Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,412cataloged exploits
40,212CVEs with public exploitation
24,696lab-tested
AllReferência 26,070Exploit-DB 24,488GitHub PoC 17,762VulnCheck XDB 10,014Nuclei 4,547Metasploit 3,531✓ verified onlyrecentpopularrisk
26,070 exploits
Referência
CVE-2009-4598
CVE-2009-4598—
SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbi
23RISK
open ↗
Referência
CVE-2011-4453
CVE-2011-4453—
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RISK
open ↗
Referência
CVE-2023-3847
CVE-2023-3847LOW
mooSocial mooDating URL users cross site scripting
43RISK
open ↗
Referência
CVE-2017-2464
CVE-2017-2464—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISK
open ↗
Referência
CVE-2016-0075
CVE-2016-0075—
The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 160
23RISK
open ↗
Referência
CVE-2017-0781
CVE-2017-0781—
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RISK
open ↗
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMunder attack
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
Referência
CVE-2023-5204
CVE-2023-5204CRITICAL
AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
63RISK
open ↗
Referência
CVE-2009-0812
CVE-2009-0812—
Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions all
23RISK
open ↗
Referência
CVE-2018-6064
CVE-2018-6064—
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote
23RISK
open ↗
Referência
CVE-2009-3194
CVE-2009-3194—
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject ar
23RISK
open ↗
Referência
CVE-2010-2848
CVE-2010-2848—
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RISK
open ↗
Referência
CVE-2009-3812
CVE-2009-3812—
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.
23RISK
open ↗
Referência
CVE-2010-4978
CVE-2010-4978—
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web scr
23RISK
open ↗
Referência
CVE-2009-4615
CVE-2009-4615—
SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Referência
CVE-2013-4093
CVE-2013-4093—
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to o
23RISK
open ↗
Referência
CVE-2011-4453
CVE-2011-4453—
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RISK
open ↗
Referência
CVE-2010-2848
CVE-2010-2848—
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RISK
open ↗
Referência
CVE-2010-2932
CVE-2010-2932—
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2010-2932
CVE-2010-2932—
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2026-110775
CVE-2026-110775HIGH
Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access
41RISK
open ↗
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMunder attack
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
Referência
CVE-2026-85513
CVE-2026-85513MEDIUM
StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
33RISK
open ↗
Referência✓ VexDay Proof
IMGallery 2.5 - Create Uploader Script
CVE-2007-0082—webappsphp
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows
23RISK
open ↗
Referência
CVE-2017-2466
CVE-2017-2466—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISK
open ↗
Referência
CVE-2009-4734
CVE-2009-4734—
SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to ex
23RISK
open ↗
Referência
CVE-2015-3246
CVE-2015-3246HIGHunder attack
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mod
86RISK
open ↗
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMunder attack
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
Referência
CVE-2013-1592
CVE-2013-1592—
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending speci
28RISK
open ↗
Referência
CVE-2015-4683
CVE-2015-4683—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potenti
23RISK
open ↗
← previouspage 199 / 869next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.