Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,020cataloged exploits
35,276CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,446Referência 22,166GitHub PoC 14,080VulnCheck XDB 8,604Nuclei 4,251Metasploit 3,473✓ verified onlyrecentpopularrisk
22,166 exploits
Referência
CVE-2026-11766
CVE-2026-11766HIGH
Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields
41RISK
open ↗
Referência
CVE-2026-10830
CVE-2026-10830HIGH
AllCoach < 1.0.2 - Unauthenticated Account Takeover
41RISK
open ↗
Referência
CVE-2024-6228
CVE-2024-6228HIGH
WANotifier < 2.6 - Subscriber+ LFI
41RISK
open ↗
Referência
CVE-2026-14790
CVE-2026-14790MEDIUM
GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference
33RISK
open ↗
Referência
CVE-2026-11869
CVE-2026-11869MEDIUM
WP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access Request
33RISK
open ↗
Referência
CVE-2026-6352
CVE-2026-6352LOW
Incorrect Authorization in GitLab
28RISK
open ↗
Referência
CVE-2026-6896
CVE-2026-6896HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RISK
open ↗
Referência
CVE-2018-6394
CVE-2018-6394—
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.
23RISK
open ↗
Referência
CVE-2026-12378
CVE-2026-12378HIGH
BookingPress <= 1.1.28 - Unauthenticated PHP Object Injection
41RISK
open ↗
Referência
CVE-2026-58583
CVE-2026-58583HIGH
FluxInk Color Management Driver local privilege escalation
41RISK
open ↗
Referência
CVE-2026-58468
CVE-2026-58468MEDIUM
NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper
33RISK
open ↗
Referência
CVE-2026-23697
CVE-2026-23697HIGH
Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module
41RISK
open ↗
Referência
CVE-2026-14744
CVE-2026-14744MEDIUM
code-projects Real State Services normalHomeRent.php sql injection
33RISK
open ↗
Referência
CVE-2026-14742
CVE-2026-14742LOW
langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash
28RISK
open ↗
Referência
CVE-2026-14735
CVE-2026-14735MEDIUM
code-projects Smart Parking System parkings.php sql injection
33RISK
open ↗
Referência
CVE-2025-15668
CVE-2025-15668MEDIUM
GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow
33RISK
open ↗
Referência
CVE-2025-15667
CVE-2025-15667MEDIUM
GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free
33RISK
open ↗
Referência
CVE-2026-14789
CVE-2026-14789MEDIUM
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
33RISK
open ↗
Referência
CVE-2026-14788
CVE-2026-14788MEDIUM
radareorg radare2 cfile.c r_core_bin_load use after free
33RISK
open ↗
Referência
CVE-2026-14786
CVE-2026-14786MEDIUM
radareorg radare2 str.c r_str_word_get0set integer overflow
33RISK
open ↗
Referência
CVE-2026-14783
CVE-2026-14783MEDIUM
NousResearch hermes-agent skills_tool.py skill_view path traversal
33RISK
open ↗
Referência
CVE-2026-14732
CVE-2026-14732MEDIUM
SourceCodester Class and Exam Timetabling System edit_exam.php sql injection
33RISK
open ↗
Referência
CVE-2026-14725
CVE-2026-14725MEDIUM
SourceCodester Online Boat Reservation System session expiration
33RISK
open ↗
Referência
CVE-2026-14723
CVE-2026-14723MEDIUM
AD-Security AD_Miner Cache analyse_cache.py request_a deserialization
33RISK
open ↗
Referência
CVE-2026-14721
CVE-2026-14721HIGH
UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflow
41RISK
open ↗
Referência
CVE-2026-14757
CVE-2026-14757MEDIUM
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
33RISK
open ↗
Referência
CVE-2026-14756
CVE-2026-14756MEDIUM
code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection
33RISK
open ↗
Referência
CVE-2026-14755
CVE-2026-14755MEDIUM
code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection
33RISK
open ↗
Referência
CVE-2026-14754
CVE-2026-14754MEDIUM
code-projects Hotel and Tourism Reservation add_room.php sql injection
33RISK
open ↗
Referência
CVE-2026-14717
CVE-2026-14717MEDIUM
itsourcecode Hospital Management System patientlogin.php sql injection
33RISK
open ↗
← previouspage 357 / 739next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.