Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,053cataloged exploits
34,675CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,758VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
21,662 exploits
Referência
CVE-2018-20250
CVE-2018-20250HIGHunder attackransomware
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o
100RISK
open ↗
Referência
CVE-2018-20250
CVE-2018-20250HIGHunder attackransomware
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o
100RISK
open ↗
Referência
CVE-2018-20250
CVE-2018-20250HIGHunder attackransomware
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o
100RISK
open ↗
Referência
CVE-2021-25298
CVE-2021-25298HIGHunder attack
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi
100RISK
open ↗
Referência
CVE-2021-25298
CVE-2021-25298HIGHunder attack
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi
100RISK
open ↗
Referência
CVE-2026-9377
CVE-2026-9377MEDIUM
SourceCodester SUP Online Shopping productedit.php cross site scripting
33RISK
open ↗
Referência
CVE-2023-4278
CVE-2023-4278HIGH
MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
41RISK
open ↗
Referência
CVE-2023-4278
CVE-2023-4278HIGH
MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
41RISK
open ↗
Referência
CVE-2023-4407
CVE-2023-4407MEDIUM
Codecanyon Credit Lite POST Request account_statement sql injection
33RISK
open ↗
Referência
CVE-2019-7609
CVE-2019-7609CRITICALunder attack
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RISK
open ↗
Referência
CVE-2009-2233
CVE-2009-2233—
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain
23RISK
open ↗
Referência
CVE-2026-17434
CVE-2026-17434MEDIUM
nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization
33RISK
open ↗
Referência
CVE-2026-17432
CVE-2026-17432LOW
NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control
28RISK
open ↗
Referência
CVE-2026-65711
CVE-2026-65711HIGH
sysPass 3.2.11 Authenticated OS Command Injection via Backup Path
41RISK
open ↗
Referência★ 9
k4nfr3/CVE-2024-9474
CVE-2024-9474MEDIUMunder attackransomware
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
100RISK
open ↗
Referência
CVE-2021-46422
CVE-2021-46422—
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute
60RISK
open ↗
Referência
CVE-2020-6287
CVE-2020-6287CRITICALunder attack
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c
100RISK
open ↗
Referência
Grafana 11.6.0 - SSRF
CVE-2025-4123HIGHwebappsmultiple
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire
78RISK
open ↗
Referência
CVE-2009-2239
CVE-2009-2239—
SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3)
23RISK
open ↗
Referência
CVE-2016-3081
CVE-2016-3081—
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a
60RISK
open ↗
Referência
CVE-2016-3081
CVE-2016-3081—
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a
60RISK
open ↗
Referência
CVE-2018-1335
CVE-2018-1335—
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to
60RISK
open ↗
Referência
CVE-2018-1335
CVE-2018-1335—
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to
60RISK
open ↗
Referência
CVE-2019-16117
CVE-2019-16117—
Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admi
23RISK
open ↗
Referência
CVE-2016-1524
CVE-2016-1524—
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote
60RISK
open ↗
Referência
CVE-2019-16119
CVE-2019-16119—
SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/control
28RISK
open ↗
Referência
CVE-2026-21643
CVE-2026-21643CRITICALunder attack
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC
100RISK
open ↗
Referência✓ VexDay Proof
Invision Power Board 2.0.3 - 'login.php' SQL Injection
CVE-2005-1598—webappsphp
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary
28RISK
open ↗
Referência
CVE-2024-48248
CVE-2024-48248HIGHunder attack
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /
100RISK
open ↗
Referência
CVE-2026-7219
CVE-2026-7219HIGH
Totolink N300RT formIpQoS buffer overflow
41RISK
open ↗
← previouspage 265 / 723next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.