Vulnerability & Exploit Database

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. These vulnerabilities are utilized by our vulnerability management tool InsightVM. The exploits are all included in the Metasploit framework and utilized by our penetration testing tool, Metasploit Pro. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 1,021 - 1,040 of 5,716 in total
AddressSanitizer (ASan) SUID Executable Privilege Escalation
Disclosed: February 17, 2016
module
Explore
Xymon useradm Command Execution
Disclosed: February 14, 2016
module
Explore
Ubiquiti airOS Arbitrary File Upload
Disclosed: February 13, 2016
module
Explore
Ubiquiti airOS Arbitrary File Upload
Disclosed: February 13, 2016
module
Explore
Apache Karaf Default Credentials Command Execution
Disclosed: February 09, 2016
module
Explore
MS16-016 mrxdav.sys WebDav Local Privilege Escalation
Disclosed: February 09, 2016
module
Explore
Advantech WebAccess Dashboard Viewer uploadImageCommon Arbitrary File Upload
Disclosed: February 05, 2016
module
Explore
D-Link DSL-2750B OS Command Injection
Disclosed: February 05, 2016
module
Explore
NETGEAR ProSafe Network Management System 300 Arbitrary File Upload
Disclosed: February 04, 2016
module
Explore
NETGEAR ProSafe Network Management System 300 Authenticated File Download
Disclosed: February 04, 2016
module
Explore
lastore-daemon D-Bus Privilege Escalation
Disclosed: February 02, 2016
module
Explore
Oracle ATS Arbitrary File Upload
Disclosed: January 20, 2016
module
Explore
Windows Net-NTLMv2 Reflection DCOM/RPC (Juicy)
Disclosed: January 16, 2016
module
Explore
Windows Net-NTLMv2 Reflection DCOM/RPC
Disclosed: January 16, 2016
module
Explore
Fortinet SSH Backdoor Scanner
Disclosed: January 09, 2016
module
Explore
Android ADB Debug Server Remote Payload Execution
Disclosed: January 01, 2016
module
Explore
PostgreSQL CREATE LANGUAGE Execution
Disclosed: January 01, 2016
module
Explore
D-Link DCS-930L Authenticated Remote Command Execution
Disclosed: December 20, 2015
module
Explore
TP-Link SC2020n Authenticated Telnet Injection
Disclosed: December 20, 2015
module
Explore
Juniper SSH Backdoor Scanner
Disclosed: December 20, 2015
module
Explore