Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2010-4902
CVE-2010-4902—
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke
23RISK
open ↗
Referência
CVE-2010-4503
CVE-2010-4503—
SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2009-3322
CVE-2009-3322—
The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood o
23RISK
open ↗
Referência
CVE-2026-101860
CVE-2026-101860HIGH
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
41RISK
open ↗
Referência
CVE-2010-3904
CVE-2010-3904HIGHunder attack
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the
91RISK
open ↗
Referência
CVE-2020-26629
CVE-2020-26629CRITICAL
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
48RISK
open ↗
Referência
CVE-2026-56101
CVE-2026-56101MEDIUM
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
33RISK
open ↗
Referência
CVE-2005-4416
CVE-2005-4416—
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗
Referência
CVE-2026-101264
CVE-2026-101264CRITICAL
Ziroom ZHOME A0101 set_passwd command injection
48RISK
open ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2026-14925
CVE-2026-14925HIGH
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
41RISK
open ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2014-2043
CVE-2014-2043—
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re
23RISK
open ↗
Referência✓ VexDay Proof
SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion
CVE-2006-4065—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers
23RISK
open ↗
Referência
CVE-2026-86512
CVE-2026-86512MEDIUM
java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control
33RISK
open ↗
Referência✓ VexDay Proof
Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak
CVE-2007-5225—localsolaris
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co
23RISK
open ↗
Referência
CVE-2026-18601
CVE-2026-18601CRITICAL
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
48RISK
open ↗
Referência
CVE-2010-4145
CVE-2010-4145—
Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remo
23RISK
open ↗
Referência
CVE-2026-86299
CVE-2026-86299CRITICAL
Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
48RISK
open ↗
Referência
CVE-2026-86239
CVE-2026-86239MEDIUM
liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
33RISK
open ↗
Referência
CVE-2007-5181
CVE-2007-5181—
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL comma
23RISK
open ↗
Referência
CVE-2026-101144
CVE-2026-101144MEDIUM
Eleveo Call Recording Software Query Builder searchAction.do access control
33RISK
open ↗
Referência✓ VexDay Proof
Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)
CVE-2008-0324—doswindows
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash)
23RISK
open ↗
Referência
CVE-2008-0429
CVE-2008-0429—
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut
23RISK
open ↗
Referência✓ VexDay Proof
PHPVID 1.1 - Cross-Site Scripting / SQL Injection
CVE-2008-4157—webappsphp
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2020-37052
CVE-2020-37052CRITICAL
AirControl 1.4.2 - PreAuth Remote Code Execution
48RISK
open ↗
Referência
CVE-2026-101141
CVE-2026-101141MEDIUM
Eleveo Call Recording Software Play Audio audio.jsp cross site scripting
33RISK
open ↗
Referência✓ VexDay Proof
PHP Site Lock 2.0 - Insecure Cookie Handling
CVE-2009-1587—webappsphp
index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by sett
23RISK
open ↗
Referência✓ VexDay Proof
Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload
CVE-2009-1609—webappsphp
Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute ar
23RISK
open ↗
Referência
CVE-2009-4576
CVE-2009-4576—
SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute
23RISK
open ↗
← previouspage 474 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.