Latest Exploits

This mirrors Exploit-DB's own public RSS feed. Nothing is stored here — every load fetches the current feed fresh (cached for 10 minutes at the edge). Click any entry to read the full write-up on exploit-db.com.

What Exploit-DB is

Exploit-DB is a public archive of exploits and proof-of-concept code, run by OffSec. Each entry is tagged with a type — web application, remote, local or denial of service — and usually with the affected product, version and CVE number.

Using it defensively

Search for the products and versions you run. A public exploit means attacks are easy to copy, so that patch should move up your list.
Combine it with CISA’s Known Exploited Vulnerabilities catalogue, which lists flaws already being used in real attacks.
Web-application entries often concern WordPress plugins and themes — a good prompt to review the plugins on your sites.

A word of caution

Exploit code is meant for testing systems you own or are authorised to test. Read it before running anything, and run it only in a lab.

What Exploit-DB is

Using it defensively

A word of caution