Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2026-7407
SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection
33RISK
open ↗Referência
CVE-2026-7404
getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversal
33RISK
open ↗Referência
CVE-2026-6182
code-projects Simple Content Management System login.php sql injection
33RISK
open ↗Referência
CVE-2026-6204
LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Bina
41RISK
open ↗Referência
CVE-2026-2728
LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig pa
33RISK
open ↗Referência
CVE-2026-6167
code-projects Faculty Management System subject-print.php sql injection
33RISK
open ↗Referência
CVE-2022-34668
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage ma
53RISK
open ↗Referência
CVE-2018-25266
Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow
33RISK
open ↗Referência
CVE-2018-25311
VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal
41RISK
open ↗Referência
CVE-2018-25310
VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution
33RISK
open ↗Referência
CVE-2018-5755
Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.
23RISK
open ↗Referência✓ VexDay Proof
Cuteflow Bin 1.5.0 - 'login.php' Local File Inclusion
Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbi
23RISK
open ↗Referência
CVE-2016-8806
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISK
open ↗Referência✓ VexDay Proof
PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload
Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQ
23RISK
open ↗Referência
CVE-2011-5267
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as
23RISK
open ↗Referência
CVE-2026-82304
Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler
41RISK
open ↗Referência
CVE-2026-6003
code-projects Simple IT Discussion Forum user.php cross site scripting
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.