milw00rm
Exploit Database & Security Research Archive
46,496
Exploits
22,486
CVEs
63
Platforms
3,400
Critical
Critical Vulnerabilities
9.8
CVE-2023-6553
WordPress Backup Migration 1.3.7 - Remote Command Execution
2026-03-03
9.8
CVE-2025-25257
FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
2026-02-04
9.8
CVE-2025-57174
Siklu EtherHaul Series EH-8010 - Remote Command Execution
2026-01-17
9.8
CVE-2018-11736
Pluck 4.7.7-dev2 - PHP Code Execution
2025-12-08
9.1
CVE-2025-64459
Django 5.1.13 - SQL Injection
2025-12-03
9.8
CVE-2019-16693
phpIPAM 1.4 - SQL-Injection
2025-12-03
9.8
CVE-2019-25024
OpenRepeater 2.1 - OS Command Injection
2025-12-03
9.8
CVE-2021-40617
openSIS Community Edition 8.0 - SQL Injection
2025-12-03
9.8
CVE-2023-33362
Piwigo 13.6.0 - SQL Injection
2025-12-02
10.0
CVE-2025-59528
Flowise 3.0.4 - Remote Code Execution (RCE)
2025-10-31
Latest Exploits
View all →
EDB-52486
9.8
CVE-2023-6553
WordPress Backup Migration 1.3.7 - Remote Command Execution
multiple
2026-03-03
EDB-52485
7.1
CVE-2025-25198
mailcow 2025-01a - Host Header Password Reset Poisoning
multiple
2026-03-03
EDB-52484
Easy File Sharing Web Server v7.2 - Buffer Overflow
multiple
2026-03-03
EDB-52483
8.8
CVE-2025-62360
WeGIA 3.5.0 - SQL Injection
php
2026-03-03
EDB-52482
7.3
CVE-2023-3643
Boss Mini v1.4.0 - Local File Inclusion (LFI)
multiple
2026-03-03
EDB-52481
7.2
CVE-2025-60787
motionEye 0.43.1b4 - RCE
multiple
2026-02-11
EDB-52480
6.5
CVE-2025-24054
Windows 10.0.17763.7009 - spoofing vulnerability
windows
2026-02-11
EDB-52479
7.8
CVE-2023-4911
glibc 2.38 - Buffer Overflow
linux
2026-02-11
EDB-52478
6.5
CVE-2025-24054
windows 10/11 - NTLM Hash Disclosure Spoofing
windows
2026-02-04
EDB-52477
7.0
CVE-2025-32023
Redis 8.0.2 - RCE
linux
2026-02-04
EDB-52476
8.8
CVE-2025-58180
OctoPrint 1.11.2 - File Upload
multiple
2026-02-04
EDB-52475
8.8
CVE-2025-24514
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
multiple
2026-02-04
EDB-52474
5.9
CVE-2024-23334
aiohttp 3.9.1 - directory traversal PoC
python
2026-02-04
EDB-52473
9.8
CVE-2025-25257
FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
multiple
2026-02-04
EDB-52472
CVE-2025-9074
Docker Desktop 4.44.3 - Unauthenticated API Exposure
multiple
2026-02-04
EDB-52471
Piranha CMS 12.0 - Stored XSS in Text Block
multiple
2026-02-02
EDB-52470
3.5
CVE-2025-10370
RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS)
multiple
2026-02-02
EDB-52469
8.8
CVE-2025-10666
D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)
multiple
2026-02-02
EDB-52468
6.3
CVE-2025-10327
RPi-Jukebox-RFID 2.8.0 - Remote Command Execution
multiple
2026-01-17
EDB-52467
6.5
CVE-2025-57176
Siklu EtherHaul Series EH-8010 - Arbitrary File Upload
multiple
2026-01-17