Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,008cataloged exploits
34,638CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,662GitHub PoC 13,743VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
21,662 exploits
Referência
CVE-2017-20248
CVE-2017-20248HIGH
WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download
41RISK
open ↗
Referência
CVE-2026-11558
CVE-2026-11558MEDIUM
CodeAstro Payroll System home_salary.php sql injection
33RISK
open ↗
Referência
CVE-2026-11557
CVE-2026-11557HIGH
Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow
41RISK
open ↗
Referência
CVE-2026-39908
CVE-2026-39908HIGH
OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source
41RISK
open ↗
Referência
CVE-2026-11533
CVE-2026-11533MEDIUM
imvks786 student_management_system Student Deletion Endpoint see.php improper authorization
33RISK
open ↗
Referência
CVE-2026-11532
CVE-2026-11532MEDIUM
imvks786 student_management_system Student Record add.php access control
33RISK
open ↗
Referência
CVE-2026-11506
CVE-2026-11506MEDIUM
CodeAstro Leave Management System search_staff_for_deletion.php sql injection
33RISK
open ↗
Referência
CVE-2026-11504
CVE-2026-11504HIGH
Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow
41RISK
open ↗
Referência
CVE-2026-11503
CVE-2026-11503HIGH
Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow
41RISK
open ↗
Referência
CVE-2026-11502
CVE-2026-11502LOW
JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect
28RISK
open ↗
Referência
CVE-2026-11501
CVE-2026-11501MEDIUM
SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection
33RISK
open ↗
Referência
CVE-2026-11500
CVE-2026-11500LOW
Weaviate Static API Key client.go validateConfig authorization
28RISK
open ↗
Referência
CVE-2026-11495
CVE-2026-11495MEDIUM
CodeAstro Ingredients Stock Management System add_stock.php sql injection
33RISK
open ↗
Referência
CVE-2026-11494
CVE-2026-11494MEDIUM
TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation
33RISK
open ↗
Referência
CVE-2026-11493
CVE-2026-11493LOW
Tenda AC15 Samba smb.conf weak password
28RISK
open ↗
Referência
CVE-2026-11333
CVE-2026-11333MEDIUM
tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload
33RISK
open ↗
Referência
CVE-2026-50232
CVE-2026-50232MEDIUM
Lyrion Music Server 9.2.0 Stored XSS via Metadata Tags
33RISK
open ↗
Referência
CVE-2019-25744
CVE-2019-25744MEDIUM
WordPress Popup Builder 3.49 Persistent Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2019-25743
CVE-2019-25743MEDIUM
WordPress Soliloquy Lite 2.5.6 Persistent Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2019-25742
CVE-2019-25742MEDIUM
WordPress Theme Zoner Real Estate 4.1.1 Persistent XSS
33RISK
open ↗
Referência
CVE-2019-25741
CVE-2019-25741CRITICAL
Mobatek MobaXterm 12.1 Buffer Overflow via Sessions File
48RISK
open ↗
Referência
CVE-2019-25740
CVE-2019-25740HIGH
Joomla com_jsjobs 1.2.6 Arbitrary File Deletion
41RISK
open ↗
Referência
CVE-2019-25739
CVE-2019-25739MEDIUM
GigToDo Freelance Marketplace Script 1.3 Persistent XSS
33RISK
open ↗
Referência
CVE-2019-25738
CVE-2019-25738CRITICAL
WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change
48RISK
open ↗
Referência
CVE-2019-25737
CVE-2019-25737MEDIUM
Live Chat Unlimited 2.8.3 Stored Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2019-25736
CVE-2019-25736HIGH
LabF nfsAxe 3.7 Ping Client Buffer Overflow
41RISK
open ↗
Referência
CVE-2019-25735
CVE-2019-25735HIGH
AllPlayer 7.4 Local Buffer Overflow via SEH Unicode
41RISK
open ↗
Referência
CVE-2019-25734
CVE-2019-25734MEDIUM
Contact Form by WD 1.13.1 CSRF to Local File Inclusion
33RISK
open ↗
Referência
CVE-2026-10529
CVE-2026-10529MEDIUM
westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting
33RISK
open ↗
Referência
CVE-2026-10276
CVE-2026-10276MEDIUM
hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgery
33RISK
open ↗
← previouspage 256 / 723next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.