Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,190 exploits
Referência
CVE-2026-6036
CVE-2026-6036MEDIUM
code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection
33RISK
open ↗
Referência
CVE-2026-6035
CVE-2026-6035MEDIUM
code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-6034
CVE-2026-6034MEDIUM
code-projects Vehicle Showroom Management System ProfitAndLossReport.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-6033
CVE-2026-6033MEDIUM
CodeAstro Online Classroom updatedetailsfromstudent.php sql injection
33RISK
open ↗
Referência
CVE-2026-6032
CVE-2026-6032MEDIUM
code-projects Simple Laundry System checkcheckout.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-6031
CVE-2026-6031MEDIUM
code-projects Simple IT Discussion Forum add-category-function.php sql injection
33RISK
open ↗
Referência
CVE-2026-6030
CVE-2026-6030MEDIUM
itsourcecode Construction Management System del1.php sql injection
33RISK
open ↗
Referência
CVE-2026-6029
CVE-2026-6029CRITICAL
Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection
48RISK
open ↗
Referência
CVE-2026-6026
CVE-2026-6026CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection
48RISK
open ↗
Referência
CVE-2026-6025
CVE-2026-6025CRITICAL
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection
48RISK
open ↗
Referência
CVE-2026-6024
CVE-2026-6024MEDIUM
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal
33RISK
open ↗
Referência
CVE-2026-6016
CVE-2026-6016HIGH
Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
41RISK
open ↗
Referência
CVE-2026-6015
CVE-2026-6015HIGH
Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
41RISK
open ↗
Referência
CVE-2012-1464
CVE-2012-1464—
Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a
23RISK
open ↗
Referência
CVE-2012-1495
CVE-2012-1495—
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user
60RISK
open ↗
Referência✓ VexDay Proof
WebCalendar 1.2.4 - Remote Code Execution
CVE-2012-1495—webappsphp
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user
60RISK
open ↗
Referência
CVE-2018-25291
CVE-2018-25291MEDIUM
Project64 2.3.2 Denial of Service via Plugin Directory
33RISK
open ↗
Referência
CVE-2018-25290
CVE-2018-25290MEDIUM
Easyboot 6.6.0 Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2018-25289
CVE-2018-25289MEDIUM
Softdisk 3.0.3 Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2018-25288
CVE-2018-25288MEDIUM
StyleWriter 1.0 Denial of Service via Pattern Input
33RISK
open ↗
Referência
CVE-2026-5970
CVE-2026-5970MEDIUM
FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection
33RISK
open ↗
Referência
CVE-2026-5962
CVE-2026-5962MEDIUM
Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal
33RISK
open ↗
Referência
CVE-2026-5961
CVE-2026-5961MEDIUM
code-projects Simple IT Discussion Forum topic-details.php sql injection
33RISK
open ↗
Referência
CVE-2026-5960
CVE-2026-5960MEDIUM
code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure
33RISK
open ↗
Referência
CVE-2016-20055
CVE-2016-20055HIGH
IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation
41RISK
open ↗
Referência
CVE-2026-6005
CVE-2026-6005MEDIUM
code-projects Patient Record Management System hematology_print.php sql injection
33RISK
open ↗
Referência
CVE-2026-6004
CVE-2026-6004MEDIUM
code-projects Simple IT Discussion Forum delete-category.php sql injection
33RISK
open ↗
Referência
CVE-2026-5992
CVE-2026-5992HIGH
Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow
41RISK
open ↗
Referência
CVE-2016-5425
CVE-2016-5425—
The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu
38RISK
open ↗
Referência
CVE-2026-67281
CVE-2026-67281HIGH
Unauthenticated file read in Mikrotik RouterOS
41RISK
open ↗
← previouspage 317 / 873next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.