Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,190 exploits
Referência
CVE-2019-25664
CVE-2019-25664HIGH
SuiteCRM 7.10.7 SQL Injection via record Parameter
41RISK
open ↗
Referência
CVE-2019-25663
CVE-2019-25663HIGH
SuiteCRM 7.10.7 SQL Injection via parentTab Parameter
41RISK
open ↗
Referência
CVE-2019-25662
CVE-2019-25662HIGH
ResourceSpace 8.6 SQL Injection via watched_searches.php
41RISK
open ↗
Referência
CVE-2019-25661
CVE-2019-25661MEDIUM
Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25660
CVE-2019-25660MEDIUM
LanHelper 1.74 Denial of Service via Buffer Overflow
33RISK
open ↗
Referência
CVE-2019-25659
CVE-2019-25659MEDIUM
ASPRunner Professional 6.0.766 Local Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25658
CVE-2019-25658MEDIUM
a-Mac Address Change 5.4 Local Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25657
CVE-2019-25657MEDIUM
AnyBurn 4.3 x86 Denial of Service via Image Conversion
33RISK
open ↗
Referência
CVE-2019-25656
CVE-2019-25656HIGH
R i386 3.5.0 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2026-5596
CVE-2026-5596MEDIUM
griptape-ai griptape SqlTool tool.py sql injection
33RISK
open ↗
Referência
CVE-2018-25256
CVE-2018-25256MEDIUM
IP TOOLS 2.50 Local Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2026-5595
CVE-2026-5595MEDIUM
griptape-ai griptape FileManagerTool save_memory_artifacts_to_disk path traversal
33RISK
open ↗
Referência
CVE-2026-5594
CVE-2026-5594MEDIUM
premAI-io premsql followup.py eval code injection
33RISK
open ↗
Referência
CVE-2026-5587
CVE-2026-5587MEDIUM
wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection
33RISK
open ↗
Referência
CVE-2026-5586
CVE-2026-5586MEDIUM
zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection
33RISK
open ↗
Referência
CVE-2026-5564
CVE-2026-5564MEDIUM
code-projects Simple Laundry System Parameter searchguest.php sql injection
33RISK
open ↗
Referência
CVE-2026-5563
CVE-2026-5563MEDIUM
AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection
33RISK
open ↗
Referência
CVE-2026-5562
CVE-2026-5562MEDIUM
provectus kafka-ui Endpoint testexecutions validateAccess code injection
48RISK
open ↗
Referência
CVE-2026-5561
CVE-2026-5561MEDIUM
Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection
33RISK
open ↗
Referência
CVE-2026-5560
CVE-2026-5560MEDIUM
PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection
33RISK
open ↗
Referência
CVE-2026-6574
CVE-2026-6574MEDIUM
osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials
33RISK
open ↗
Referência
CVE-2026-6562
CVE-2026-6562MEDIUM
dameng100 muucmf index.html getListByPage sql injection
33RISK
open ↗
Referência
CVE-2026-6561
CVE-2026-6561MEDIUM
EyouCMS Index.php edit_adminlogo unrestricted upload
33RISK
open ↗
Referência
CVE-2026-6560
CVE-2026-6560HIGH
H3C Magic B0 aspForm Edit_BasicSSID buffer overflow
41RISK
open ↗
Referência
CVE-2026-5668
CVE-2026-5668MEDIUM
Cyber-III Student-Management-System add%20notice.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5811
CVE-2026-5811MEDIUM
SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
33RISK
open ↗
Referência
CVE-2026-5810
CVE-2026-5810MEDIUM
SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting
33RISK
open ↗
Referência
CVE-2010-4983
CVE-2010-4983—
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2026-14686
CVE-2026-14686MEDIUM
HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison
33RISK
open ↗
Referência
CVE-2014-4872
CVE-2014-4872—
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbit
60RISK
open ↗
← previouspage 293 / 873next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.