Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,883cataloged exploits
40,037CVEs with public exploitation
24,696lab-tested
AllReferência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecentpopularrisk
25,887 exploits
Referência
CVE-2018-13981
CVE-2018-13981—
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code
28RISK
open ↗
Referência
CVE-2018-7573
CVE-2018-7573—
An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with t
50RISK
open ↗
Referência
CVE-2018-7573
CVE-2018-7573—
An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with t
50RISK
open ↗
Referência
CVE-2018-9843
CVE-2018-9843—
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute
28RISK
open ↗
Referência
CVE-2019-5722
CVE-2019-5722—
An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handl
23RISK
open ↗
Referência
CVE-2019-6543
CVE-2019-6543—
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition)
28RISK
open ↗
Referência
CVE-2021-24040
CVE-2021-24040—
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files c
28RISK
open ↗
Referência
CVE-2010-1477
CVE-2010-1477—
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote at
23RISK
open ↗
Referência✓ VexDay Proof
compteur 2.0 - 'param_editor.php' Remote File Inclusion
CVE-2006-5259—webappsphp
PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary P
23RISK
open ↗
Referência
CVE-2013-1360
CVE-2013-1360—
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7
28RISK
open ↗
Referência
CVE-2013-5045
CVE-2013-5045—
Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and conseque
43RISK
open ↗
Referência
CVE-2018-13981
CVE-2018-13981—
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code
28RISK
open ↗
Referência✓ VexDay Proof
Irokez Blog 0.7.1 - Multiple Remote File Inclusions
CVE-2006-6771—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, al
23RISK
open ↗
Referência✓ VexDay Proof
webSPELL 4.01.02 - 'topic' SQL Injection
CVE-2007-1163—webappsphp
SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrar
23RISK
open ↗
Referência
CVE-2024-20359
CVE-2024-20359MEDIUMunder attack
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava
68RISK
open ↗
Referência
CVE-2026-108825
CVE-2026-108825MEDIUM
yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management
33RISK
open ↗
Referência✓ VexDay Proof
SG Real Estate Portal 2.0 - Blind SQL Injection
CVE-2008-6011—webappsphp
SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2015-2280
CVE-2015-2280—
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709
28RISK
open ↗
Referência
CVE-2018-1247
CVE-2018-1247—
RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability
28RISK
open ↗
Referência✓ VexDay Proof
phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
CVE-2009-0595—webappsphp
PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled
35RISK
open ↗
Referência
CVE-2014-0030
CVE-2014-0030—
The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks
28RISK
open ↗
Referência
CVE-2017-1002008
CVE-2017-1002008—
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membe
28RISK
open ↗
Referência
CVE-2022-47636
CVE-2022-47636—
A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open
23RISK
open ↗
Referência
CVE-2026-108824
CVE-2026-108824MEDIUM
DataEase Utils.java Utils.buildCalcField sql injection
33RISK
open ↗
Referência
CVE-2009-4792
CVE-2009-4792—
SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to exec
23RISK
open ↗
Referência
CVE-2010-3152
CVE-2010-3152—
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions
28RISK
open ↗
Referência
CVE-2010-1531
CVE-2010-1531—
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RISK
open ↗
Referência
CVE-2013-2678
CVE-2013-2678—
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers
28RISK
open ↗
Referência
CVE-2010-1531
CVE-2010-1531—
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RISK
open ↗
Referência
CVE-2015-2280
CVE-2015-2280—
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709
28RISK
open ↗
← previouspage 123 / 863next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.