Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2013-10033
CVE-2013-10033CRITICAL
Kimai 0.9.2 db_restore.php SQL Injection
63RISK
open ↗
Referência
CVE-2013-10033
CVE-2013-10033CRITICAL
Kimai 0.9.2 db_restore.php SQL Injection
63RISK
open ↗
Referência
CVE-2013-10033
CVE-2013-10033CRITICAL
Kimai 0.9.2 db_restore.php SQL Injection
63RISK
open ↗
Referência
CVE-2010-0695
CVE-2010-0695—
Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web
23RISK
open ↗
Referência✓ VexDay Proof
Online Web Building 2.0 - 'id' SQL Injection
CVE-2007-1058—webappsasp
SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitra
23RISK
open ↗
Referência
CVE-2012-1498
CVE-2012-1498—
Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to h
23RISK
open ↗
Referência✓ VexDay Proof
phpBB Minerva Mod 2.0.21 build 238a - SQL Injection
CVE-2007-1555—webappsphp
SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attack
23RISK
open ↗
Referência✓ VexDay Proof
ClanSphere 2007.4 - 'cat_id' SQL Injection
CVE-2007-5061—webappsphp
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrar
23RISK
open ↗
Referência✓ VexDay Proof
sk.log 0.5.3 - 'skin_url' Remote File Inclusion
CVE-2007-5089—webappsphp
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to ex
23RISK
open ↗
Referência✓ VexDay Proof
Quick.CMS.Lite 0.5 - 'id' SQL Injection
CVE-2009-1410—webappsphp
SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2014-9141
CVE-2014-9141—
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which all
23RISK
open ↗
Referência
CVE-2026-90701
CVE-2026-90701MEDIUM
subhajitkhan online-clinic-management-system listdoctor.php sql injection
33RISK
open ↗
Referência
CVE-2026-102248
CVE-2026-102248MEDIUM
Rebuild Login Endpoint login improper authentication
33RISK
open ↗
Referência✓ VexDay Proof
Carbon Communities 2.4 - Multiple Vulnerabilities
CVE-2008-1895—webappsasp
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary
23RISK
open ↗
Referência✓ VexDay Proof
RevokeBB 1.0 RC4 - Blind SQL Injection / Hash Retrieve
CVE-2007-3051—webappsphp
SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to
23RISK
open ↗
Referência
CVE-2022-50919
CVE-2022-50919CRITICAL
Tdarr 2.00.15 - Command Injection
48RISK
open ↗
Referência✓ VexDay Proof
Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion
CVE-2007-5139—webappsphp
PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, a
23RISK
open ↗
Referência
CVE-2008-6101
CVE-2008-6101—
SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary S
23RISK
open ↗
Referência
CVE-2009-1225
CVE-2009-1225—
Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbit
23RISK
open ↗
Referência✓ VexDay Proof
WebFileExplorer 3.1 - 'db.mdb' Database Disclosure
CVE-2009-1495—webappsphp
Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows rem
23RISK
open ↗
Referência✓ VexDay Proof
myPHPNuke < 1.8.8_8rc2 - Cross-Site Scripting / SQL Injection
CVE-2008-4088—webappsphp
SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitra
23RISK
open ↗
Referência
CVE-2008-5736
CVE-2008-5736—
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p
23RISK
open ↗
Referência
CVE-2008-5736
CVE-2008-5736—
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p
23RISK
open ↗
Referência
CVE-2010-1721
CVE-2010-1721—
SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! al
23RISK
open ↗
Referência
CVE-2020-26629
CVE-2020-26629CRITICAL
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
48RISK
open ↗
Referência
CVE-2026-56101
CVE-2026-56101MEDIUM
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
33RISK
open ↗
Referência
CVE-2005-4416
CVE-2005-4416—
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗
Referência
CVE-2026-101264
CVE-2026-101264CRITICAL
Ziroom ZHOME A0101 set_passwd command injection
48RISK
open ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2026-14925
CVE-2026-14925HIGH
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
41RISK
open ↗
← previouspage 461 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.