Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2023-54358
CVE-2023-54358MEDIUM
WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile
33RISK
open ↗
Referência
CVE-2026-5979
CVE-2026-5979HIGH
D-Link DIR-605L POST Request formVirtualServ buffer overflow
41RISK
open ↗
Referência
CVE-2026-5977
CVE-2026-5977CRITICAL
Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection
48RISK
open ↗
Referência
CVE-2026-5976
CVE-2026-5976CRITICAL
Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection
48RISK
open ↗
Referência
CVE-2026-5975
CVE-2026-5975CRITICAL
Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection
48RISK
open ↗
Referência
CVE-2026-5973
CVE-2026-5973MEDIUM
FoundationAgents MetaGPT common.py get_mime_type os command injection
33RISK
open ↗
Referência
CVE-2026-5972
CVE-2026-5972MEDIUM
FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection
33RISK
open ↗
Referência
CVE-2026-39912
CVE-2026-39912CRITICAL
v2board / Xboard Authentication Token Exposure via loginWithMailLink
48RISK
open ↗
Referência
CVE-2026-5971
CVE-2026-5971MEDIUM
FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection
33RISK
open ↗
Referência
CVE-2026-5847
CVE-2026-5847MEDIUM
code-projects Movie Ticketing System SQL Database Backup File moviedb.sql information disclosure
33RISK
open ↗
Referência
CVE-2026-5844
CVE-2026-5844HIGH
D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection
41RISK
open ↗
Referência
CVE-2026-5842
CVE-2026-5842MEDIUM
decolua 9router Administrative API Endpoint api authorization
33RISK
open ↗
Referência
CVE-2026-5841
CVE-2026-5841MEDIUM
Tenda i3 HTTP R7WebsSecurityHandler path traversal
33RISK
open ↗
Referência
CVE-2026-5840
CVE-2026-5840MEDIUM
PHPGurukul News Portal Project check_availability.php sql injection
33RISK
open ↗
Referência
CVE-2026-5839
CVE-2026-5839MEDIUM
PHPGurukul News Portal Project add-subcategory.php sql injection
33RISK
open ↗
Referência
CVE-2026-5838
CVE-2026-5838MEDIUM
PHPGurukul News Portal Project add-subadmins.php sql injection
33RISK
open ↗
Referência
CVE-2026-5837
CVE-2026-5837MEDIUM
PHPGurukul News Portal Project news-details.php sql injection
33RISK
open ↗
Referência
CVE-2026-5836
CVE-2026-5836MEDIUM
code-projects Online Shoe Store admin_product.php cross site scripting
33RISK
open ↗
Referência
CVE-2018-6585
CVE-2018-6585—
SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or fi
23RISK
open ↗
Referência✓ VexDay Proof
BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion
CVE-2008-2689—webappsphp
PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arb
35RISK
open ↗
Referência
CVE-2026-5835
CVE-2026-5835MEDIUM
code-projects Online Shoe Store admin_football.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5834
CVE-2026-5834MEDIUM
code-projects Online Shoe Store admin_running.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5833
CVE-2026-5833MEDIUM
awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection
33RISK
open ↗
Referência
CVE-2023-54360
CVE-2023-54360MEDIUM
Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter
33RISK
open ↗
Referência
CVE-2023-54359
CVE-2023-54359HIGH
WordPress adivaha Travel Plugin 2.3 SQL Injection via pid
41RISK
open ↗
Referência✓ VexDay Proof
JAMM CMS - 'id' Blind SQL Injection
CVE-2008-2755—webappsphp
SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the i
23RISK
open ↗
Referência
CVE-2026-104671
CVE-2026-104671MEDIUM
TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAX
33RISK
open ↗
Referência
CVE-2026-5574
CVE-2026-5574MEDIUM
Technostrobe HI-LED-WR120-G2 FsBrowseClean deletefile authorization
33RISK
open ↗
Referência
CVE-2026-5573
CVE-2026-5573MEDIUM
Technostrobe HI-LED-WR120-G2 fs unrestricted upload
33RISK
open ↗
Referência
CVE-2026-5572
CVE-2026-5572MEDIUM
Technostrobe HI-LED-WR120-G2 cross-site request forgery
33RISK
open ↗
← previouspage 353 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.