Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,240 exploits
Referência
CVE-2026-41950
CVE-2026-41950MEDIUM
Dify < 1.14.0 Authorization Bypass via File UUID
33RISK
open ↗
Referência
CVE-2026-41950
CVE-2026-41950MEDIUM
Dify < 1.14.0 Authorization Bypass via File UUID
33RISK
open ↗
Referência
CVE-2026-7857
CVE-2026-7857HIGH
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow
41RISK
open ↗
Referência
CVE-2026-7856
CVE-2026-7856HIGH
D-Link DI-8100 Web Management url_member.asp buffer overflow
41RISK
open ↗
Referência
CVE-2026-7855
CVE-2026-7855HIGH
D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow
41RISK
open ↗
Referência
CVE-2026-6115
CVE-2026-6115CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection
48RISK
open ↗
Referência
CVE-2025-9484
CVE-2025-9484MEDIUM
Missing Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-1092
CVE-2026-1092HIGH
Improper Validation of Specified Quantity in Input in GitLab
41RISK
open ↗
Referência
CVE-2026-1101
CVE-2026-1101MEDIUM
Improper Validation of Specified Quantity in Input in GitLab
33RISK
open ↗
Referência
CVE-2026-1516
CVE-2026-1516MEDIUM
Improper Control of Generation of Code ('Code Injection') in GitLab
33RISK
open ↗
Referência
CVE-2026-1752
CVE-2026-1752MEDIUM
Incorrect Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-2104
CVE-2026-2104MEDIUM
Authorization Bypass Through User-Controlled Key in GitLab
33RISK
open ↗
Referência
CVE-2026-5543
CVE-2026-5543MEDIUM
PHPGurukul User Registration & Login and User Management System yesterday-reg-users.php sql injection
33RISK
open ↗
Referência
CVE-2026-5542
CVE-2026-5542MEDIUM
code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5557
CVE-2026-5557MEDIUM
badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass
33RISK
open ↗
Referência
CVE-2026-5556
CVE-2026-5556MEDIUM
badlogic pi-mono loader.ts discoverAndLoadExtensions code injection
33RISK
open ↗
Referência
CVE-2026-5555
CVE-2026-5555MEDIUM
code-projects Concert Ticket Reservation System Parameter login.php sql injection
33RISK
open ↗
Referência
CVE-2026-5554
CVE-2026-5554MEDIUM
code-projects Concert Ticket Reservation System Parameter process_search.php sql injection
33RISK
open ↗
Referência
CVE-2026-5553
CVE-2026-5553MEDIUM
itsourcecode Online Cellphone System Parameter available.php sql injection
33RISK
open ↗
Referência
CVE-2026-5541
CVE-2026-5541MEDIUM
code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5552
CVE-2026-5552MEDIUM
PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection
33RISK
open ↗
Referência
CVE-2026-5551
CVE-2026-5551MEDIUM
itsourcecode Free Hotel Reservation System Parameter login.php sql injection
33RISK
open ↗
Referência
CVE-2026-5549
CVE-2026-5549MEDIUM
Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key
33RISK
open ↗
Referência
CVE-2026-5546
CVE-2026-5546MEDIUM
Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted upload
33RISK
open ↗
Referência
CVE-2026-5544
CVE-2026-5544HIGH
UTT HiPER 1250GW formRemoteControl stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5540
CVE-2026-5540MEDIUM
code-projects Simple Laundry System Parameter modifymember.php sql injection
33RISK
open ↗
Referência
CVE-2026-5539
CVE-2026-5539MEDIUM
code-projects Simple Laundry System Parameter modifymember.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5537
CVE-2026-5537MEDIUM
halex CourseSEL HTTP GET Parameter IndexController.class.php check_sel sql injection
33RISK
open ↗
Referência
CVE-2026-5535
CVE-2026-5535MEDIUM
FedML-AI FedML MQTT Message FileUtils.java path traversal
33RISK
open ↗
Referência
CVE-2026-5532
CVE-2026-5532MEDIUM
ScrapeGraphAI scrapegraph-ai GenerateCodeNode generate_code_node.py create_sandbox_and_execute os command injection
33RISK
open ↗
← previouspage 477 / 875next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.