Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
22,786 exploits
Exploit-DB
DomainSale PHP Script 1.0 - 'id' SQL Injection
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
23RISK
open ↗Exploit-DB
FS Stackoverflow Clone 1.0 - 'keywords' SQL Injection
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
23RISK
open ↗Exploit-DB
Chartered Accountant Booking Script 1.0 - 'city' SQL Injection
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
23RISK
open ↗Exploit-DB
FS Quibids Clone 1.0 - SQL Injection
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RISK
open ↗Exploit-DB
FS Olx Clone 1.0 - 'scat' / 'pid' SQL Injection
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
23RISK
open ↗Exploit-DB
CMS Auditor Website 1.0 - SQL Injection
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
23RISK
open ↗Exploit-DB
FS Makemytrip Clone 1.0 - 'fl_orig' / 'fl_dest' SQL Injection
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
23RISK
open ↗Exploit-DB
Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
23RISK
open ↗Exploit-DB
E-commerce MLM Software 1.0 - SQL Injection
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid paramet
23RISK
open ↗Exploit-DB
Simple Chatting System 1.0.0 - Arbitrary File Upload
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
23RISK
open ↗Exploit-DB
Child Care Script 1.0 - 'city' SQL Injection
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RISK
open ↗Exploit-DB
Nearbuy Clone Script 3.2 - 'search' SQL Injection
Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
23RISK
open ↗Exploit-DB
FS Shutterstock Clone 1.0 - 'keywords' SQL Injection
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
23RISK
open ↗Exploit-DB
Event Calendar Category Script 1.0 - 'city' SQL Injection
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
23RISK
open ↗Exploit-DB
Realestate Crowdfunding Script 2.7.2 - 'pid' SQL Injection
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
23RISK
open ↗Exploit-DB
Consumer Complaints Clone Script 1.0 - 'id' SQL Injection
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
23RISK
open ↗Exploit-DB
Co-work Space Search Script 1.0 - 'city' SQL Injection
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
23RISK
open ↗Exploit-DB
Doctor Search Script 1.0 - 'city' SQL Injection
Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
23RISK
open ↗Exploit-DB
Entrepreneur Job Portal Script 2.0.6 - 'jobsearch_all.php?rid1' SQL Injection
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
23RISK
open ↗Exploit-DB
Apple macOS High Sierra 10.13 - 'ctl_ctloutput-leak' Information Leak
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b
23RISK
open ↗Exploit-DB
Linux Kernel 4.10.5 / < 4.14.3 (Ubuntu) - DCCP Socket Use-After-Free
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privilege
23RISK
open ↗Exploit-DB
Claymore Dual ETH + DCR/SC/LBC/PASC GPU Miner - Stack Buffer Overflow / Path Traversal
The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversa
28RISK
open ↗Exploit-DB
Wireshark 2.4.0 < 2.4.2 / 2.2.0 < 2.2.10 - CIP Safety Dissector Crash
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissec
28RISK
open ↗Exploit-DB
Claymore Dual ETH + DCR/SC/LBC/PASC GPU Miner - Stack Buffer Overflow / Path Traversal
The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute
35RISK
open ↗Exploit-DB
Arq 5.9.6 - Local Privilege Escalation
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges v
23RISK
open ↗Exploit-DB
Arq 5.9.7 - Local Privilege Escalation
The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper
23RISK
open ↗Exploit-DB
Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ear
23RISK
open ↗Exploit-DB
Hashicorp vagrant-vmware-fusion 4.0.23 - Local Privilege Escalation
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo help
23RISK
open ↗Exploit-DB
Sera 1.2 - Local Privilege Escalation / Password Disclosure
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial
23RISK
open ↗Exploit-DB
Techno Portfolio Management Panel - 'id' SQL Injection
Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.