Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2026-10160
CVE-2026-10160HIGH
TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow
41RISK
open ↗
Referência
CVE-2026-11406
CVE-2026-11406MEDIUM
GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection
33RISK
open ↗
Referência
CVE-2019-25727
CVE-2019-25727CRITICAL
WordPress Plugin ad manager wd 1.0.11 Arbitrary File Download
48RISK
open ↗
Referência
CVE-2015-8427
CVE-2015-8427—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗
Referência
CVE-2026-10159
CVE-2026-10159HIGH
TRENDnet TEW-432BRP formSysLog stack-based overflow
41RISK
open ↗
Referência
CVE-2019-25726
CVE-2019-25726HIGH
All in One Video Downloader 1.2 SQL Injection via admin page-edit
41RISK
open ↗
Referência
CVE-2026-18790
CVE-2026-18790MEDIUM
Systerel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds
33RISK
open ↗
Referência
CVE-2014-2575
CVE-2014-2575—
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor
23RISK
open ↗
Referência
CVE-2014-2575
CVE-2014-2575—
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor
23RISK
open ↗
Referência
CVE-2026-10158
CVE-2026-10158HIGH
TRENDnet TEW-432BRP formPortFw stack-based overflow
41RISK
open ↗
Referência
CVE-2026-15471
CVE-2026-15471MEDIUM
Eleveo Call Recording Software pci_dss_status.jsp improper authorization
33RISK
open ↗
Referência
CVE-2026-15470
CVE-2026-15470MEDIUM
Eleveo Call Recording Software group.jsp improper authorization
33RISK
open ↗
Referência
CVE-2026-10810
CVE-2026-10810MEDIUM
itsourcecode Fees Management System navbar.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-47123
CVE-2026-47123HIGH
FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path
41RISK
open ↗
Referência
CVE-2026-15547
CVE-2026-15547MEDIUM
Shibby Tomato CIFS Mount sub_2D048 os command injection
33RISK
open ↗
Referência
CVE-2025-5640
CVE-2025-5640MEDIUM
PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow
33RISK
open ↗
Referência
CVE-2026-7716
CVE-2026-7716MEDIUM
code-projects Gym Management System In PHP/Windows NT index.php sql injection
33RISK
open ↗
Referência
CVE-2026-7070
CVE-2026-7070MEDIUM
code-projects Inventory Management System Login sql injection
33RISK
open ↗
Referência
CVE-2026-7069
CVE-2026-7069HIGH
D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow
41RISK
open ↗
Referência
CVE-2026-7071
CVE-2026-7071MEDIUM
CodeAstro Online Job Portal user-cvs file information disclosure
33RISK
open ↗
Referência
CVE-2026-29008
CVE-2026-29008HIGH
U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()
41RISK
open ↗
Referência
CVE-2019-6116
CVE-2019-6116—
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to
35RISK
open ↗
Referência
CVE-2014-3138
CVE-2014-3138—
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1
23RISK
open ↗
Referência
CVE-2016-1103
CVE-2016-1103—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RISK
open ↗
Referência
CVE-2026-58144
CVE-2026-58144MEDIUM
Cotonti Siena 0.9.26 Stored XSS via PFS Module ntitle Parameter
33RISK
open ↗
Referência
CVE-2016-1103
CVE-2016-1103—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RISK
open ↗
Referência
CVE-2026-111151
CVE-2026-111151MEDIUM
OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder
33RISK
open ↗
Referência
CVE-2016-1106
CVE-2016-1106—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RISK
open ↗
Referência
CVE-2016-1542
CVE-2016-1542—
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and U
60RISK
open ↗
Referência
CVE-2026-13543
CVE-2026-13543MEDIUM
Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication
33RISK
open ↗
← previouspage 529 / 878next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.