Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,602cataloged exploits
34,985CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,969VulnCheck XDB 8,571Nuclei 4,248Metasploit 3,472✓ verified onlyrecentpopularrisk
21,899 exploits
Referência
CVE-2026-4585
CVE-2026-4585CRITICAL
Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection
48RISK
open ↗
Referência
CVE-2015-1724
CVE-2015-1724—
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S
23RISK
open ↗
Referência
CVE-2010-1044
CVE-2010-1044—
SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2010-1044
CVE-2010-1044—
SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2012-2210
CVE-2012-2210—
The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device cras
23RISK
open ↗
Referência
CVE-2018-17441
CVE-2018-17441—
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser
23RISK
open ↗
Referência
CVE-2021-24862
CVE-2021-24862—
RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
60RISK
open ↗
Referência
CVE-2018-17443
CVE-2018-17443—
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateS
23RISK
open ↗
Referência
CVE-2017-14085
CVE-2017-14085—
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc
23RISK
open ↗
Referência
CVE-2017-14085
CVE-2017-14085—
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc
23RISK
open ↗
Referência
CVE-2026-28517
CVE-2026-28517CRITICAL
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
63RISK
open ↗
Referência
CVE-2026-28517
CVE-2026-28517CRITICAL
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
63RISK
open ↗
Referência
CVE-2008-4157
CVE-2008-4157—
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2008-4157
CVE-2008-4157—
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2017-6095
CVE-2017-6095—
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/list
23RISK
open ↗
Referência
CVE-2020-6318
CVE-2020-6318CRITICAL
A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>
48RISK
open ↗
Referência
CVE-2017-2483
CVE-2017-2483—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISK
open ↗
Referência✓ VexDay Proof
MikroTik RouterOS 3.13 - SNMP write (Set request)
CVE-2008-6976—remotehardware
MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (N
23RISK
open ↗
Referência✓ VexDay Proof
IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection
CVE-2007-4368—webappscgi
SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attack
23RISK
open ↗
Referência
CVE-2021-25094
CVE-2021-25094—
Tatsu < 3.3.12 - Unauthenticated RCE
60RISK
open ↗
Referência
CVE-2015-2679
CVE-2015-2679—
Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S
23RISK
open ↗
Referência
CVE-2015-2679
CVE-2015-2679—
Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S
23RISK
open ↗
Referência
CVE-2010-3906
CVE-2010-3906—
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web s
23RISK
open ↗
Referência
CVE-2010-4401
CVE-2010-4401—
languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which
23RISK
open ↗
Referência
CVE-2009-4775
CVE-2009-4775—
Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of
23RISK
open ↗
Referência
CVE-2009-4775
CVE-2009-4775—
Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of
23RISK
open ↗
Referência
CVE-2017-15035
CVE-2017-15035—
EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).
23RISK
open ↗
Referência
CVE-2016-1415
CVE-2016-1415—
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of servi
23RISK
open ↗
Referência✓ VexDay Proof
Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method
CVE-2007-4902—remotewindows
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co
23RISK
open ↗
Referência
CVE-2014-3139
CVE-2014-3139—
recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by s
23RISK
open ↗
← previouspage 322 / 730next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.