Vulnerability & Exploit Database

Try Surface Command Get a continuous 360° view of your attack surface

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. The exploits are all included in the Metasploit framework. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 101 - 120 of 6,012 in total
Fortra GoAnywhere MFT Unauthenticated Remote Code Execution
Disclosed: January 22, 2024
module
Explore
Gambio Online Webshop unauthenticated PHP Deserialization Vulnerability
Disclosed: January 19, 2024
module
Explore
Atlassian Confluence SSTI Injection
Disclosed: January 16, 2024
module
Explore
GitLab Password Reset Account Takeover
Disclosed: January 11, 2024
module
Explore
Netis router MW5360 unauthenticated RCE.
Disclosed: January 11, 2024
module
Explore
Wordpress POST SMTP Account Takeover
Disclosed: January 10, 2024
module
Explore
Ivanti Connect Secure Unauthenticated Remote Code Execution
Disclosed: January 10, 2024
module
Explore
Cacti RCE via SQLi in pollers.php
Disclosed: December 20, 2023
module
Explore
MajorDoMo Command Injection
Disclosed: December 15, 2023
module
Explore
WordPress Backup Migration Plugin PHP Filter Chain RCE
Disclosed: December 11, 2023
module
Explore
GL.iNet Unauthenticated Remote Command Execution via the logread module.
Disclosed: December 10, 2023
module
Explore
Chamilo v1.11.24 Unrestricted File Upload PHP Webshell
Disclosed: November 28, 2023
module
Explore
Splunk Authenticated XSLT Upload RCE
Disclosed: November 28, 2023
module
Explore
Control iD iDSecure Authentication Bypass (CVE-2023-6329)
Disclosed: November 27, 2023
module
Explore
WordPress Royal Elementor Addons RCE
Disclosed: November 23, 2023
module
Explore
ownCloud Phpinfo Reader
Disclosed: November 21, 2023
module
Explore
Ray static arbitrary file read
Disclosed: November 15, 2023
module
Explore
Ray cpu_profile command injection
Disclosed: November 15, 2023
module
Explore
Ray Agent Job RCE
Disclosed: November 15, 2023
module
Explore
GitLens Git Local Configuration Exec
Disclosed: November 14, 2023
module
Explore