Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2023-54363
CVE-2023-54363MEDIUM
Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters
33RISK
open ↗
Referência
CVE-2023-54362
CVE-2023-54362MEDIUM
Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
33RISK
open ↗
Referência
CVE-2023-54361
CVE-2023-54361MEDIUM
Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword
33RISK
open ↗
Referência
CVE-2018-25318
CVE-2018-25318CRITICAL
Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change
48RISK
open ↗
Referência
CVE-2018-25317
CVE-2018-25317CRITICAL
Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change
48RISK
open ↗
Referência
CVE-2018-25316
CVE-2018-25316CRITICAL
Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change
48RISK
open ↗
Referência
CVE-2018-25315
CVE-2018-25315HIGH
Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name
41RISK
open ↗
Referência
CVE-2018-25314
CVE-2018-25314HIGH
Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow
41RISK
open ↗
Referência
CVE-2018-25313
CVE-2018-25313MEDIUM
SysGauge 4.5.18 Local Denial of Service via Proxy Configuration
33RISK
open ↗
Referência
CVE-2018-25304
CVE-2018-25304HIGH
Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2026-6014
CVE-2026-6014HIGH
D-Link DIR-513 POST Request formAdvanceSetup buffer overflow
41RISK
open ↗
Referência
CVE-2026-6013
CVE-2026-6013HIGH
D-Link DIR-513 POST Request formSetRoute buffer overflow
41RISK
open ↗
Referência
CVE-2026-6012
CVE-2026-6012HIGH
D-Link DIR-513 POST Request formSetPassword buffer overflow
41RISK
open ↗
Referência
CVE-2026-6011
CVE-2026-6011MEDIUM
OpenClaw assertPublicHostname web-fetch.ts server-side request forgery
33RISK
open ↗
Referência
CVE-2015-1058
CVE-2015-1058—
Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web scr
23RISK
open ↗
Referência
CVE-2026-5659
CVE-2026-5659MEDIUM
pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization
33RISK
open ↗
Referência
CVE-2026-5650
CVE-2026-5650MEDIUM
code-projects Online Application System for Admission oas.sql sensitive information
33RISK
open ↗
Referência
CVE-2026-5649
CVE-2026-5649MEDIUM
code-projects Online Application System for Admission Endpoint admsnform.php sql injection
33RISK
open ↗
Referência
CVE-2026-5648
CVE-2026-5648MEDIUM
code-projects Simple Laundry System Parameter userfinishregister.php sql injection
33RISK
open ↗
Referência
CVE-2026-5647
CVE-2026-5647MEDIUM
code-projects Online Shoe Store Add Product admin_feature.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5646
CVE-2026-5646MEDIUM
code-projects Easy Blog Site login.php sql injection
33RISK
open ↗
Referência
CVE-2026-5645
CVE-2026-5645MEDIUM
projectworlds Car Rental System Parameter pay.php sql injection
33RISK
open ↗
Referência
CVE-2026-5644
CVE-2026-5644MEDIUM
Cyber-III Student-Management-System batch-notice.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5643
CVE-2026-5643MEDIUM
Cyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-14733
CVE-2026-14733MEDIUM
SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection
33RISK
open ↗
Referência
CVE-2026-66749
CVE-2026-66749HIGH
Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup
41RISK
open ↗
Referência
CVE-2026-5642
CVE-2026-5642MEDIUM
Cyber-III Student-Management-System HTTP POST Request update.php improper authorization
33RISK
open ↗
Referência
CVE-2026-5641
CVE-2026-5641MEDIUM
PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection
33RISK
open ↗
Referência
CVE-2026-5640
CVE-2026-5640MEDIUM
PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection
33RISK
open ↗
Referência
CVE-2026-5639
CVE-2026-5639MEDIUM
PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection
33RISK
open ↗
← previouspage 473 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.