Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,899cataloged exploits
40,392CVEs with public exploitation
24,696lab-tested
AllReferência 26,190Exploit-DB 24,488GitHub PoC 18,020VulnCheck XDB 10,108Nuclei 4,556Metasploit 3,537✓ verified onlyrecentpopularrisk
26,190 exploits
Referência
CVE-2015-1100
CVE-2015-1100—
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denia
23RISK
open ↗
Referência
CVE-2013-1773
CVE-2013-1773—
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileg
23RISK
open ↗
Referência
CVE-2014-7872
CVE-2014-7872—
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges
23RISK
open ↗
Referência
CVE-2016-3222
CVE-2016-3222—
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
35RISK
open ↗
Referência
CVE-2026-117512
CVE-2026-117512MEDIUM
oretnom23 php-travel-agency-system employee_insert.php unrestricted upload
33RISK
open ↗
Referência
CVE-2026-117511
CVE-2026-117511MEDIUM
desmondmorris node-tesseract Command Builder tesseract.js process os command injection
33RISK
open ↗
Referência✓ VexDay Proof
XOOPS module Articles 1.02 - 'print.php?id' SQL Injection
CVE-2007-3311—webappsphp
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex
23RISK
open ↗
Referência
CVE-2026-103359
CVE-2026-103359MEDIUM
PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery
33RISK
open ↗
Referência
CVE-2022-3241
CVE-2022-3241CRITICAL
Build App Online < 1.0.19 - Unauthenticated SQL Injection
48RISK
open ↗
Referência
CVE-2022-4383
CVE-2022-4383CRITICAL
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi
48RISK
open ↗
Referência
CVE-2022-4099
CVE-2022-4099CRITICAL
Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi
48RISK
open ↗
Referência✓ VexDay Proof
phpFullAnnu (PFA) 6.0 - SQL Injection
CVE-2007-5068—webappsphp
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comma
23RISK
open ↗
Referência✓ VexDay Proof
JobSite Professional 2.0 - 'file.php' SQL Injection
CVE-2007-5785—webappsphp
SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2010-4866
CVE-2010-4866—
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2012-0906
CVE-2012-0906—
SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execut
23RISK
open ↗
Referência
CVE-2012-5323
CVE-2012-5323—
Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows
23RISK
open ↗
Referência
CVE-2014-7872
CVE-2014-7872—
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges
23RISK
open ↗
Referência✓ VexDay Proof
Content Injector 1.53 - 'index.php' SQL Injection
CVE-2007-6394—webappsphp
SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comma
23RISK
open ↗
Referência✓ VexDay Proof
DigiLeave 1.2 - 'book_id' Blind SQL Injection
CVE-2008-3309—webappsasp
SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S
23RISK
open ↗
Referência✓ VexDay Proof
ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection
CVE-2008-4717—webappsphp
SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência
CVE-2008-4344
CVE-2008-4344—
SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the Ca
23RISK
open ↗
Referência✓ VexDay Proof
BluSky CMS - 'news_id' SQL Injection
CVE-2009-1548—webappsphp
SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Referência
CVE-2011-2523
CVE-2011-2523—
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗
Referência
CVE-2026-116623
CVE-2026-116623MEDIUM
code-projects Simple Content Management System Admin welcome.php authorization
33RISK
open ↗
Referência
CVE-2026-116608
CVE-2026-116608MEDIUM
DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check
33RISK
open ↗
Referência
CVE-2026-82543
CVE-2026-82543MEDIUM
vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition
33RISK
open ↗
Referência
CVE-2007-6032
CVE-2007-6032—
SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2026-82484
CVE-2026-82484MEDIUM
itsourcecode Sales and Inventory System emp_searchfrm.php sql injection
33RISK
open ↗
Referência✓ VexDay Proof
phpsmartcom 0.2 - Local File Inclusion / SQL Injection
CVE-2008-4351—webappsphp
Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitra
23RISK
open ↗
Referência✓ VexDay Proof
FLDS 1.2a - 'redir.php' SQL Injection
CVE-2008-5928—webappsphp
SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute a
23RISK
open ↗
← previouspage 270 / 873next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.