Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2026-41466
CVE-2026-41466MEDIUM
ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText()
33RISK
open ↗
Referência
CVE-2026-15526
CVE-2026-15526MEDIUM
augmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal
33RISK
open ↗
Referência
CVE-2026-15478
CVE-2026-15478MEDIUM
IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection
33RISK
open ↗
Referência
CVE-2026-5741
CVE-2026-5741MEDIUM
suvarchal docker-mcp-server HTTP index.ts pull_image os command injection
33RISK
open ↗
Referência
CVE-2018-25287
CVE-2018-25287MEDIUM
Drive Power Manager 1.10 Denial of Service via Name Field
33RISK
open ↗
Referência
CVE-2026-5802
CVE-2026-5802MEDIUM
idachev mcp-javadc HTTP os command injection
33RISK
open ↗
Referência
CVE-2026-4338
CVE-2026-4338HIGH
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
41RISK
open ↗
Referência
CVE-2018-25286
CVE-2018-25286MEDIUM
Easy PhotoResQ 1.0 Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2018-25285
CVE-2018-25285MEDIUM
Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow
33RISK
open ↗
Referência
CVE-2018-25284
CVE-2018-25284MEDIUM
HD Tune Pro 5.70 Denial of Service via Options Dialog
33RISK
open ↗
Referência
CVE-2018-25283
CVE-2018-25283HIGH
iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter
41RISK
open ↗
Referência
CVE-2018-25282
CVE-2018-25282MEDIUM
Nmap 7.70 Denial of Service via XML Entity Expansion
33RISK
open ↗
Referência
CVE-2018-25281
CVE-2018-25281MEDIUM
iCash 7.6.5 Denial of Service via Connect to Server
33RISK
open ↗
Referência
CVE-2018-25280
CVE-2018-25280MEDIUM
Infiltrator Network Security Scanner 4.6 Denial of Service
33RISK
open ↗
Referência
CVE-2018-25279
CVE-2018-25279MEDIUM
jiNa OCR Image to Text 1.0 Denial of Service via PNG
33RISK
open ↗
Referência
CVE-2018-25278
CVE-2018-25278MEDIUM
PicaJet FX 2.6.5 Denial of Service via Registration Fields
33RISK
open ↗
Referência
CVE-2026-5806
CVE-2026-5806MEDIUM
code-projects Easy Blog Site update.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5805
CVE-2026-5805MEDIUM
code-projects Easy Blog Site contact_us.php sql injection
33RISK
open ↗
Referência
CVE-2026-5803
CVE-2026-5803MEDIUM
bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery
33RISK
open ↗
Referência
CVE-2010-0723
CVE-2010-0723—
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2014-3978
CVE-2014-3978—
SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHunder attack
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RISK
open ↗
Referência
CVE-2021-45783
CVE-2021-45783—
Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to
23RISK
open ↗
Referência
CVE-2026-5611
CVE-2026-5611HIGH
Belkin F9K1015 formCrossBandSwitch stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5610
CVE-2026-5610HIGH
Belkin F9K1015 formWISP5G stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5609
CVE-2026-5609HIGH
Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5608
CVE-2026-5608HIGH
Belkin F9K1122 formWlanSetup stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5607
CVE-2026-5607MEDIUM
imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
33RISK
open ↗
Referência
CVE-2019-25692
CVE-2019-25692HIGH
Kados R10 GreenBee SQL Injection via id_to_modify Parameter
41RISK
open ↗
Referência
CVE-2019-25690
CVE-2019-25690HIGH
Kados R10 GreenBee SQL Injection via mng_profile_id
41RISK
open ↗
← previouspage 522 / 878next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.