Latest Vulnerabilities with Public Exploits

Updated 5h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

350,703 CVEs tracked 54,013 with exploits 4,961 exploited in wild 1,591 CISA KEV 4,122 Nuclei templates 54,204 vendors 45,367 researchers

54,013 results Clear all

EIP-2026-102026 1 PoC Analysis PRE-CVE

SOYAL Biometric Access Control System 5.0 - Master Code Disclosure

EIP-2026-106181 1 PoC Analysis PRE-CVE

CouchCMS 2.2.1 - Server-Side Request Forgery

EIP-2026-110149 1 PoC Analysis PRE-CVE

Online News Portal 1.0 - 'Multiple' Stored Cross-Site Scripting

EIP-2026-110150 1 PoC Analysis PRE-CVE

Online News Portal 1.0 - 'name' SQL Injection

EIP-2026-111522 1 PoC Analysis PRE-CVE

Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated)

EIP-2026-117118 1 PoC Analysis PRE-CVE

Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path

EIP-2026-111695 1 PoC Analysis PRE-CVE

rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1)

EIP-2026-105119 1 PoC Analysis PRE-CVE

Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection)

EIP-2026-104446 1 PoC Analysis PRE-CVE

Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure

EIP-2026-111693 1 PoC Analysis PRE-CVE

rConfig 3.9.6 - 'path' Local File Inclusion (Authenticated)

EIP-2026-117806 1 PoC Analysis PRE-CVE

QNAP QVR Client 5.0.0.13230 - 'QVRService' Unquoted Service Path

EIP-2026-109556 1 PoC Analysis PRE-CVE

Monitoring System (Dashboard) 1.0 - 'uname' SQL Injection

EIP-2026-109557 1 PoC Analysis PRE-CVE

Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated)

EIP-2026-106180 1 PoC Analysis PRE-CVE

CouchCMS 2.2.1 - Persistent Cross-Site Scripting

EIP-2026-109727 1 PoC Analysis PRE-CVE

MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting

EIP-2026-107436 1 PoC Analysis PRE-CVE

GLPI 9.5.3 - 'fromtype' Unsafe Reflection

EIP-2026-107645 1 PoC Analysis PRE-CVE

Hotel and Lodge Management System 1.0 - Remote Code Execution (Unauthenticated)

EIP-2026-113206 1 PoC Analysis PRE-CVE

Web Based Quiz System 1.0 - 'eid' Union Based Sql Injection (Authenticated)

EIP-2026-109197 1 PoC Analysis PRE-CVE

Local Services Search Engine Management System (LSSMES) 1.0 - 'name' Persistent Cross-Site Scripting (XSS)

EIP-2026-109198 1 PoC Analysis PRE-CVE

Local Services Search Engine Management System (LSSMES) 1.0 - Blind & Error based SQL injection (Authenticated)