Vulnerability & Exploit Database

Try Surface Command Get a continuous 360° view of your attack surface

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. The exploits are all included in the Metasploit framework. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 01 - 20 of 6,028 in total
Erlang OTP Pre-Auth RCE Scanner and Exploit
Disclosed: 4月 16, 2025
module
Explore
Craft CMS Image Transform Preauth RCE (CVE-2025-32432)
Disclosed: 4月 14, 2025
module
Explore
BentoML's runner server RCE
Disclosed: 4月 09, 2025
module
Explore
Langflow AI RCE
Disclosed: 4月 09, 2025
module
Explore
BentoML RCE
Disclosed: 4月 04, 2025
module
Explore
pgAdmin Query Tool authenticated RCE (CVE-2025-2945)
Disclosed: 4月 03, 2025
module
Explore
Appsmith RCE
Disclosed: 3月 25, 2025
module
Explore
Pandora FMS authenticated command injection leading to RCE via chromium_path or phantomjs_bin
Disclosed: 3月 17, 2025
module
Explore
GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi
Disclosed: 3月 12, 2025
module
Explore
Tomcat Partial PUT Java Deserialization
Disclosed: 3月 10, 2025
module
Explore
mySCADA myPRO Manager Credential Harvester (CVE-2025-24865 and CVE-2025-22896)
Disclosed: 2月 13, 2025
module
Explore
InvokeAI RCE
Disclosed: 2月 07, 2025
module
Explore
D-Tale RCE
Disclosed: 2月 05, 2025
module
Explore
Unauthenticated RCE in NetAlertX
Disclosed: 1月 30, 2025
module
Explore
NetAlertX File Read Vulnerability
Disclosed: 1月 30, 2025
module
Explore
SimpleHelp Path Traversal Vulnerability CVE-2024-57727
Disclosed: 1月 12, 2025
module
Explore
Sitecore CVE-2025-27218 BinaryFormatter Deserialization Exploit
Disclosed: 1月 06, 2025
module
Explore
Netis Router Exploit Chain Reactor (CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457).
Disclosed: 12月 27, 2024
module
Explore
Windows Cloud File Mini Filer Driver Heap Overflow
Disclosed: 12月 19, 2024
module
Explore
Craft CMS Twig Template Injection RCE via FTP Templates Path
Disclosed: 12月 19, 2024
module
Explore