Tagged “exploit-available”
CVEs tagged exploit-available, newest first.
9306 CVEsRSS
CVE-1999-1194High· 7.2PoCchroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
CVE-1999-0209Medium· 5.0PoCThe SunView (SunTools) selection_svc facility allows remote users to read files.
The SunView (SunTools) selection_svc facility allows remote users to read files.
CVE-1999-0095Critical· 10.0PoCThe debug command in Sendmail is enabled, allowing attackers to execute commands as root.
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVE-2025-31200High· 7.5CISA KEV0dayPoCMemory corruption in CoreAudio via crafted media file
A maliciously crafted media file processed by Apple CoreAudio can trigger heap corruption leading to remote code execution. Reported as exploited in the wild against targeted individuals.
CVE-2025-29927Critical· 9.1PoCNext.js middleware authorization bypass via x-middleware-subrequest
A crafted x-middleware-subrequest header lets an attacker skip Next.js middleware execution entirely, bypassing authentication/authorization checks implemented in middleware.
CVE-2021-44228Critical· 10.0CISA KEV0dayPoCLog4Shell: JNDI RCE in Apache Log4j 2
Log4j 2 evaluates ${jndi:...} lookups in logged strings, allowing an attacker who controls any logged value to load and execute remote code via LDAP/RMI. Trivial to exploit, ubiquitous, and mass-exploited within hours of disclosure.