Exploit Database - Exploits for Penetration Testers, Researchers, and ...
The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.
About the Exploit Database
The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers.
Exploit Database Statistics
The following graphs and statistics provide you with a glimpse of the entries that have been added to the Exploit Database over the years. They will be re-generated, at minimum, on a monthly basis and will …
Exploit Database Papers
May 11, 2022 · Archived security papers and articles in various languages.
Linux Kernel 5.8 < 5.16.11 - Local Privilege Escalation (DirtyPipe)
Mar 8, 2022 · * * This exploit requires Linux 5.8 or later; the code path was made * reachable by commit f6dd975583bd ("pipe: merge * anon_pipe_buf*_ops"). The commit did not introduce the bug, it was * …
Apache ActiveMQ 6.1.6 - Denial of Service (DOS) - Exploit Database
May 9, 2025 · Apache ActiveMQ 6.1.6 - Denial of Service (DOS). CVE-2025-27533 . remote exploit for Multiple platform
Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free Privilege Escalation
Feb 26, 2017 · Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free Privilege Escalation. CVE-2017-6074 . local exploit for Linux platform
TYPO3 11.5.24 - Path Traversal (Authenticated) - PHP webapps Exploit
Mar 18, 2024 · To exploit this vulnerability, follow these steps: 1. Log in to the administrator panel. 2. Navigate to 'file' > 'Filelist' section. 3. Right-click on a file storage and select 'New.' 4. Set the base …
OpenSSH server (sshd) 9.8p1 - Race Condition - Linux remote Exploit
Apr 22, 2025 · * Exploit Title : OpenSSH server (sshd) 9.8p1 - Race Condition * Author : Milad Karimi (Ex3ptionaL) * Date : 2025-04-16 * * Description: * Targets a signal handler race condition in …
NodeJS 24.x - Path Traversal - NodeJS remote Exploit
Jul 16, 2025 · NodeJS 24.x - Path Traversal. CVE-2025-27210 . remote exploit for NodeJS platform