Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,634cataloged exploits
40,286CVEs with public exploitation
24,696lab-tested
AllReferência 26,110Exploit-DB 24,488GitHub PoC 17,941VulnCheck XDB 10,016Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
26,110 exploits
Referência
CVE-2026-7850
CVE-2026-7850MEDIUM
WP Magnific Popup <= 1.0 - Author+ Stored XSS via href Attribute
33RISK
open ↗
Referência
CVE-2016-20077
CVE-2016-20077MEDIUM
WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php
33RISK
open ↗
Referência
CVE-2026-9523
CVE-2026-9523MEDIUM
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection
33RISK
open ↗
Referência✓ VexDay Proof
SFS EZ Home Business Directory - 'cat_id' SQL Injection
CVE-2008-6783—webappsphp
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attacke
23RISK
open ↗
Referência
CVE-2009-4756
CVE-2009-4756—
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RISK
open ↗
Referência
CVE-2022-41082
CVE-2022-41082HIGHunder attackransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
Referência
CVE-2025-59287
CVE-2025-59287CRITICALunder attack
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISK
open ↗
Referência
CVE-2026-12222
CVE-2026-12222HIGH
Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow
41RISK
open ↗
Referência✓ VexDay Proof
MindDezign Photo Gallery 2.2 - SQL Injection
CVE-2008-6788—webappsphp
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers
23RISK
open ↗
Referência
CVE-2013-2068
CVE-2013-2068—
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow re
50RISK
open ↗
Referência
CVE-2009-3053
CVE-2009-3053—
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to inclu
38RISK
open ↗
Referência✓ VexDay Proof
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin
CVE-2008-6789—webappsphp
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Referência
CVE-2009-3054
CVE-2009-3054—
SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote attac
23RISK
open ↗
Referência
CVE-2021-45010
CVE-2021-45010—
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7
45RISK
open ↗
Referência
CVE-2022-0824
CVE-2022-0824HIGH
Improper Access Control to Remote Code Execution in webmin/webmin
78RISK
open ↗
Referência
CVE-2026-87926
CVE-2026-87926MEDIUM
Rizwan17 inventory-management-system Login Page index.php cross site scripting
33RISK
open ↗
Referência
CVE-2014-8953
CVE-2014-8953—
Multiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script allow remote attackers to
23RISK
open ↗
Referência✓ VexDay Proof
bilboblog 2.1 - Multiple Vulnerabilities
CVE-2008-3302—webappsphp
SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote aut
23RISK
open ↗
Referência✓ VexDay Proof
Fonality trixbox - 'langChoice' Local File Inclusion (connect-back) (2)
CVE-2008-6825—webappslinux
Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to
43RISK
open ↗
Referência
CVE-2015-1130
CVE-2015-1130HIGHunder attack
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISK
open ↗
Referência
CVE-2013-2423
CVE-2013-2423LOWunder attack
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and
95RISK
open ↗
Referência
CVE-2014-8954
CVE-2014-8954—
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web scr
23RISK
open ↗
Referência✓ VexDay Proof
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
CVE-2009-1664—webappsphp
myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords
23RISK
open ↗
Referência
CVE-2014-8954
CVE-2014-8954—
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web scr
23RISK
open ↗
Referência
CVE-2009-4761
CVE-2009-4761—
Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st
23RISK
open ↗
Referência
CVE-2021-46381
CVE-2021-46381—
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd]
50RISK
open ↗
Referência
CVE-2026-85137
CVE-2026-85137MEDIUM
SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection
33RISK
open ↗
Referência
CVE-2026-71624
CVE-2026-71624CRITICAL
An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class
48RISK
open ↗
Referência
CVE-2026-82884
CVE-2026-82884MEDIUM
All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block
33RISK
open ↗
Referência✓ VexDay Proof
LoveCMS 1.6.2 Final - Update Settings
CVE-2008-3509—webappsphp
LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in
23RISK
open ↗
← previouspage 231 / 871next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.