Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits
34,834CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecentpopularrisk
21,797 exploits
Referência
CVE-2026-9822
CVE-2026-9822MEDIUM
WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX Handlers
33RISK
open ↗
Referência
CVE-2026-7850
CVE-2026-7850MEDIUM
WP Magnific Popup <= 1.0 - Author+ Stored XSS via href Attribute
33RISK
open ↗
Referência
CVE-2026-2604
CVE-2026-2604MEDIUM
Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling
33RISK
open ↗
Referência
CVE-2026-49954
CVE-2026-49954HIGH
Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin Directory
41RISK
open ↗
Referência
CVE-2026-49953
CVE-2026-49953MEDIUM
Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
33RISK
open ↗
Referência
CVE-2016-20080
CVE-2016-20080MEDIUM
WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php
33RISK
open ↗
Referência
CVE-2016-20078
CVE-2016-20078MEDIUM
WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php
33RISK
open ↗
Referência
CVE-2016-20077
CVE-2016-20077MEDIUM
WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php
33RISK
open ↗
Referência
CVE-2016-20076
CVE-2016-20076HIGH
WordPress Simple-Backup 2.7.11 Arbitrary File Deletion and Download
41RISK
open ↗
Referência
CVE-2016-20075
CVE-2016-20075HIGH
WordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE
41RISK
open ↗
Referência
CVE-2016-20074
CVE-2016-20074MEDIUM
WordPress Lazy Content Slider Plugin 3.4 CSRF
33RISK
open ↗
Referência
CVE-2016-20067
CVE-2016-20067MEDIUM
WordPress CP Polls 1.0.8 Cross-Site Request Forgery
33RISK
open ↗
Referência
CVE-2026-34021
CVE-2026-34021HIGH
Lack of cryptographic protection in Wertheim SafeController 5400 enables RS-485 message sniffing and replay
41RISK
open ↗
Referência
CVE-2026-12217
CVE-2026-12217HIGH
DVDFab Virtual Drive Signed Kernel Driver dvdfabio.sys privileges management
41RISK
open ↗
Referência
CVE-2026-12216
CVE-2026-12216MEDIUM
svaarala duktape duk_api_bytecode.c memory corruption
33RISK
open ↗
Referência
CVE-2026-12204
CVE-2026-12204MEDIUM
ShopXO Scheduled Task Endpoint Crontab.php GoodsGiveIntegral authorization
33RISK
open ↗
Referência
CVE-2026-12203
CVE-2026-12203MEDIUM
HKUDS AI-Trader Research Export agents.csv information disclosure
33RISK
open ↗
Referência
CVE-2026-12202
CVE-2026-12202MEDIUM
Intelliants Subrion CMS Blocks Endpoint cross site scripting
33RISK
open ↗
Referência
CVE-2026-12201
CVE-2026-12201MEDIUM
IObit Malware Fighter DLL permission
33RISK
open ↗
Referência
CVE-2026-12200
CVE-2026-12200MEDIUM
Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow
33RISK
open ↗
Referência
CVE-2026-12198
CVE-2026-12198MEDIUM
Microweber API Endpoint thumbnail_img userfiles_path path traversal
33RISK
open ↗
Referência
CVE-2026-12193
CVE-2026-12193HIGH
VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow
41RISK
open ↗
Referência
CVE-2026-12193
CVE-2026-12193HIGH
VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow
41RISK
open ↗
Referência
CVE-2026-12188
CVE-2026-12188MEDIUM
Grit42 Grit GritEntityController grit_entity_controller.rb sql injection
33RISK
open ↗
Referência
CVE-2026-12183
CVE-2026-12183CRITICAL
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentic
48RISK
open ↗
Referência
CVE-2026-9062
CVE-2026-9062LOW
Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal
28RISK
open ↗
Referência
CVE-2026-12066
CVE-2026-12066MEDIUM
PbootCMS Password MemberController.php retrieve password recovery
33RISK
open ↗
Referência
CVE-2026-12065
CVE-2026-12065LOW
Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme
28RISK
open ↗
Referência
CVE-2026-12065
CVE-2026-12065LOW
Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme
28RISK
open ↗
Referência
CVE-2026-9269
CVE-2026-9269LOW
Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter
28RISK
open ↗
← previouspage 300 / 727next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.