Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits
40,258CVEs with public exploitation
24,696lab-tested
AllReferência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
26,095 exploits
Referência
CVE-2026-84745
CVE-2026-84745LOW
The Events Calendar < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API
28RISK
open ↗
Referência
CVE-2026-16013
CVE-2026-16013MEDIUM
liftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-bounds
33RISK
open ↗
Referência
CVE-2026-11961
CVE-2026-11961HIGH
User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID
41RISK
open ↗
Referência
CVE-2026-49127
CVE-2026-49127HIGH
Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be
41RISK
open ↗
Referência
CVE-2008-0232
CVE-2008-0232—
Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Referência
CVE-2026-8213
CVE-2026-8213MEDIUM
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow
33RISK
open ↗
Referência
CVE-2009-4730
CVE-2009-4730—
SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Referência
CVE-2015-0779
CVE-2015-0779—
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11
60RISK
open ↗
Referência
CVE-2013-1347
CVE-2013-1347HIGHunder attack
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit
100RISK
open ↗
Referência
CVE-2017-2445
CVE-2017-2445—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISK
open ↗
Referência
CVE-2026-24444
CVE-2026-24444CRITICAL
SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php
48RISK
open ↗
Referência
CVE-2014-8555
CVE-2014-8555—
Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack
23RISK
open ↗
Referência
CVE-2014-8555
CVE-2014-8555—
Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack
23RISK
open ↗
Referência
CVE-2014-8577
CVE-2014-8577—
Multiple cross-site scripting (XSS) vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary we
23RISK
open ↗
Referência✓ VexDay Proof
PHP Image 1.2 - Multiple Remote File Inclusions
CVE-2007-5697—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code
23RISK
open ↗
Referência
CVE-2026-9523
CVE-2026-9523MEDIUM
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection
33RISK
open ↗
Referência
CVE-2009-3053
CVE-2009-3053—
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to inclu
38RISK
open ↗
Referência
CVE-2022-41082
CVE-2022-41082HIGHunder attackransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
Referência
CVE-2009-4756
CVE-2009-4756—
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RISK
open ↗
Referência
CVE-2025-59287
CVE-2025-59287CRITICALunder attack
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISK
open ↗
Referência
CVE-2026-12222
CVE-2026-12222HIGH
Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow
41RISK
open ↗
Referência
CVE-2013-2068
CVE-2013-2068—
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow re
50RISK
open ↗
Referência
CVE-2009-3054
CVE-2009-3054—
SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote attac
23RISK
open ↗
Referência
CVE-2014-9348
CVE-2014-9348—
SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote atta
23RISK
open ↗
Referência
CVE-2013-2586
CVE-2013-2586—
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp
23RISK
open ↗
Referência
CVE-2013-2619
CVE-2013-2619—
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot
23RISK
open ↗
Referência
CVE-2014-9349
CVE-2014-9349—
Multiple cross-site scripting (XSS) vulnerabilities in admin/robots.lib.php in RobotStats 1.0 allow remote attackers to
23RISK
open ↗
Referência
CVE-2014-9142
CVE-2014-9142—
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers t
23RISK
open ↗
Referência
CVE-2014-9144
CVE-2014-9144—
Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metac
23RISK
open ↗
Referência✓ VexDay Proof
Lycos FileUploader Control - ActiveX Remote Buffer Overflow
CVE-2008-0443—remotewindows
Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUpl
28RISK
open ↗
← previouspage 206 / 870next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.