest public exploits (page 19)
Page 19 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.
CVEs with public exploits, newest evidence first (page 19 of 20)
| CVE | Severity | Exploitation evidence | Evidence date | Summary |
|---|---|---|---|---|
CVE-2023-34362 | Critical 9.8 | CISA KEV, Metasploit, 20 PoCs | In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transf… | |
CVE-2017-5638 | Critical 9.8 | CISA KEV, Metasploit, 95 PoCs | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows r… | |
CVE-2026-97859 | Medium 6.5 | 3 PoCs | Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the `individualPermsChecker` midd… | |
CVE-2026-24332 | Medium 4.3 | 3 PoCs | Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user i… | |
CVE-2026-110936 | Medium 6.7 | CISA KEV, 1 PoC | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). | |
CVE-2024-32868 | Medium 6.5 | 1 PoC | ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. | |
CVE-2023-0482 | Medium 5.5 | 1 PoC | In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a… | |
CVE-2022-30190 | High 7.8 | CISA KEV, Metasploit, 114 PoCs | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. | |
CVE-2021-34527 | High 8.8 | CISA KEV, Metasploit, 36 PoCs | A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. | |
CVE-2021-26855 | Critical 9.1 | CISA KEV, Metasploit, 68 PoCs | Microsoft Exchange Server Remote Code Execution Vulnerability | |
CVE-2020-1712 | High 7.8 | 1 PoC | A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. | |
CVE-2018-10933 | Critical 9.1 | Metasploit, 45 PoCs | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. | |
CVE-2017-20001 | High 7.5 | 1 PoC | The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. | |
CVE-2020-1472 | Medium 5.5 | CISA KEV, Metasploit, 86 PoCs | An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). | |
CVE-2026-75045 | Critical 9.1 | 1 PoC | In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature | |
CVE-2026-52887 | Critical 10.0 | 2 PoCs | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. | |
CVE-2026-29014 | Critical 9.8 | 1 PoC | MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PH… | |
CVE-2025-69413 | Medium 5.3 | 1 PoC | In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists. | |
CVE-2025-63353 | Critical 9.8 | 6 PoCs | A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. | |
CVE-2025-50460 | Critical 9.8 | 2 PoCs | A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). | |
CVE-2025-48561 | Medium 5.5 | 3 PoCs | In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. | |
CVE-2024-9264 | Critical 9.9 | Metasploit, 19 PoCs | The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. | |
CVE-2024-55947 | High 8.8 | 1 PoC | Gogs is an open source self-hosted Git service. | |
CVE-2024-45846 | High 8.8 | 1 PoC | An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. | |
CVE-2024-45337 | Critical 9.1 | 5 PoCs | Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. | |
CVE-2024-22203 | Critical 9.1 | 1 PoC | Whoogle Search is a self-hosted metasearch engine. | |
CVE-2022-36551 | Medium 6.5 | 1 PoC | A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the sys… | |
CVE-2023-0297 | Critical 9.8 | Metasploit, 10 PoCs | Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. | |
CVE-2020-13927 | Critical 9.8 | CISA KEV, Metasploit, 1 PoC | The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. | |
CVE-2026-91858 | Medium 6.5 | 1 PoC | FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance() and enabling only FEATURE_SECURE_PROCESSING befor… | |
CVE-2026-88901 | High 8.2 | 1 PoC | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel. | |
CVE-2026-88900 | High 8.8 | 1 PoC | Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. | |
CVE-2026-85316 | Medium 4.8 | 1 PoC | Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. | |
CVE-2026-85317 | Medium 4.8 | 1 PoC | Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. | |
CVE-2026-85315 | Medium 5.3 | 1 PoC | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. | |
CVE-2026-72867 | Critical 9.9 | 2 PoCs | Dokploy is a free, self-hostable Platform as a Service (PaaS). | |
CVE-2026-5562 | High 7.3 | 2 PoCs | A vulnerability was identified in provectus kafka-ui up to 0.7.2. | |
CVE-2026-110899 | High 7.1 | 1 PoC | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a t… | |
CVE-2026-10961 | High 8.3 | 1 PoC | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… | |
CVE-2025-27509 | — | 1 PoC | fleetdm/fleet is an open source device management, built on osquery. | |
CVE-2025-69212 | High 8.8 | 15 PoCs | OpenSTAManager is an open source management software for technical assistance and invoicing. | |
CVE-2023-32681 | Medium 6.1 | 2 PoCs | Requests is a HTTP library. | |
CVE-2026-9618 | Medium 4.3 | 1 PoC | The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to… | |
CVE-2026-77680 | Medium 5.3 | 1 PoC | An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. | |
CVE-2026-110372 | Critical 9.8 | 1 PoC | Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40. | |
CVE-2026-104736 | Critical 9.8 | 3 PoCs | The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter d… | |
CVE-2023-47250 | High 8.8 | 1 PoC | In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attackers (with access to a VNC session) to access the X11 deskto… | |
CVE-2026-44714 | High 7.5 | 1 PoC | The bitcoinj library is a Java implementation of the Bitcoin protocol. | |
CVE-2026-78250 | Medium 4.3 | 1 PoC | A vulnerability was identified in bytebot-ai bytebot 0.0.1. | |
CVE-2026-113468 | — | 1 PoC | The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. |