Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2026-8741
EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition
28RISK
open ↗Referência
CVE-2026-8740
Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine
33RISK
open ↗Referência
CVE-2026-8739
Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key
33RISK
open ↗Referência
CVE-2026-16229
itsourcecode Courier Management System index.php cross site scripting
33RISK
open ↗Referência
CVE-2017-8462
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RISK
open ↗Referência
CVE-2026-15701
Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow
48RISK
open ↗Referência
CVE-2019-2215
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗Referência
CVE-2017-14712
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
23RISK
open ↗Referência
CVE-2014-0749
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso
28RISK
open ↗Referência
CVE-2026-43884
WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()
41RISK
open ↗Referência
CVE-2026-42613
Grav: Privilege Escalation via Missing Server-Side Validation of groups/access
48RISK
open ↗Referência
CVE-2026-7814
pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer
33RISK
open ↗Referência
CVE-2026-8290
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
33RISK
open ↗Referência
CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path traversal
33RISK
open ↗Referência
CVE-2026-8271
D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection
33RISK
open ↗Referência
CVE-2014-0749
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso
28RISK
open ↗Referência
CVE-2026-8305
OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication
33RISK
open ↗Referência
CVE-2018-17391
SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.
23RISK
open ↗Referência
CVE-2017-10204
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version
23RISK
open ↗Referência
CVE-2020-16040
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially explo
60RISK
open ↗Referência
CVE-2020-16040
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially explo
60RISK
open ↗Referência
CVE-2017-13209
In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.