Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,001cataloged exploits

40,084CVEs with public exploitation

24,696lab-tested

All Referência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecent popular risk

25,989 exploits

Referência

CVE-2017-9380

CVE-2017-9380—

OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code

28RISK

open ↗

Referência

CVE-2018-18322

CVE-2018-18322—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/ind

28RISK

open ↗

Referência

CVE-2018-11586

CVE-2018-11586—

XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to re

28RISK

open ↗

Referência

CVE-2020-35749

CVE-2020-35749—

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

50RISK

open ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RISK

open ↗

Referência

CVE-2012-2371

CVE-2012-2371—

Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attacke

43RISK

open ↗

Referência

CVE-2015-2780

CVE-2015-2780—

Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a cra

28RISK

open ↗

Referência

CVE-2018-11586

CVE-2018-11586—

XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to re

28RISK

open ↗

Referência

CVE-2019-1019

CVE-2019-1019HIGH

Microsoft Windows Security Feature Bypass Vulnerability

46RISK

open ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RISK

open ↗

Referência✓ VexDay Proof

CASTOR 1.1.1 - '/lib/rs.php' Remote File Inclusion

CVE-2006-5480—webappsphp

PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to

23RISK

open ↗

Referência

CVE-2010-0799

CVE-2010-0799—

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read

23RISK

open ↗

Referência

CVE-2010-0799

CVE-2010-0799—

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read

23RISK

open ↗

Referência

CVE-2014-4334

CVE-2014-4334—

Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary cod

28RISK

open ↗

Referência

CVE-2010-0803

CVE-2010-0803—

SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla! allows remote attacker

23RISK

open ↗

Referência✓ VexDay Proof

EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion

CVE-2006-5523—webappsphp

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PH

23RISK

open ↗

Referência

CVE-2018-14634

CVE-2018-14634HIGHunder attack

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a

76RISK

open ↗

Referência

CVE-2019-7666

CVE-2019-7666—

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash valu

28RISK

open ↗

Referência

CVE-2014-5091

CVE-2014-5091—

A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, wh

28RISK

open ↗

Referência✓ VexDay Proof

HispaH textlinksads - 'index.php' SQL Injection

CVE-2008-6154—webappsphp

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2014-8877

CVE-2014-8877—

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plug

28RISK

open ↗

Referência

CVE-2017-16929

CVE-2017-16929—

The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversa

28RISK

open ↗

Referência

CVE-2026-94239

CVE-2026-94239MEDIUM

Loco Translate < 2.8.9 - Translator+ Stored XSS via Bundle Configuration

33RISK

open ↗

Referência

CVE-2017-6880

CVE-2017-6880—

Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or p

28RISK

open ↗

Referência

CVE-2019-8341

CVE-2019-8341—

An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where

35RISK

open ↗

Referência

CVE-2021-30632

CVE-2021-30632HIGHunder attack

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

83RISK

open ↗

Referência

CVE-2020-8512

CVE-2020-8512—

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

43RISK

open ↗

Referência

CVE-2009-2634

CVE-2009-2634—

PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic

23RISK

open ↗

Referência

CVE-2023-0527

CVE-2023-0527LOW

PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

43RISK

open ↗

Referência

CVE-2026-94238

CVE-2026-94238MEDIUM

Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter

33RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.