Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2022-23626
CVE-2022-23626HIGH
Insufficient file checks in m1k1o/blog
41RISK
open ↗
Referência
CVE-2010-1299
CVE-2010-1299—
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RISK
open ↗
Referência✓ VexDay Proof
StreamAudio ChainCast ProxyManager - 'ccpm_0237.dll' Remote Buffer Overflow
CVE-2008-0248—remotewindows
Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to
28RISK
open ↗
Referência
CVE-2026-111955
CVE-2026-111955MEDIUM
WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass
33RISK
open ↗
Referência
CVE-2026-111949
CVE-2026-111949HIGH
miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding
41RISK
open ↗
Referência
CVE-2011-0708
CVE-2011-0708—
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote att
23RISK
open ↗
Referência
CVE-2011-4876
CVE-2011-4876—
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008;
23RISK
open ↗
Referência✓ VexDay Proof
PHP Webquest 2.6 - Get Database Credentials
CVE-2008-0249—webappsphp
PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebque
23RISK
open ↗
Referência
CVE-2009-2891
CVE-2009-2891—
SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗
Referência
CVE-2010-1301
CVE-2010-1301—
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2010-1306
CVE-2010-1306—
Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at
43RISK
open ↗
Referência
CVE-2018-16299
CVE-2018-16299—
The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.
50RISK
open ↗
Referência
CVE-2014-2647
CVE-2014-2647—
Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communicatio
23RISK
open ↗
Referência
CVE-2014-4663
CVE-2014-4663—
TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2018-16299
CVE-2018-16299—
The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.
50RISK
open ↗
Referência
CVE-2016-4535
CVE-2016-4535—
Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to c
23RISK
open ↗
Referência
CVE-2026-109147
CVE-2026-109147HIGH
WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameter
41RISK
open ↗
Referência
CVE-2026-108073
CVE-2026-108073MEDIUM
SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
33RISK
open ↗
Referência✓ VexDay Proof
MTCMS 2.0 - SQL Injection
CVE-2008-0280—webappsphp
SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute a
23RISK
open ↗
Referência
CVE-2010-0279
CVE-2010-0279—
Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitra
23RISK
open ↗
Referência
CVE-2009-3058
CVE-2009-3058—
Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .
23RISK
open ↗
Referência
CVE-2016-4535
CVE-2016-4535—
Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to c
23RISK
open ↗
Referência
CVE-2011-2506
CVE-2011-2506—
setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restric
23RISK
open ↗
Referência
CVE-2010-4279
CVE-2010-4279—
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al
50RISK
open ↗
Referência
CVE-2016-0145
CVE-2016-0145—
The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
35RISK
open ↗
Referência
CVE-2009-3249
CVE-2009-3249—
Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary
23RISK
open ↗
Referência✓ VexDay Proof
osTicket 1.12 - Formula Injection
CVE-2019-14749—webappsphp
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the ex
23RISK
open ↗
Referência
CVE-2010-4279
CVE-2010-4279—
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al
50RISK
open ↗
Referência
CVE-2019-19516
CVE-2019-19516—
Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a pa
23RISK
open ↗
Referência
CVE-2017-3546
CVE-2017-3546—
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChann
23RISK
open ↗
← previouspage 382 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.