Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência✓ VexDay Proof
PG Job Site - Blind SQL Injection
CVE-2008-6117—webappsphp
SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência✓ VexDay Proof
phpBB 3 - Mod Tag Board 4 Blind SQL Injection
CVE-2008-6314—webappsphp
SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers t
23RISK
open ↗
Referência✓ VexDay Proof
WEBBDOMAIN Post Card 1.02 - Authentication Bypass
CVE-2008-6623—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta
23RISK
open ↗
Referência
CVE-2010-0608
CVE-2010-0608—
SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Referência
CVE-2010-0608
CVE-2010-0608—
SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Referência
CVE-2010-2047
CVE-2010-2047—
SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Referência
CVE-2010-2683
CVE-2010-2683—
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit
23RISK
open ↗
Referência
CVE-2010-2683
CVE-2010-2683—
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit
23RISK
open ↗
Referência
CVE-2010-4919
CVE-2010-4919—
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbit
23RISK
open ↗
Referência
CVE-2016-1807
CVE-2016-1807—
Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watch
23RISK
open ↗
Referência
CVE-2026-9296
CVE-2026-9296MEDIUM
Edimax BR-6428NS POST Request formWlanM system command injection
33RISK
open ↗
Referência
CVE-2009-4695
CVE-2009-4695—
SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Referência
CVE-2026-87797
CVE-2026-87797MEDIUM
Client Invoicing by Sprout Invoices < 20.8.16 - Subscriber+ Private Note Overwrite via si_edit_private_note
33RISK
open ↗
Referência
CVE-2018-25394
CVE-2018-25394HIGH
Kados R10 GreenBee SQL Injection via update_release.php
41RISK
open ↗
Referência
CVE-2018-25393
CVE-2018-25393HIGH
Navigate CMS 2.8.5 Path Traversal via navigate_download.php
41RISK
open ↗
Referência
CVE-2018-25392
CVE-2018-25392HIGH
MaxOn ERP Software 8.x-9.x SQL Injection via nomor Parameter
41RISK
open ↗
Referência✓ VexDay Proof
Snitz Forums 2000 - 'Active.asp' SQL Injection
CVE-2007-6240—webappsasp
SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2010-4955
CVE-2010-4955—
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers t
23RISK
open ↗
Referência
CVE-2026-9297
CVE-2026-9297MEDIUM
Edimax BR-6428NS POST Request formWlbasic command injection
33RISK
open ↗
Referência
CVE-2017-8492
CVE-2017-8492—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RISK
open ↗
Referência
CVE-2009-4430
CVE-2009-4430—
SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2010-1073
CVE-2010-1073—
SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to e
23RISK
open ↗
Referência
CVE-2010-1094
CVE-2010-1094—
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Referência
CVE-2026-50656
CVE-2026-50656HIGH
Microsoft Defender Elevation of Privilege Vulnerability
46RISK
open ↗
Referência
CVE-2026-9570
CVE-2026-9570HIGH
Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
41RISK
open ↗
Referência✓ VexDay Proof
EZContents 1.4.5 - 'index.php?link' Remote File Disclosure
CVE-2007-6368—webappsphp
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a
23RISK
open ↗
Referência
CVE-2026-7785
CVE-2026-7785MEDIUM
A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection
33RISK
open ↗
Referência
CVE-2026-7784
CVE-2026-7784MEDIUM
RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal
33RISK
open ↗
Referência
CVE-2026-94267
CVE-2026-94267CRITICAL
Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
48RISK
open ↗
Referência
CVE-2011-3833
CVE-2011-3833—
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RISK
open ↗
← previouspage 323 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.