Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2019-25671
CVE-2019-25671HIGH
VA MAX 8.3.4 Remote Code Execution via changeip.php
41RISK
open ↗
Referência
CVE-2019-25669
CVE-2019-25669HIGH
qdPM 9.1 SQL Injection via search_by_extrafields Parameter
41RISK
open ↗
Referência
CVE-2019-25668
CVE-2019-25668HIGH
News Website Script 2.0.5 SQL Injection via index.php
41RISK
open ↗
Referência
CVE-2019-25667
CVE-2019-25667MEDIUM
TaskInfo 8.2.0.280 Denial of Service Buffer Overflow
33RISK
open ↗
Referência
CVE-2019-25666
CVE-2019-25666MEDIUM
SpotAuditor 3.6.7 Denial of Service Buffer Overflow
33RISK
open ↗
Referência
CVE-2019-25665
CVE-2019-25665MEDIUM
River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25664
CVE-2019-25664HIGH
SuiteCRM 7.10.7 SQL Injection via record Parameter
41RISK
open ↗
Referência
CVE-2019-25663
CVE-2019-25663HIGH
SuiteCRM 7.10.7 SQL Injection via parentTab Parameter
41RISK
open ↗
Referência
CVE-2019-25662
CVE-2019-25662HIGH
ResourceSpace 8.6 SQL Injection via watched_searches.php
41RISK
open ↗
Referência
CVE-2019-25661
CVE-2019-25661MEDIUM
Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25660
CVE-2019-25660MEDIUM
LanHelper 1.74 Denial of Service via Buffer Overflow
33RISK
open ↗
Referência
CVE-2019-25659
CVE-2019-25659MEDIUM
ASPRunner Professional 6.0.766 Local Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25658
CVE-2019-25658MEDIUM
a-Mac Address Change 5.4 Local Buffer Overflow DoS
33RISK
open ↗
Referência
CVE-2019-25657
CVE-2019-25657MEDIUM
AnyBurn 4.3 x86 Denial of Service via Image Conversion
33RISK
open ↗
Referência
CVE-2019-25656
CVE-2019-25656HIGH
R i386 3.5.0 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2026-5596
CVE-2026-5596MEDIUM
griptape-ai griptape SqlTool tool.py sql injection
33RISK
open ↗
Referência
CVE-2018-25256
CVE-2018-25256MEDIUM
IP TOOLS 2.50 Local Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2026-5595
CVE-2026-5595MEDIUM
griptape-ai griptape FileManagerTool save_memory_artifacts_to_disk path traversal
33RISK
open ↗
Referência
CVE-2026-5594
CVE-2026-5594MEDIUM
premAI-io premsql followup.py eval code injection
33RISK
open ↗
Referência
CVE-2026-5587
CVE-2026-5587MEDIUM
wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection
33RISK
open ↗
Referência
CVE-2026-5586
CVE-2026-5586MEDIUM
zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection
33RISK
open ↗
Referência
CVE-2026-5564
CVE-2026-5564MEDIUM
code-projects Simple Laundry System Parameter searchguest.php sql injection
33RISK
open ↗
Referência
CVE-2026-5563
CVE-2026-5563MEDIUM
AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection
33RISK
open ↗
Referência
CVE-2026-5562
CVE-2026-5562MEDIUM
provectus kafka-ui Endpoint testexecutions validateAccess code injection
48RISK
open ↗
Referência
CVE-2026-5561
CVE-2026-5561MEDIUM
Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection
33RISK
open ↗
Referência
CVE-2026-5560
CVE-2026-5560MEDIUM
PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection
33RISK
open ↗
Referência
CVE-2026-6574
CVE-2026-6574MEDIUM
osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials
33RISK
open ↗
Referência
CVE-2026-6562
CVE-2026-6562MEDIUM
dameng100 muucmf index.html getListByPage sql injection
33RISK
open ↗
Referência
CVE-2026-6561
CVE-2026-6561MEDIUM
EyouCMS Index.php edit_adminlogo unrestricted upload
33RISK
open ↗
Referência
CVE-2026-6560
CVE-2026-6560HIGH
H3C Magic B0 aspForm Edit_BasicSSID buffer overflow
41RISK
open ↗
← previouspage 475 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.