A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. These vulnerabilities are utilized by our vulnerability management tool InsightVM. The exploits are all included in the Metasploit framework and utilized by our penetration testing tool, Metasploit Pro. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 141 - 160 of 5,803 in total
Ivanti Avalanche FileStoreConfig File Upload
Disclosed: April 24, 2023
module
Explore
Piwigo CVE-2023-26876 Gather Credentials via SQL Injection
Disclosed: April 21, 2023
module
Explore
ManageEngine ADManager Plus ChangePasswordAction Authenticated Command Injection
Disclosed: April 12, 2023
module
Explore
Windows Common Log File System Driver (clfs.sys) Elevation of Privilege Vulnerability
Disclosed: April 11, 2023
module
Explore
CVE-2023-21554 - QueueJumper - MSMQ RCE Check
Disclosed: April 11, 2023
module
Explore
Jasmin Ransomware Web Server Unauthenticated SQL Injection
Disclosed: April 08, 2023
module
Explore
Jasmin Ransomware Web Server Unauthenticated Directory Traversal
Disclosed: April 08, 2023
module
Explore
Pentaho Business Server Auth Bypass and Server Side Template Injection RCE
Disclosed: April 04, 2023
module
Explore
Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution
Disclosed: March 31, 2023
module
Explore
Rocket Software Unidata udadmin_server Authentication Bypass
Disclosed: March 30, 2023
module
Explore
Rocket Software Unidata udadmin_server Stack Buffer Overflow in Password
Disclosed: March 30, 2023
module
Explore
Wordpress Plugin WooCommerce Payments Unauthenticated Admin Creation
Disclosed: March 22, 2023
module
Explore
Local Privilege Escalation via CVE-2023-0386
Disclosed: March 22, 2023
module
Explore
MinIO Bootstrap Verify Information Disclosure
Disclosed: March 20, 2023
module
Explore
pfSense Restore RRD Data Command Injection
Disclosed: March 18, 2023
module
Explore
Dolibarr 16 pre-auth contact database dump
Disclosed: March 14, 2023
module
Explore
Adobe ColdFusion Unauthenticated Remote Code Execution
Disclosed: March 14, 2023
module
Explore
PaperCut PaperCutNG Authentication Bypass
Disclosed: March 13, 2023
module
Explore
Lexmark Device Embedded Web Server RCE
Disclosed: March 13, 2023
module
Explore
SPIP form PHP Injection
Disclosed: February 27, 2023
module
Explore