CVE-2026-0770
Jan 23, 2026
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins...
Read Advisory
[EDB] Exploit-DB
11 CVEs with a curated Exploit-DB entry
These vulnerabilities have a curated entry on Exploit-DB, Offensive Security's vetted public exploit archive. Lower recall than nomi-sec PoCs but higher precision: every entry is human-reviewed and many are tagged "verified". Use only on systems you are authorized to test.
CVE-2016-3081
Apr 26, 2016
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to c...
Read Advisory
CVE-2015-5287
Dec 7, 2015
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable nam...
Read Advisory
CVE-2015-3246
Aug 11, 2015
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (incons...
Read Advisory
CVE-2015-5477
Jul 29, 2015
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries....
Read Advisory
CVE-2015-3306
May 18, 2015
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands....
Read Advisory
CVE-2010-0806
Mar 10, 2010
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acce...
Read Advisory
CVE-2010-0249
Jan 15, 2010
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 20...
Read Advisory
CVE-2009-3459
Oct 13, 2009
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers mem...
Read Advisory
CVE-2008-4250
Oct 23, 2008
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a craft...
Read Advisory
CVE-2008-4128
Sep 18, 2008
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary comm...
Read Advisory