Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,151cataloged exploits
35,370CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,233GitHub PoC 14,119VulnCheck XDB 8,617Nuclei 4,257Metasploit 3,474✓ verified onlyrecentpopularrisk
22,233 exploits
Referência
CVE-2010-0319
CVE-2010-0319—
Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary
23RISK
open ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RISK
open ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RISK
open ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RISK
open ↗
Referência
CVE-2009-2882
CVE-2009-2882—
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web scr
23RISK
open ↗
Referência
CVE-2009-3225
CVE-2009-3225—
Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Af
23RISK
open ↗
Referência
CVE-2010-2844
CVE-2010-2844—
Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject
23RISK
open ↗
Referência
CVE-2010-4909
CVE-2010-4909—
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary w
23RISK
open ↗
Referência
CVE-2009-2391
CVE-2009-2391—
Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers
23RISK
open ↗
Referência
CVE-2013-6852
CVE-2013-6852—
Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack
23RISK
open ↗
Referência✓ VexDay Proof
BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection
CVE-2008-0679—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web scr
23RISK
open ↗
Referência
CVE-2017-0284
CVE-2017-0284—
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT
23RISK
open ↗
Referência
CVE-2009-3530
CVE-2009-3530—
Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to injec
23RISK
open ↗
Referência
CVE-2009-4869
CVE-2009-4869—
Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrar
23RISK
open ↗
Referência
CVE-2019-13977
CVE-2019-13977—
index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=crea
23RISK
open ↗
Referência
CVE-2010-4877
CVE-2010-4877—
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web sc
23RISK
open ↗
Referência
CVE-2014-9322
CVE-2014-9322—
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack S
23RISK
open ↗
Referência✓ VexDay Proof
mm chat 1.5 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2973—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbi
23RISK
open ↗
Referência✓ VexDay Proof
phpdaily - SQL Injection / Cross-Site Scripting / Local File Download
CVE-2008-4756—webappsphp
Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary
23RISK
open ↗
Referência✓ VexDay Proof
Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting
CVE-2008-6700—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitr
23RISK
open ↗
Referência✓ VexDay Proof
zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting
CVE-2008-6915—webappsphp
Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to
23RISK
open ↗
Referência
CVE-2009-2437
CVE-2009-2437—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject a
23RISK
open ↗
Referência
CVE-2009-2884
CVE-2009-2884—
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attacker
23RISK
open ↗
Referência
CVE-2021-47956
CVE-2021-47956HIGH
EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname
41RISK
open ↗
Referência
CVE-2020-37242
CVE-2020-37242HIGH
WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx
41RISK
open ↗
Referência
CVE-2009-3187
CVE-2009-3187—
Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arb
23RISK
open ↗
Referência
CVE-2009-3189
CVE-2009-3189—
Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbit
23RISK
open ↗
Referência
CVE-2009-4685
CVE-2009-4685—
Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inje
23RISK
open ↗
Referência
CVE-2009-4684
CVE-2009-4684—
Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script
23RISK
open ↗
Referência
CVE-2009-4464
CVE-2009-4464—
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to
23RISK
open ↗
← previouspage 397 / 742next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.