Latest Vulnerabilities with Public Exploits

Updated 35m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

350,390 CVEs tracked 54,002 with exploits 4,953 exploited in wild 1,590 CISA KEV 4,121 Nuclei templates 54,160 vendors 45,293 researchers
54,002 results Clear all
HTML5 Video Player 1.2.5 - Buffer Overflow (Metasploit)
STIX 2.1
HTML5 Video Player 1.2.5 - Buffer Overflow (Metasploit)
STIX 2.1
TeamCity Agent - XML-RPC Command Execution (Metasploit)
STIX 2.1
TeamCity Agent - XML-RPC Command Execution (Metasploit)
STIX 2.1
Ricoh myPrint 2.9.2.4 - Hard-Coded Credentials
STIX 2.1
Zyxel VMG1312-B10D 5.13AAXA.8 - Directory Traversal
STIX 2.1
MariaDB Client 10.1.26 - Denial of Service (PoC)
STIX 2.1
No-Cms 1.0 - 'order_by' SQL Injection
STIX 2.1
Arm Whois 3.11 - Buffer Overflow (ASLR)
STIX 2.1
Arm Whois 3.11 - Buffer Overflow (ASLR)
STIX 2.1
Ticketly 1.0 - 'name' SQL Injection
STIX 2.1
WordPress Theme CherryFramework 3.1.4 - Backup File Download
STIX 2.1
Apple macOS 10.13 - 'workq_kernreturn' Denial of Service (PoC)
STIX 2.1
Microsoft Edge Chakra - OP_Memset Type Confusion
STIX 2.1
Microsoft Edge Chakra - OP_Memset Type Confusion
STIX 2.1
XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
STIX 2.1
XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
STIX 2.1
HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
STIX 2.1
HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
STIX 2.1
Helpdezk 1.1.1 - Arbitrary File Upload
STIX 2.1

Investigate

Critical + Public Exploits Exploited in Wild + PoC High EPSS (>=0.7) + PoC With Nuclei Templates Latest CVEs with Public Exploits

Ecosystems

Linux Maven Packagist PyPI npm Go ecosystem RubyGems crates.io NuGet Hex SwiftURL GitHub Actions

Reference Indexes

Exploit Database Researchers Vendors CWE Categories

Recent Blog Posts

CVE-2026-41940: cPanel & WHM Pre-Auth RCE - Two Write Paths, One Filter
May 01, 2026
EIP STIX 2.1 / TAXII 2.1 Feed: Exploit Intelligence for Your Stack
Apr 29, 2026
CVE-2026-35414: Three Bugs, One Commit, and Two More Nobody Mentioned
Apr 03, 2026
WP Google Map Plugin - Three Weak Links, One Critical Chain
Mar 29, 2026
CVE-2026-24289: Windows Kernel IOCP Race Condition - The Ghost We Proved by Salting the Circle
Mar 16, 2026
CVE-2026-3910: The Type the Compiler Promised -- A V8 JIT Story in Seven Acts
Mar 16, 2026
 View all posts →

CVEForge Labs

CVE-2026-42859 HIGH
Neat VNC: Buffer overflow due to oversized RSA public keys
CVE-2026-34980 HIGH
OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
CVE-2026-35414 MEDIUM
OpenSSH <10.3 - Auth Bypass
CVE-2026-33765 CRITICAL
Pi-hole Web Interface has a Command Injection Vulnerability
CVE-2026-4105 MEDIUM
systemd - Privilege Escalation
CVE-2026-30861 CRITICAL
WeKnora 0.2.5-0.2.10 - RCE
CVE-2026-30860 CRITICAL
WeKnora <0.2.12 - RCE via SQL Injection
CVE-2026-28391 CRITICAL
OpenClaw <2026.2.2 - Command Injection
CVE-2025-59060 MEDIUM
Apache Ranger <=2.7.0 - Auth Bypass
CVE-2026-28417 MEDIUM
Vim <9.2.0073 - Command Injection
 View all labs →

KEV Gaps

CVE-2026-6973
Ivanti Endpoint Manager Mobile - Improper Input Validation
 CVE-2025-29635
Dlink Dir-823x Firmware - Command Injection
 CVE-2024-57728
Simple-help Simplehelp < 5.5.8 - Symlink Following
 CVE-2024-57726
Simple-help Simplehelp < 5.5.8 - Missing Authorization
 CVE-2026-20133
Cisco Catalyst SD-WAN Manager - Info Disclosure
 CVE-2026-20128
Cisco Catalyst SD-WAN Manager - Privilege Escalation
 CVE-2026-20122
Cisco Catalyst SD-WAN Manager - Path Traversal
 CVE-2025-32975
Quest KACE SMA <14.1.101 - Auth Bypass
 CVE-2025-48700
Zimbra Collaboration <10.1 - XSS
 CVE-2025-2749
Kentico Xperience < 13.0.178 - Path Traversal
 CVE-2023-27351
Papercut MF < 20.1.7 - Authentication Bypass
 CVE-2009-0238
Microsoft Office <2007 SP1 - RCE