Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,620cataloged exploits
35,647CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,429GitHub PoC 14,270VulnCheck XDB 8,693Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
22,407 exploits
Referência
CVE-2026-12807
CVE-2026-12807MEDIUM
Edimax BR-6478AC V2 POST Request setWAN command injection
33RISK
open ↗
Referência
CVE-2019-25763
CVE-2019-25763CRITICAL
WordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass
48RISK
open ↗
Referência
CVE-2019-25749
CVE-2019-25749HIGH
Joomla J-CruisePortal 6.0.4 SQL Injection via cruises
41RISK
open ↗
Referência
CVE-2019-25748
CVE-2019-25748HIGH
Joomla JHotelReservation 6.0.7 SQL Injection via search-hotels
41RISK
open ↗
Referência
CVE-2017-20282
CVE-2017-20282HIGH
Joomla! Component jCart for OpenCart 2.0 SQL Injection
41RISK
open ↗
Referência
CVE-2017-20281
CVE-2017-20281HIGH
Joomla! Component Extra Search 2.2.8 SQL Injection
41RISK
open ↗
Referência
CVE-2017-20280
CVE-2017-20280HIGH
Joomla Component Myportfolio 3.0.2 SQL Injection via pid Parameter
41RISK
open ↗
Referência
CVE-2017-20279
CVE-2017-20279HIGH
Joomla Payage 2.05 SQL Injection via aid Parameter
41RISK
open ↗
Referência
CVE-2017-20278
CVE-2017-20278HIGH
Joomla JoomRecipe 1.0.3 SQL Injection via category parameter
41RISK
open ↗
Referência
CVE-2019-12181
CVE-2019-12181—
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
50RISK
open ↗
Referência
CVE-2016-20066
CVE-2016-20066MEDIUM
WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2026-24066
CVE-2026-24066HIGH
Slate Digital Connect macOS XPC certificate validation privilege escalation
41RISK
open ↗
Referência
CVE-2026-9067
CVE-2026-9067CRITICAL
Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
48RISK
open ↗
Referência
CVE-2017-20249
CVE-2017-20249HIGH
WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection
41RISK
open ↗
Referência
CVE-2017-20248
CVE-2017-20248HIGH
WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download
41RISK
open ↗
Referência
CVE-2026-11558
CVE-2026-11558MEDIUM
CodeAstro Payroll System home_salary.php sql injection
33RISK
open ↗
Referência
CVE-2026-11557
CVE-2026-11557HIGH
Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow
41RISK
open ↗
Referência
CVE-2026-39908
CVE-2026-39908HIGH
OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source
41RISK
open ↗
Referência
CVE-2026-11533
CVE-2026-11533MEDIUM
imvks786 student_management_system Student Deletion Endpoint see.php improper authorization
33RISK
open ↗
Referência
CVE-2026-11532
CVE-2026-11532MEDIUM
imvks786 student_management_system Student Record add.php access control
33RISK
open ↗
Referência
CVE-2026-11506
CVE-2026-11506MEDIUM
CodeAstro Leave Management System search_staff_for_deletion.php sql injection
33RISK
open ↗
Referência
CVE-2026-11504
CVE-2026-11504HIGH
Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow
41RISK
open ↗
Referência
CVE-2019-12372
CVE-2019-12372—
Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.
23RISK
open ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHunder attack
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISK
open ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHunder attack
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISK
open ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHunder attack
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISK
open ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHunder attack
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISK
open ↗
Referência
CVE-2026-14549
CVE-2026-14549MEDIUM
Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and Deletion
33RISK
open ↗
Referência
CVE-2026-14548
CVE-2026-14548MEDIUM
Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update
33RISK
open ↗
Referência
CVE-2026-73030
CVE-2026-73030HIGH
unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape
41RISK
open ↗
← previouspage 495 / 747next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.