Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2010-0724
CVE-2010-0724—
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência
CVE-2010-3419
CVE-2010-3419—
Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta
23RISK
open ↗
Referência
CVE-2010-3426
CVE-2010-3426—
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo
43RISK
open ↗
Referência
CVE-2010-4809
CVE-2010-4809—
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Referência
CVE-2010-5001
CVE-2010-5001—
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
CVE-2010-5017
CVE-2010-5017—
SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
Referência✓ VexDay Proof
Link Trader - 'lnkid' SQL Injection
CVE-2008-6102—webappsphp
SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma
23RISK
open ↗
Referência✓ VexDay Proof
unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities
CVE-2009-1948—webappsphp
Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals i
23RISK
open ↗
Referência
CVE-2009-2715
CVE-2009-2715—
Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a
23RISK
open ↗
Referência
CVE-2010-3426
CVE-2010-3426—
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo
43RISK
open ↗
Referência
CVE-2010-5020
CVE-2010-5020—
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Referência
CVE-2023-39147
CVE-2023-39147—
An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafte
23RISK
open ↗
Referência
CVE-2026-115255
CVE-2026-115255MEDIUM
WP Roster < 2.35 - Unauthenticated Roster Member Deletion
33RISK
open ↗
Referência
CVE-2026-65699
CVE-2026-65699LOW
AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation
28RISK
open ↗
Referência
CVE-2026-115225
CVE-2026-115225MEDIUM
Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup
33RISK
open ↗
Referência
CVE-2012-4746
CVE-2012-4746—
Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote atta
23RISK
open ↗
Referência
CVE-2017-13867
CVE-2017-13867—
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b
23RISK
open ↗
Referência
CVE-2024-6164
CVE-2024-6164CRITICAL
Filter & Grids < 2.8.33 - Unauthenticated LFI
48RISK
open ↗
Referência
CVE-2020-36897
CVE-2020-36897CRITICAL
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution
48RISK
open ↗
Referência
CVE-2013-0292
CVE-2013-0292—
The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender
23RISK
open ↗
Referência
CVE-2026-16735
CVE-2026-16735MEDIUM
release-it conventional-changelog Changelog File index.js writeChangelog os command injection
33RISK
open ↗
Referência
CVE-2024-52544
CVE-2024-52544CRITICAL
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
48RISK
open ↗
Referência✓ VexDay Proof
iyzi Forum 1.0 Beta 3 - SQL Injection
CVE-2006-5054—webappsasp
SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2010-4838
CVE-2010-4838—
SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users
23RISK
open ↗
Referência
CVE-2011-4569
CVE-2011-4569—
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to e
23RISK
open ↗
Referência
CVE-2012-4425
CVE-2012-4425—
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to
23RISK
open ↗
Referência
CVE-2017-6366
CVE-2017-6366—
Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 all
23RISK
open ↗
Referência✓ VexDay Proof
ZZ FlashChat 3.1 - 'help.php' Local File Inclusion
CVE-2007-5620—webappsphp
Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to inclu
23RISK
open ↗
Referência✓ VexDay Proof
ezcms 1.2 - Blind SQL Injection / Authentication Bypass
CVE-2008-2921—webappsphp
SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar
23RISK
open ↗
Referência✓ VexDay Proof
Ovidentia 6.6.5 - 'item' SQL Injection
CVE-2008-4423—webappsphp
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
← previouspage 516 / 878next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.