Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,013cataloged exploits
40,092CVEs with public exploitation
24,696lab-tested
AllReferência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
25,989 exploits
Referência
CVE-2010-0981
CVE-2010-0981—
SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar
23RISK
open ↗
Referência
CVE-2010-3601
CVE-2010-3601—
SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência✓ VexDay Proof
Helix Server 11.0.1 (Windows 2000 SP4) - Remote Heap Overflow
CVE-2006-6026—remotewindows
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.
28RISK
open ↗
Referência
CVE-2010-1065
CVE-2010-1065—
Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control,
23RISK
open ↗
Referência
CVE-2026-90518
CVE-2026-90518MEDIUM
PHPGurukul Bank Locker Management System sidebar.php access control
33RISK
open ↗
Referência
CVE-2026-114248
CVE-2026-114248MEDIUM
dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication
33RISK
open ↗
Referência
CVE-2026-114245
CVE-2026-114245MEDIUM
dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization
33RISK
open ↗
Referência
CVE-2026-110714
CVE-2026-110714HIGH
libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow
41RISK
open ↗
Referência✓ VexDay Proof
Joomla! Component com_galeria - SQL Injection
CVE-2008-0833—webappsphp
SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute arb
23RISK
open ↗
Referência
CVE-2010-1092
CVE-2010-1092—
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to
23RISK
open ↗
Referência
CVE-2026-114243
CVE-2026-114243MEDIUM
dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
33RISK
open ↗
Referência
CVE-2010-4614
CVE-2010-4614—
SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Referência✓ VexDay Proof
Joomla! Component Flash Tree Gallery 1.0 - Remote File Inclusion
CVE-2008-6482—webappsphp
PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Jooml
35RISK
open ↗
Referência
CVE-2009-2553
CVE-2009-2553—
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disab
23RISK
open ↗
Referência✓ VexDay Proof
XOOPS Module eCal 2.24 - 'display.php' SQL Injection
CVE-2007-1813—webappsphp
SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to exec
23RISK
open ↗
Referência
CVE-2026-114242
CVE-2026-114242MEDIUM
dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection
33RISK
open ↗
Referência
CVE-2026-85683
CVE-2026-85683HIGH
Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL
41RISK
open ↗
Referência
CVE-2006-6184
CVE-2006-6184—
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISK
open ↗
Referência
CVE-2015-7245
CVE-2015-7245—
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot
50RISK
open ↗
Referência
CVE-2020-5260
CVE-2020-5260CRITICAL
malicious URLs may cause Git to present stored credentials to the wrong server
48RISK
open ↗
Referência
CVE-2018-12706
CVE-2018-12706—
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
23RISK
open ↗
Referência
CVE-2017-0263
CVE-2017-0263HIGHunder attack
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012
76RISK
open ↗
Referência
CVE-2014-2223
CVE-2014-2223—
Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authen
28RISK
open ↗
Referência
CVE-2017-17999
CVE-2017-17999—
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Referência✓ VexDay Proof
Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload
CVE-2008-6513—webappsphp
Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to
23RISK
open ↗
Referência
CVE-2017-5972
CVE-2017-5972—
The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fa
28RISK
open ↗
Referência
CVE-2006-0992
CVE-2006-0992—
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute ar
60RISK
open ↗
Referência
CVE-2018-19042
CVE-2018-19042—
The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the di
28RISK
open ↗
Referência
CVE-2018-8619
CVE-2018-8619—
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly rest
35RISK
open ↗
Referência
CVE-2018-19043
CVE-2018-19043—
The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename)
28RISK
open ↗
← previouspage 153 / 867next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.