Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
26,041 exploits
Referência
CVE-2010-4835
CVE-2010-4835—
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users
23RISK
open ↗
Referência
CVE-2015-5161
CVE-2015-5161—
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x befor
23RISK
open ↗
Referência
i-doit CMDB 1.11.2 - Remote Code Execution
CVE-2018-20159—webappsphp
i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allow
23RISK
open ↗
Referência
CVE-2025-34077
CVE-2025-34077CRITICAL
WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE
68RISK
open ↗
Referência
CVE-2026-111957
CVE-2026-111957MEDIUM
SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback
33RISK
open ↗
Referência
CVE-2026-111956
CVE-2026-111956MEDIUM
WholesaleX < 3.0.9 - Unauthenticated Imported User CSV Disclosure
33RISK
open ↗
Referência✓ VexDay Proof
VidiScript (Avatar) - Arbitrary File Upload
CVE-2008-6518—webappsphp
Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users
23RISK
open ↗
Referência
CVE-2009-2655
CVE-2009-2655—
mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service
28RISK
open ↗
Referência✓ VexDay Proof
WordPress Core 2.0.6 - 'wp-trackback.php' SQL Injection
CVE-2007-0233—webappsphp
wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric
28RISK
open ↗
Referência
CVE-2009-2692
CVE-2009-2692—
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RISK
open ↗
Referência
CVE-2016-5399
CVE-2016-5399—
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attac
23RISK
open ↗
Referência
CVE-2014-1982
CVE-2014-1982—
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firm
23RISK
open ↗
Referência
CVE-2016-8526
CVE-2016-8526—
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a
28RISK
open ↗
Referência
CVE-2017-9872
CVE-2017-9872—
The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products,
23RISK
open ↗
Referência
CVE-2018-8813
CVE-2018-8813—
Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attack
23RISK
open ↗
Referência
CVE-2026-111574
CVE-2026-111574HIGH
Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox
41RISK
open ↗
Referência
CVE-2019-13358
CVE-2019-13358—
lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying opera
28RISK
open ↗
Referência
CVE-2019-16294
CVE-2019-16294—
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode ch
23RISK
open ↗
Referência✓ VexDay Proof
PHPProfiles 4.5.2 Beta - 'body_comm.inc.php' Remote File Inclusion
CVE-2008-1051—webappsphp
PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers t
28RISK
open ↗
Referência
CVE-2019-7181
CVE-2019-7181—
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the pr
23RISK
open ↗
Referência
CVE-2022-38840
CVE-2022-38840HIGH
cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file uplo
56RISK
open ↗
Referência
CVE-2019-7181
CVE-2019-7181—
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the pr
23RISK
open ↗
Referência
CVE-2009-4974
CVE-2009-4974—
Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary file
23RISK
open ↗
Referência
CVE-2026-110982
CVE-2026-110982MEDIUM
AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt
33RISK
open ↗
Referência
CVE-2018-9038
CVE-2018-9038—
Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uplo
23RISK
open ↗
Referência
CVE-2010-1312
CVE-2010-1312—
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2010-3146
CVE-2010-3146—
Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a T
28RISK
open ↗
Referência✓ VexDay Proof
GoodTech SSH - 'SSH_FXP_OPEN' Remote Buffer Overflow
CVE-2008-4726—remotewindows
Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbit
35RISK
open ↗
Referência✓ VexDay Proof
PayPal eStore - Admin Password Change
CVE-2008-6535—webappsphp
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admin
23RISK
open ↗
Referência✓ VexDay Proof
sNews 1.5.30 - Remote Reset Admin Pass / Command Execution
CVE-2007-0261—webappsphp
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to
23RISK
open ↗
← previouspage 166 / 869next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.