Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits

34,679CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

21,692 exploits

Referência

CVE-2009-4826

CVE-2009-4826—

Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote at

23RISK

open ↗

Referência

CVE-2018-6223

CVE-2018-6223—

A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allo

28RISK

open ↗

Referência

CVE-2015-2281

CVE-2015-2281—

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attac

28RISK

open ↗

Referência

CVE-2010-4701

CVE-2010-4701—

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover

35RISK

open ↗

Referência

CVE-2011-3981

CVE-2011-3981—

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attac

28RISK

open ↗

Referência

CVE-2019-16692

CVE-2019-16692—

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us

28RISK

open ↗

Referência

CVE-2012-1008

CVE-2012-1008—

OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SI

28RISK

open ↗

Referência

CVE-2020-35737

CVE-2020-35737—

In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information

28RISK

open ↗

Referência

CVE-2011-1546

CVE-2011-1546—

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to exec

23RISK

open ↗

Referência

CVE-2010-1029

CVE-2010-1029—

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf

28RISK

open ↗

Referência

CVE-2010-1029

CVE-2010-1029—

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf

28RISK

open ↗

Referência

CVE-2020-6857

CVE-2020-6857—

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FT

23RISK

open ↗

Referência

CVE-2017-8770

CVE-2017-8770—

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys

28RISK

open ↗

Referência

CVE-2019-15993

CVE-2019-15993HIGH

Cisco Small Business Switches Information Disclosure Vulnerability

46RISK

open ↗

Referência

CVE-2026-6594

CVE-2026-6594MEDIUM

brikcss merge prototype pollution

33RISK

open ↗

Referência✓ VexDay Proof

DNS Tools (PHP Digger) - Remote Command Execution

CVE-2009-1916—webappsphp

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the

28RISK

open ↗

Referência✓ VexDay Proof

vuBB 0.2 Final - 'cookie' SQL Injection

CVE-2006-0962—webappsphp

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter

23RISK

open ↗

Referência✓ VexDay Proof

SolidState 0.4 - Multiple Remote File Inclusions

CVE-2006-5020—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbit

28RISK

open ↗

Referência

Newgen Correspondence Management System (corms) eGov 12.0 - IDOR

CVE-2020-35737—webappsmultiple

In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information

28RISK

open ↗

Referência

CVE-2024-6127

CVE-2024-6127CRITICAL

BC Security Empire Path Traversal RCE

68RISK

open ↗

Referência

CVE-2018-7254

CVE-2018-7254—

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of

23RISK

open ↗

Referência

CVE-2018-7254

CVE-2018-7254—

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of

23RISK

open ↗

Referência

CVE-2021-25157

CVE-2021-25157—

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s

28RISK

open ↗

Referência

CVE-2009-4832

CVE-2009-4832—

The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x80

23RISK

open ↗

Referência

CVE-2012-6303

CVE-2012-6303—

Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in

28RISK

open ↗

Referência

CVE-2013-6023

CVE-2013-6023—

Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote at

28RISK

open ↗

Referência

CVE-2019-1346

CVE-2019-1346—

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

28RISK

open ↗

Referência

CVE-2019-1343

CVE-2019-1343—

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

28RISK

open ↗

Referência

CVE-2008-6994

CVE-2008-6994—

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14

28RISK

open ↗

Referência

CVE-2013-6236

CVE-2013-6236—

IZON IP 2.0.2: hard-coded password vulnerability

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.