Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,008cataloged exploits

34,638CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,662GitHub PoC 13,743VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

21,624 exploits

Referência✓ VexDay Proof

E-PHP CMS - 'article.php' SQL Injection

CVE-2008-4142—webappsphp

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4205—webappsphp

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitra

23RISK

open ↗

Referência✓ VexDay Proof

NetRisk 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-4887—webappsphp

SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'report.php' SQL Injection

CVE-2008-5778—webappsphp

SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

SiteEngine 5.x - Multiple Vulnerabilities

CVE-2008-7267—webappsphp

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência✓ VexDay Proof

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection

CVE-2006-4072—webappsasp

Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2018-9155

CVE-2018-9155—

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary we

23RISK

open ↗

Referência

CVE-2009-4552

CVE-2009-4552—

Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbi

23RISK

open ↗

Referência

CVE-2010-2700

CVE-2010-2700—

Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allow

23RISK

open ↗

Referência

CVE-2009-3420

CVE-2009-3420—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote at

23RISK

open ↗

Referência

CVE-2007-3812

CVE-2007-3812—

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2007-3812

CVE-2007-3812—

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

CVE-2006-4074—webappsphp

PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and ear

23RISK

open ↗

Referência✓ VexDay Proof

MOTIONBORG Web Real Estate 2.1 - SQL Injection

CVE-2007-0196—webappsasp

SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacker

23RISK

open ↗

Referência

CVE-2014-7822

CVE-2014-7822—

The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restrictio

23RISK

open ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RISK

open ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RISK

open ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RISK

open ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RISK

open ↗

Referência

CVE-2009-2894

CVE-2009-2894—

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via t

23RISK

open ↗

Referência

CVE-2009-0445

CVE-2009-0445—

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2010-0720

CVE-2010-0720—

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência

CVE-2010-0720

CVE-2010-0720—

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

MyFWB 1.0 - 'index.php' SQL Injection

CVE-2008-5097—webappsphp

SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência✓ VexDay Proof

DreamPics Photo/Video Gallery - Blind SQL Injection

CVE-2009-0445—webappsphp

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2010-4619

CVE-2010-4619—

SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execut

23RISK

open ↗

Referência

CVE-2010-4633

CVE-2010-4633—

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência

CVE-2010-4633

CVE-2010-4633—

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência

CVE-2025-34061

CVE-2025-34061CRITICAL

PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability

63RISK

open ↗

Referência

CVE-2010-4638

CVE-2010-4638—

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.