Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2026-58372
SeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys
41RISK
open ↗Referência
CVE-2026-34100
Guardian Language-System SQL Injection via id Parameter in media.php
41RISK
open ↗Referência
CVE-2026-14695
SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection
33RISK
open ↗Referência
CVE-2026-14694
SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection
33RISK
open ↗Referência
CVE-2026-13572
itsourcecode Hospital Management System insertbillingrecord.php sql injection
33RISK
open ↗Referência
CVE-2010-2135
Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execu
23RISK
open ↗Referência
CVE-2010-2141
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗Referência
CVE-2026-14693
SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization
33RISK
open ↗Referência
CVE-2026-56789
RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count
41RISK
open ↗Referência
CVE-2026-15672
itsourcecode Electronic Judging System add_judges.php sql injection
33RISK
open ↗Referência
CVE-2026-10298
ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference
33RISK
open ↗Referência
CVE-2026-56787
RTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message
33RISK
open ↗Referência
CVE-2021-47931
Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication
33RISK
open ↗Referência
CVE-2022-1175
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor
63RISK
open ↗Referência
CVE-2026-15669
louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection
33RISK
open ↗Referência
CVE-2016-6256
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML
23RISK
open ↗Referência
CVE-2010-2846
Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al
23RISK
open ↗Referência
CVE-2016-6256
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML
23RISK
open ↗Referência
CVE-2026-10198
Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference
33RISK
open ↗Referência
CVE-2018-16517
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a deni
23RISK
open ↗Referência
CVE-2020-37250
TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation
41RISK
open ↗Referência
CVE-2010-2847
Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allo
23RISK
open ↗Referência
CVE-2026-10197
Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.