Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,231cataloged exploits
35,420CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,266GitHub PoC 14,131VulnCheck XDB 8,635Nuclei 4,274Metasploit 3,474✓ verified onlyrecentpopularrisk
22,266 exploits
Referência
CVE-2012-5320
CVE-2012-5320—
Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to
23RISK
open ↗
Referência✓ VexDay Proof
IRSR 0.2 - '_sysSessionPath' Remote File Inclusion
CVE-2006-4237—webappsphp
PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and
23RISK
open ↗
Referência
CVE-2014-9642
CVE-2014-9642—
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows loca
23RISK
open ↗
Referência
CVE-2014-9642
CVE-2014-9642—
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows loca
23RISK
open ↗
Referência
CVE-2012-3294
CVE-2012-3294—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfe
23RISK
open ↗
Referência
CVE-2009-3313
CVE-2009-3313—
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Referência✓ VexDay Proof
Microsoft Windows Server - Universal Code Execution (MS08-067)
CVE-2008-4250CRITICALunder attackremotewindows
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RISK
open ↗
Referência
CVE-2017-14016
CVE-2017-14016—
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati
43RISK
open ↗
Referência✓ VexDay Proof
Microsoft Windows Server 2000/2003 - Code Execution (MS08-067)
CVE-2008-4250CRITICALunder attackremotewindows
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RISK
open ↗
Referência
CVE-2017-14075
CVE-2017-14075—
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must
23RISK
open ↗
Referência
CVE-2017-14075
CVE-2017-14075—
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must
23RISK
open ↗
Referência✓ VexDay Proof
ECShop 2.5.0 - 'order_sn' SQL Injection
CVE-2009-1622—webappsphp
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗
Referência✓ VexDay Proof
WGCC 0.5.6b - 'quiz.php' SQL Injection
CVE-2006-5514—webappsphp
SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attack
23RISK
open ↗
Referência✓ VexDay Proof
PHPMyRing 4.2.1 - 'cherche.php' SQL Injection
CVE-2006-5638—webappsphp
Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute a
23RISK
open ↗
Referência
CVE-2026-4182
CVE-2026-4182CRITICAL
D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow
48RISK
open ↗
Referência
CVE-2026-25873
CVE-2026-25873CRITICAL
OmniGen2-RL Reward Server Unsafe Deserialization RCE
48RISK
open ↗
Referência
CVE-2025-34096
CVE-2025-34096CRITICAL
Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp
63RISK
open ↗
Referência
CVE-2025-34096
CVE-2025-34096CRITICAL
Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp
63RISK
open ↗
Referência✓ VexDay Proof
EfesTECH Haber 5.0 - 'id' SQL Injection
CVE-2007-2662—webappsphp
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id p
23RISK
open ↗
Referência
CVE-2010-10013
CVE-2010-10013CRITICAL
AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE
63RISK
open ↗
Referência
CVE-2010-10013
CVE-2010-10013CRITICAL
AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE
63RISK
open ↗
Referência
CVE-2015-7106
CVE-2015-7106—
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial
23RISK
open ↗
Referência
CVE-2008-3788
CVE-2008-3788—
Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote at
23RISK
open ↗
Referência
CVE-2012-1897
CVE-2012-1897—
Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack
23RISK
open ↗
Referência
CVE-2010-2848
CVE-2010-2848—
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RISK
open ↗
Referência
CVE-2010-2848
CVE-2010-2848—
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RISK
open ↗
Referência
CVE-2014-7951
CVE-2014-7951—
Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att
23RISK
open ↗
Referência
CVE-2014-7951
CVE-2014-7951—
Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att
23RISK
open ↗
Referência
CVE-2012-5319
CVE-2012-5319—
Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows r
23RISK
open ↗
Referência
CVE-2012-5005
CVE-2012-5005—
Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hij
23RISK
open ↗
← previouspage 417 / 743next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.