The Exploit Database
The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database.
Remote Exploits
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-02-11 |
|
Windows 10.0.17763.7009 - spoofing vulnerability | 206 | REMOTE | beatrizfn |
| 2026-02-04 |
|
windows 10/11 - NTLM Hash Disclosure Spoofing | 88 | REMOTE | beatrizfn |
| 2026-02-04 |
|
Redis 8.0.2 - RCE | 148 | REMOTE | Beatriz Fresno Naumova |
| 2026-02-04 |
|
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE | 89 | REMOTE | Beatriz Fresno Naumova |
| 2025-09-16 |
|
Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell | 329 | REMOTE | LiquidWorm |
| 2025-09-16 |
|
ClipBucket 5.5.0 - Arbitrary File Upload | 240 | REMOTE | Mukundsinh Solanki (r00td3str0y3r) |
| 2025-09-16 |
|
ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF) | 154 | REMOTE | Mukundsinh Solanki (r00td3str0y3r) |
| 2025-09-16 |
|
HTTP/2 2.0 - Denial Of Service (DOS) | 145 | REMOTE | Madhusudhan Rajappa |
| 2025-09-16 |
|
HTMLDOC 1.9.13 - Stack Buffer Overflow | 130 | REMOTE | wulfgarpro |
| 2025-08-26 |
|
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE) | 245 | REMOTE | Giorgi Dograshvili |
Local Exploits
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-04-30 |
|
Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap | 2 | LOCAL | nu11secur1ty |
| 2026-04-30 |
|
Windows 11 23H2 - Denial of Service (DoS) | 1 | LOCAL | tryhardertryh |
| 2026-04-30 |
|
Windows 11 25H2 - Heap Overflow | 2 | LOCAL | nu11secur1ty |
| 2026-04-29 |
|
GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation | 6 | LOCAL | aliguliyev |
| 2026-04-29 |
|
OpenWrt 23.05 - Authenticated Remote Code Execution (RCE) | 4 | LOCAL | Ahmet Mersin |
| 2026-04-29 |
|
Fedora - Local Privilege Escalation | 5 | LOCAL | Chris |
| 2026-04-29 |
|
Atlona ATOMERX21 - Authenticated Command Injection | 6 | LOCAL | rizzziom |
| 2026-04-22 |
|
Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation | 16 | LOCAL | Xavi Beltran |
| 2026-04-22 |
|
AVAST Antivirus 25.11 - Unquoted Service Path | 16 | LOCAL | Milad Karimi (Ex3ptionaL) |
| 2026-04-10 |
|
NetBT e-Fatura - Privilege Escalation | 30 | LOCAL | seccops |
Web Applications
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2026-04-30 | ![]() |
FUXA 1.2.8 - Authentication Bypass + RCE Exploit | 1 | WEB | joshua |
| 2026-04-30 | ![]() |
Python-Multipart 0.0.22 - Path Traversal | 1 | WEB | jefersoncardoso.dev |
| 2026-04-30 | ![]() |
Repetier-Server 1.4.10 - Path Traversal | 2 | WEB | banyamer |
| 2026-04-30 | ![]() |
HUSTOJ Zip-Slip v26.01.24 - RCE | 2 | WEB | Marshall Whittaker |
| 2026-04-30 | ![]() |
BusyBox 1.37.0 - Path Traversal | 1 | WEB | Calil Khalil |
| 2026-04-30 | ![]() |
JUNG Smart Visu Server 1.1.1050 - Dos | 2 | WEB | banyamer |
| 2026-04-30 | ![]() |
SumatraPDF 3.5.2 - Remote Code Execution | 2 | WEB | banyamer |
| 2026-04-30 | ![]() |
NiceGUI 3.6.1 - Path Traversal | 0 | WEB | banyamer |
| 2026-04-30 | ![]() |
Frigate NVR 0.16.3 - Remote Code Execution | 0 | WEB | jduardo2704 |
| 2026-04-30 | ![]() |
Js2Py 0.74 - RCE | 0 | WEB | alisunbul |
DoS/PoC
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2025-07-28 | ![]() |
Xlight FTP 1.1 - Denial Of Service (DOS) | 130 | DOS | Fernando Mengali |
| 2024-08-28 | ![]() |
Windows TCP/IP - RCE Checker and Denial of Service | 137 | DOS | Photubias |
| 2024-03-28 | ![]() |
RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service | 117 | DOS | ice-wzl |
| 2024-02-26 | ![]() |
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS' | 110 | DOS | hyp3rlinx |
| 2024-02-19 | ![]() |
XAMPP - Buffer Overflow POC | 110 | DOS | Talson |
| 2024-02-13 | ![]() |
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Remote Denial Of Service | 111 | DOS | LiquidWorm |
| 2024-02-09 | ![]() |
Elasticsearch - StackOverflow DoS | 123 | DOS | TOUHAMI Kasbaoui |
| 2024-02-02 | ![]() |
Electrolink FM/DAB/TV Transmitter - Unauthenticated Remote DoS | 134 | DOS | LiquidWorm |
| 2023-10-09 | ![]() |
OpenPLC WebServer 3 - Denial of Service | 88 | DOS | Kai Feng |
| 2023-10-09 | ![]() |
Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service | 108 | DOS | LiquidWorm |
Shellcode
Papers
| Date | D | Description | Plat. | Author | |
|---|---|---|---|---|---|
| 2018-11-16 | ![]() |
The Powerful Resource of PHP Stream Wrappers | 750 | PAPERS | Netsparker |
| 2018-11-01 | ![]() |
Phrack: Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability (Adam | 675 | PAPERS | phrack |
| 2018-10-09 | ![]() |
A Red Teamer’s guide to pivoting | 624 | PAPERS | Artem Kondratenko |
| 2018-10-08 | ![]() |
Phrack: Twenty years of Escaping the Java Sandbox (Ieu Eauvidoum & disk noise) | 1607 | PAPERS | phrack |
| 2018-01-15 | ![]() |
Phrack: .NET Instrumentation via MSIL bytecode injection (Antonio "s4tan" Parata | 1480 | PAPERS | phrack |
| 2017-08-28 | ![]() |
Abusing Token Privileges For LPE | 1007 | PAPERS | drone and breenmachine |
| 2017-01-12 | ![]() |
OpenSSL - Weak KDF | 1046 | PAPERS | anonymous |
| 2014-08-27 | ![]() |
SSDP Amplification Scanner | 790 | PAPERS | SaMaN |
| 2014-06-26 | ![]() |
[Hacking-Contest] SSH Server wrapper | 767 | PAPERS | Jakob Lell |
| 2012-03-20 | ![]() |
Full MSSQL Injection PWNage | 1022 | PAPERS | CWH Underground |



