Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,620cataloged exploits
35,647CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,429GitHub PoC 14,270VulnCheck XDB 8,693Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
22,407 exploits
Referência
CVE-2026-9469
CVE-2026-9469MEDIUM
yashpokharna2555 StudentManagementSystem success.php sql injection
33RISK
open ↗
Referência
CVE-2026-9467
CVE-2026-9467MEDIUM
debugmcp mcp-debugger server.ts handleGetSourceContext path traversal
33RISK
open ↗
Referência
CVE-2026-9466
CVE-2026-9466MEDIUM
Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery
33RISK
open ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
Referência
CVE-2026-8349
CVE-2026-8349MEDIUM
omec-project amf NGAP Message memory corruption
33RISK
open ↗
Referência
CVE-2026-8291
CVE-2026-8291MEDIUM
Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
33RISK
open ↗
Referência
CVE-2026-9361
CVE-2026-9361MEDIUM
Edimax EW-7438RPn POST Request formAccep formAccept command injection
33RISK
open ↗
Referência
CVE-2026-8253
CVE-2026-8253MEDIUM
Devs Palace ERP Online purchase_save cross site scripting
33RISK
open ↗
Referência
CVE-2026-8252
CVE-2026-8252MEDIUM
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
33RISK
open ↗
Referência
CVE-2026-8248
CVE-2026-8248MEDIUM
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
33RISK
open ↗
Referência
CVE-2021-47953
CVE-2021-47953MEDIUM
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
33RISK
open ↗
Referência
CVE-2021-47951
CVE-2021-47951MEDIUM
WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
33RISK
open ↗
Referência
CVE-2021-47950
CVE-2021-47950MEDIUM
Advanced Guestbook 2.4.4 Persistent XSS via Smilies
33RISK
open ↗
Referência
CVE-2021-47949
CVE-2021-47949HIGH
CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
41RISK
open ↗
Referência
CVE-2021-47948
CVE-2021-47948MEDIUM
WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text
33RISK
open ↗
Referência
CVE-2021-47947
CVE-2021-47947MEDIUM
Projectsend r1295 Stored Cross-Site Scripting via files-edit.php
33RISK
open ↗
Referência
CVE-2021-47946
CVE-2021-47946MEDIUM
OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery
33RISK
open ↗
Referência
CVE-2021-47945
CVE-2021-47945HIGH
Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation
41RISK
open ↗
Referência
CVE-2021-47938
CVE-2021-47938HIGH
ImpressCMS 1.4.2 Remote Code Execution via Autotasks
41RISK
open ↗
Referência
CVE-2021-47937
CVE-2021-47937HIGH
e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload
41RISK
open ↗
Referência
CVE-2026-9356
CVE-2026-9356MEDIUM
SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
33RISK
open ↗
Referência
CVE-2026-9350
CVE-2026-9350MEDIUM
NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
33RISK
open ↗
Referência
CVE-2026-9349
CVE-2026-9349MEDIUM
calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure
33RISK
open ↗
Referência
CVE-2018-25358
CVE-2018-25358HIGH
D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
41RISK
open ↗
Referência
CVE-2018-25356
CVE-2018-25356HIGH
SIPp 3.6 Local Buffer Overflow via Command-line Arguments
41RISK
open ↗
Referência
CVE-2018-25355
CVE-2018-25355HIGH
Audiograbber 1.83 Local Buffer Overflow via SEH
41RISK
open ↗
Referência
CVE-2018-25353
CVE-2018-25353HIGH
Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
41RISK
open ↗
Referência
CVE-2018-25352
CVE-2018-25352HIGH
WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
41RISK
open ↗
← previouspage 496 / 747next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.