Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits

40,452CVEs with public exploitation

24,696lab-tested

All Referência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecent popular risk

26,240 exploits

Referência

CVE-2016-4535

CVE-2016-4535—

Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to c

23RISK

open ↗

Referência

CVE-2011-2506

CVE-2011-2506—

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restric

23RISK

open ↗

Referência

CVE-2010-4279

CVE-2010-4279—

The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al

50RISK

open ↗

Referência

CVE-2016-0145

CVE-2016-0145—

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

35RISK

open ↗

Referência

CVE-2009-3249

CVE-2009-3249—

Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

osTicket 1.12 - Formula Injection

CVE-2019-14749—webappsphp

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the ex

23RISK

open ↗

Referência

CVE-2010-4279

CVE-2010-4279—

The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al

50RISK

open ↗

Referência

CVE-2019-19516

CVE-2019-19516—

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a pa

23RISK

open ↗

Referência

CVE-2017-3546

CVE-2017-3546—

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChann

23RISK

open ↗

Referência

CVE-2017-11346

CVE-2017-11346—

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors invo

35RISK

open ↗

Referência

CVE-2019-19516

CVE-2019-19516—

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a pa

23RISK

open ↗

Referência✓ VexDay Proof

Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion

CVE-2007-0314—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP

23RISK

open ↗

Referência

CVE-2022-2840

CVE-2022-2840—

Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi

28RISK

open ↗

Referência

CVE-2012-1661

CVE-2012-1661—

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh

28RISK

open ↗

Referência

CVE-2026-107128

CVE-2026-107128MEDIUM

Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization

33RISK

open ↗

Referência

CVE-2026-107127

CVE-2026-107127HIGH

Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF

41RISK

open ↗

Referência

CVE-2012-1661

CVE-2012-1661—

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh

28RISK

open ↗

Referência✓ VexDay Proof

FaScript FaPersian Petition - SQL Injection

CVE-2008-0325—webappsphp

SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

FaScript FaPersianHack 1.0 - SQL Injection

CVE-2008-0326—webappsphp

SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência

CVE-2010-1354

CVE-2010-1354—

Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t

43RISK

open ↗

Referência

CVE-2010-4912

CVE-2010-4912—

SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)

CVE-2011-4906—webappsphp

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

23RISK

open ↗

Referência

CVE-2012-1011

CVE-2012-1011—

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions

23RISK

open ↗

Referência

CVE-2019-12279

CVE-2019-12279—

Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). N

23RISK

open ↗

Referência

CVE-2016-1328

CVE-2016-1328—

goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a

23RISK

open ↗

Referência

CVE-2017-6994

CVE-2017-6994—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISK

open ↗

Referência

CVE-2006-3683

CVE-2006-3683—

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute a

23RISK

open ↗

Referência✓ VexDay Proof

AFGB Guestbook 2.2 - 'Htmls' Remote File Inclusion

CVE-2006-5307—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP

23RISK

open ↗

Referência

CVE-2026-108968

CVE-2026-108968MEDIUM

SourceCodester Performance Indicator System sales_history.php sql injection

33RISK

open ↗

Referência✓ VexDay Proof

Cyberfolio 2.0 RC1 - 'av' Remote File Inclusion

CVE-2006-5768—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled,

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.