Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,020cataloged exploits
35,276CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,446Referência 22,166GitHub PoC 14,080VulnCheck XDB 8,604Nuclei 4,251Metasploit 3,473✓ verified onlyrecentpopularrisk
22,166 exploits
Referência
CVE-2026-56109
CVE-2026-56109HIGH
ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c
41RISK
open ↗
Referência
CVE-2026-6858
CVE-2026-6858HIGH
Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS
41RISK
open ↗
Referência
CVE-2026-4259
CVE-2026-4259HIGH
Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctions
41RISK
open ↗
Referência
CVE-2026-4110
CVE-2026-4110MEDIUM
Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_list
33RISK
open ↗
Referência
CVE-2026-10530
CVE-2026-10530MEDIUM
Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token
33RISK
open ↗
Referência
CVE-2026-13592
CVE-2026-13592MEDIUM
liftoff-sr CIPster EtherNet IP Message append out-of-bounds write
33RISK
open ↗
Referência
CVE-2026-13591
CVE-2026-13591LOW
DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorization
28RISK
open ↗
Referência
CVE-2026-13590
CVE-2026-13590MEDIUM
seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow
33RISK
open ↗
Referência
CVE-2026-13589
CVE-2026-13589MEDIUM
seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow
33RISK
open ↗
Referência
CVE-2026-34112
CVE-2026-34112CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php
48RISK
open ↗
Referência
CVE-2026-13588
CVE-2026-13588MEDIUM
seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow
33RISK
open ↗
Referência
CVE-2026-13587
CVE-2026-13587MEDIUM
seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow
33RISK
open ↗
Referência
CVE-2026-13583
CVE-2026-13583HIGH
Edimax EW-7478APC POST Request formUSBFolder buffer overflow
41RISK
open ↗
Referência
CVE-2026-13582
CVE-2026-13582HIGH
Edimax EW-7478APC POST Request formUSBAccount buffer overflow
41RISK
open ↗
Referência
CVE-2026-13581
CVE-2026-13581MEDIUM
Edimax EW-7478APC POST Request formStaDrvSetup os command injection
33RISK
open ↗
Referência
CVE-2017-20274
CVE-2017-20274HIGH
Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpath
41RISK
open ↗
Referência
CVE-2016-20084
CVE-2016-20084MEDIUM
WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS
33RISK
open ↗
Referência
CVE-2016-20083
CVE-2016-20083MEDIUM
WordPress More Fields Plugin 2.1 Cross-Site Request Forgery
33RISK
open ↗
Referência
CVE-2016-20082
CVE-2016-20082MEDIUM
WordPress Plugin Abtest Local File Inclusion via abtest_admin.php
33RISK
open ↗
Referência
CVE-2017-20273
CVE-2017-20273HIGH
Joomla Event Registration Pro Calendar 4.1.3 SQL Injection
41RISK
open ↗
Referência
CVE-2026-12188
CVE-2026-12188MEDIUM
Grit42 Grit GritEntityController grit_entity_controller.rb sql injection
33RISK
open ↗
Referência
CVE-2017-20272
CVE-2017-20272HIGH
Joomla Ultimate Property Listing 1.0.2 SQL Injection via sf_selectuser_id
41RISK
open ↗
Referência
CVE-2026-12797
CVE-2026-12797MEDIUM
BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization
33RISK
open ↗
Referência
CVE-2017-20271
CVE-2017-20271HIGH
Joomla StreetGuessr Game 1.1.8 SQL Injection via catid
41RISK
open ↗
Referência
CVE-2017-20270
CVE-2017-20270HIGH
Joomla! Component Twitch Tv 1.1 SQL Injection
41RISK
open ↗
Referência
CVE-2017-20269
CVE-2017-20269HIGH
Joomla! Component KissGallery 1.0.0 SQL Injection
41RISK
open ↗
Referência
CVE-2026-12776
CVE-2026-12776MEDIUM
Montodel House-Rental-Management index.php houses sql injection
33RISK
open ↗
Referência
CVE-2026-12774
CVE-2026-12774MEDIUM
BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery
33RISK
open ↗
Referência
CVE-2026-12771
CVE-2026-12771LOW
BerriAI litellm M2M JWT user_api_key_auth.py improper authorization
28RISK
open ↗
Referência
CVE-2026-12770
CVE-2026-12770MEDIUM
BerriAI litellm Admin Key key_management_endpoints.py improper authorization
33RISK
open ↗
← previouspage 358 / 739next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.