Exploit Search

PoC Search Engine

AI Enriched

Search specific CVE exploits enriched with AI vulnerability analysis.

Found 31908 Vulnerabilities with Exploits
CVE-2026-27641

Path traversal and SSTI in Flask-Reuploaded

Severity CRITICAL
9.8

AI Intelligence Analysis

Target Stack Flask-Reuploaded / Flask-Reuploaded
<1.5.0
Impact Vector RCE
Authentication PRE-AUTH
CVE-2026-27971

RCE in Qwik via Unsafe Deserialization

Severity CRITICAL
9.2

AI Intelligence Analysis

Target Stack Qwik / Qwik
<=1.19.0
Impact Vector RCE
Authentication PRE-AUTH
CVE-2026-33697

Attested TLS (aTLS) Relay Attack

Severity HIGH
7.5

AI Intelligence Analysis

Target Stack Cocos AI / Cocos AI
>=0.4.0 <=0.8.2
Impact Vector Impersonation
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/pduggusa/dugganusa-ietf
CVE-2026-15981

Authentication Bypass in WordPress SAML SSO Login plugin

Severity CRITICAL
9.8

AI Intelligence Analysis

Target Stack WordPress / SAML Single Sign On – SSO Login plugin
<=5.4.4
Impact Vector Authentication Bypass
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/Nxploited/CVE-2026-15981
CVE-2026-10818

WPForms Pro Arbitrary File Upload

Severity HIGH
8.1

AI Intelligence Analysis

Target Stack WPForms / WPForms Pro
<=1.10.1.1
Impact Vector RCE
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/Nxploited/CVE-2026-10818
CVE-2026-40901

Remote Code Execution via Deserialization in DataEase

Severity HIGH
7.5

AI Intelligence Analysis

Target Stack DataEase / DataEase
<=2.10.20
Impact Vector RCE
Authentication Authenticated
CVE-2026-25243

Remote Code Execution via Redis RESTORE command

Severity HIGH
7.7

AI Intelligence Analysis

Target Stack Redis / redis-server
<=8.6.3
Impact Vector RCE
Authentication Authenticated
CVE-2026-43449

Linux kernel nvme-pci slab-out-of-bounds

Severity HIGH
7.1

AI Intelligence Analysis

Target Stack Linux / Kernel
Impact Vector Denial of Service
Authentication PRE-AUTH
CVE-2026-66012

SiYuan Missing Authorization RCE

Severity CRITICAL
10.0

AI Intelligence Analysis

Target Stack SiYuan / SiYuan
<3.7.2
Impact Vector RCE
Authentication PRE-AUTH
CVE-2026-5029

Code Runner MCP Server Unauthenticated RCE

Severity HIGH
8.7

AI Intelligence Analysis

Target Stack Code Runner / Code Runner MCP Server
*
Impact Vector RCE
Authentication Authenticated
CVE-2026-47761

Stored XSS in media plugin via crafted data-mce-* attributes

Severity HIGH
8.7

AI Intelligence Analysis

Target Stack TinyMCE / TinyMCE
<5.11.1 <7.9.3 <8.5.1
Impact Vector XSS
Authentication PRE-AUTH
CVE-2026-9973

Out of bounds write in V8

Severity HIGH
8.8

AI Intelligence Analysis

Target Stack Google / Chrome
<148.0.7778.216
Impact Vector RCE
Authentication PRE-AUTH
CVE-2026-45132

GitHub Actions Sensitive Credential Exposure

Severity CRITICAL
10.0

AI Intelligence Analysis

Target Stack CloudPirates / CloudPirates Open Source Helm Charts
Impact Vector Information Disclosure
Authentication Authenticated
CVE-2026-0009

Tapjacking due to Logic Error leads to Local EoP

Severity HIGH
7.8

AI Intelligence Analysis

Target Stack /
Impact Vector EoP
Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/cduram/NotCVE-2026-0009
CVE-2026-0059

Heap Buffer Overflow in sdp_discovery

Severity HIGH
8.0

AI Intelligence Analysis

Target Stack Unknown / sdp_discovery
Impact Vector RCE
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/paul-goon/bootlicka-POC
CVE-2026-8863

Microsoft-signed UEFI SHIM SecureBoot Bypass

Severity HIGH
7.8

AI Intelligence Analysis

Target Stack Microsoft / UEFI SHIM bootloaders
Impact Vector SecureBoot Bypass, RCE
Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/0xbekoo/CVE-2026-8863
CVE-2026-48546

Sandbox Escape in KanaDojo leading to RCE

Severity HIGH
8.5

AI Intelligence Analysis

Target Stack KanaDojo / KanaDojo
<0.1.18
Impact Vector RCE
Authentication Authenticated
CVE-2026-12191

Deserialization in Comma AI Openpilot

Severity HIGH
7.1

AI Intelligence Analysis

Target Stack Comma AI / Openpilot
=0.11
Impact Vector Deserialization
Authentication PRE-AUTH
CVE-2026-52910

Linux kernel BPF reuseport cBPF prog use-after-free

Severity HIGH
7.8

AI Intelligence Analysis

Target Stack Linux Foundation / Linux kernel
Impact Vector Use-after-free
Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/Dere3046/ScreenOff
CVE-2026-11374

Predictable SSO tickets lead to account takeover

Severity CRITICAL
9.0

AI Intelligence Analysis

Target Stack ManageEngine / ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, ADAudit Plus
Impact Vector Account Takeover
Authentication Authenticated
7 8 9 10 11