Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2026-14834
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
33RISK
open ↗Referência
CVE-2026-14833
Lightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption Attribute
33RISK
open ↗Referência
CVE-2013-7091
Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zim
60RISK
open ↗Referência
SPBAS Business Automation Software 2012 - Multiple Vulnerabilities
SPBAS Business Automation Software 2012 has XSS.
23RISK
open ↗Referência
CVE-2016-5304
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6
23RISK
open ↗Referência
CVE-2026-16064
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event
33RISK
open ↗Referência
CVE-2013-0230
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP
50RISK
open ↗Referência✓ VexDay Proof
AJ HYIP ACME - 'comment.php' SQL Injection
Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL command
23RISK
open ↗Referência
CVE-2026-7604
JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery
33RISK
open ↗Referência
CVE-2026-17531
unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization
28RISK
open ↗Referência
CVE-2026-7319
elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal
33RISK
open ↗Referência
CVE-2026-7316
eiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection
33RISK
open ↗Referência
CVE-2026-7314
eiceblue spire-doc-mcp-server base.py get_doc_path path traversal
33RISK
open ↗Referência
CVE-2015-1305
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, an
23RISK
open ↗Referência
CVE-2026-7401
SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting
33RISK
open ↗Referência
CVE-2026-7400
geekgod382 filesystem-mcp-server read_file_tool/write_file_tool server.py is_path_allowed path traversal
33RISK
open ↗Referência
CVE-2026-16448
D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection
33RISK
open ↗Referência
CVE-2026-15205
Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
41RISK
open ↗Referência
CVE-2026-18035
User Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API
33RISK
open ↗Referência
CVE-2026-19074
Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.