Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,388cataloged exploits
40,212CVEs with public exploitation
24,696lab-tested
AllReferência 26,070Exploit-DB 24,488GitHub PoC 17,762VulnCheck XDB 9,990Nuclei 4,547Metasploit 3,531✓ verified onlyrecentpopularrisk
26,070 exploits
Referência
CVE-2012-0389
CVE-2012-0389—
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4
23RISK
open ↗
Referência
CVE-2014-2880
CVE-2014-2880—
Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.
23RISK
open ↗
Referência
CVE-2015-2184
CVE-2015-2184—
ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls th
23RISK
open ↗
Referência✓ VexDay Proof
HP Compaq Notebooks - ActiveX Remote Code Execution
CVE-2007-6332—remotewindows
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 i
23RISK
open ↗
Referência
CVE-2018-5753
CVE-2018-5753—
The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev
23RISK
open ↗
Referência
CVE-2018-8527
CVE-2018-8527—
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious
28RISK
open ↗
Referência
CVE-2026-112157
CVE-2026-112157LOW
MemTensor memmy-agent Memory Service http.ts requireAdminWrite resource consumption
28RISK
open ↗
Referência✓ VexDay Proof
asg-sentry 7.0.0 - Multiple Vulnerabilities
CVE-2008-1321—dosmultiple
The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote at
23RISK
open ↗
Referência
CVE-2026-112373
CVE-2026-112373HIGH
H3C Magic NX15 usrlist sub_416874 stack-based overflow
41RISK
open ↗
Referência
CVE-2010-5062
CVE-2010-5062—
SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2018-5753
CVE-2018-5753—
The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev
23RISK
open ↗
Referência
CVE-2026-112153
CVE-2026-112153MEDIUM
vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection
33RISK
open ↗
Referência
CVE-2026-112152
CVE-2026-112152MEDIUM
vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection
33RISK
open ↗
Referência✓ VexDay Proof
TextSend 1.5 - '/config/sender.php' Remote File Inclusion
CVE-2006-6686—webappsphp
PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute ar
23RISK
open ↗
Referência✓ VexDay Proof
BBS E-Market - 'postscript.php?p_mode' Remote File Inclusion
CVE-2007-3934—webappsphp
PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2026-6563
CVE-2026-6563HIGH
H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow
41RISK
open ↗
Referência
CVE-2016-5063
CVE-2016-5063—
The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote atta
23RISK
open ↗
Referência✓ VexDay Proof
XnView 1.92.1 - 'FontName' Slideshow Buffer Overflow
CVE-2008-0069—localwindows
Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code vi
23RISK
open ↗
Referência
CVE-2017-11398
CVE-2017-11398—
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 an
23RISK
open ↗
Referência
CVE-2018-7317
CVE-2018-7317—
Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/.
23RISK
open ↗
Referência
CVE-2019-25732
CVE-2019-25732HIGH
PHP EI-Tube Script 3 SQL Injection via search parameter
41RISK
open ↗
Referência
CVE-2019-12252
CVE-2019-12252—
In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post
23RISK
open ↗
Referência
CVE-2026-112283
CVE-2026-112283MEDIUM
libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points
33RISK
open ↗
Referência
CVE-2019-25487
CVE-2019-25487CRITICAL
SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd
48RISK
open ↗
Referência
CVE-2026-112278
CVE-2026-112278HIGH
rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache
41RISK
open ↗
Referência✓ VexDay Proof
eXV2 Module MyAnnonces - 'lid' SQL Injection
CVE-2008-1406—webappsphp
SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2010-4279
CVE-2010-4279—
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al
50RISK
open ↗
Referência✓ VexDay Proof
WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass
CVE-2008-6624—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute ar
23RISK
open ↗
Referência
CVE-2009-2917
CVE-2009-2917—
Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or
23RISK
open ↗
Referência
CVE-2010-1727
CVE-2010-1727—
SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
← previouspage 191 / 869next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.