Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,044cataloged exploits
35,296CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,446Referência 22,175GitHub PoC 14,090VulnCheck XDB 8,604Nuclei 4,255Metasploit 3,474✓ verified onlyrecentpopularrisk
22,166 exploits
Referência
CVE-2022-50958
CVE-2022-50958MEDIUM
WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php
33RISK
open ↗
Referência
CVE-2022-50957
CVE-2022-50957MEDIUM
Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS
33RISK
open ↗
Referência
CVE-2022-50956
CVE-2022-50956MEDIUM
WordPress Plugin amministrazione-aperta 3.7.3 Local File Read
33RISK
open ↗
Referência
CVE-2022-50955
CVE-2022-50955MEDIUM
WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery
33RISK
open ↗
Referência
CVE-2022-50954
CVE-2022-50954MEDIUM
WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
33RISK
open ↗
Referência
CVE-2022-50949
CVE-2022-50949MEDIUM
WordPress Plugin Videos sync PDF 1.7.4 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50948
CVE-2022-50948MEDIUM
Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2022-50947
CVE-2022-50947MEDIUM
WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50946
CVE-2022-50946MEDIUM
WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50945
CVE-2022-50945MEDIUM
WordPress 3dady Real-Time Web Stats 1.0 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50943
CVE-2022-50943MEDIUM
Moodle LMS 4.0 Cross-Site Scripting via course search.php
33RISK
open ↗
Referência
CVE-2026-8244
CVE-2026-8244MEDIUM
Industrial Application Software IAS Canias ERP Login RMI improper authentication
33RISK
open ↗
Referência
CVE-2026-8242
CVE-2026-8242MEDIUM
Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
33RISK
open ↗
Referência
CVE-2026-8241
CVE-2026-8241MEDIUM
Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization
33RISK
open ↗
Referência
CVE-2026-8235
CVE-2026-8235MEDIUM
8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection
33RISK
open ↗
Referência
CVE-2026-8229
CVE-2026-8229MEDIUM
Wavlink NU516U1 wireless.cgi WifiBasic os command injection
33RISK
open ↗
Referência
CVE-2026-8228
CVE-2026-8228MEDIUM
Wavlink NU516U1 wireless.cgi advance os command injection
33RISK
open ↗
Referência
CVE-2026-8227
CVE-2026-8227MEDIUM
Wavlink NU516U1 adm.cgi wzdapMesh os command injection
33RISK
open ↗
Referência
CVE-2026-8226
CVE-2026-8226MEDIUM
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service
33RISK
open ↗
Referência
CVE-2026-8225
CVE-2026-8225MEDIUM
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service
33RISK
open ↗
Referência
CVE-2026-8195
CVE-2026-8195MEDIUM
JeecgBoot SVG File CommonController.java cross site scripting
33RISK
open ↗
Referência
CVE-2026-8190
CVE-2026-8190MEDIUM
Wavlink NU516U1 adm.cgi wan os command injection
33RISK
open ↗
Referência
CVE-2026-8209
CVE-2026-8209MEDIUM
Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction
33RISK
open ↗
Referência✓ VexDay Proof
OCE 3121/3122 Printer - 'parser.exe' Denial of Service
CVE-2006-2108—doshardware
parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a l
23RISK
open ↗
Referência
CVE-2026-14322
CVE-2026-14322MEDIUM
Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method
33RISK
open ↗
Referência
CVE-2016-0173
CVE-2016-0173—
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
23RISK
open ↗
Referência
CVE-2016-0173
CVE-2016-0173—
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
23RISK
open ↗
Referência
CVE-2016-0491
CVE-2016-0491—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RISK
open ↗
Referência
CVE-2026-63769
CVE-2026-63769MEDIUM
Huginn 2022.08.18 SSRF via ScenarioImport fetch_url Method
33RISK
open ↗
Referência
CVE-2016-0492
CVE-2016-0492—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RISK
open ↗
← previouspage 359 / 739next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.