Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2022-50964
CVE-2022-50964MEDIUM
uBidAuction 2.0.1 myAuctions loose Reflected XSS
33RISK
open ↗
Referência
CVE-2022-50964
CVE-2022-50964MEDIUM
uBidAuction 2.0.1 myAuctions loose Reflected XSS
33RISK
open ↗
Referência
CVE-2022-50963
CVE-2022-50963MEDIUM
uBidAuction 2.0.1 myAuctions active Reflected XSS
33RISK
open ↗
Referência
CVE-2022-50963
CVE-2022-50963MEDIUM
uBidAuction 2.0.1 myAuctions active Reflected XSS
33RISK
open ↗
Referência
CVE-2022-50960
CVE-2022-50960MEDIUM
WordPress International Sms Contact Form 7 Integration 1.2 XSS
33RISK
open ↗
Referência
CVE-2022-50959
CVE-2022-50959MEDIUM
WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php
33RISK
open ↗
Referência
CVE-2022-50958
CVE-2022-50958MEDIUM
WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php
33RISK
open ↗
Referência
CVE-2022-50957
CVE-2022-50957MEDIUM
Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS
33RISK
open ↗
Referência
CVE-2022-50956
CVE-2022-50956MEDIUM
WordPress Plugin amministrazione-aperta 3.7.3 Local File Read
33RISK
open ↗
Referência
CVE-2022-50955
CVE-2022-50955MEDIUM
WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery
33RISK
open ↗
Referência
CVE-2022-50954
CVE-2022-50954MEDIUM
WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
33RISK
open ↗
Referência
CVE-2022-50949
CVE-2022-50949MEDIUM
WordPress Plugin Videos sync PDF 1.7.4 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50948
CVE-2022-50948MEDIUM
Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2022-50947
CVE-2022-50947MEDIUM
WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50946
CVE-2022-50946MEDIUM
WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS
33RISK
open ↗
Referência
CVE-2022-50945
CVE-2022-50945MEDIUM
WordPress 3dady Real-Time Web Stats 1.0 Stored XSS
33RISK
open ↗
Referência
CVE-2015-7246
CVE-2015-7246—
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RISK
open ↗
Referência
CVE-2013-5758
CVE-2013-5758—
cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by
28RISK
open ↗
Referência
CVE-2017-17628
CVE-2017-17628—
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
23RISK
open ↗
Referência
CVE-2022-50943
CVE-2022-50943MEDIUM
Moodle LMS 4.0 Cross-Site Scripting via course search.php
33RISK
open ↗
Referência
CVE-2026-8244
CVE-2026-8244MEDIUM
Industrial Application Software IAS Canias ERP Login RMI improper authentication
33RISK
open ↗
Referência
CVE-2026-8242
CVE-2026-8242MEDIUM
Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
33RISK
open ↗
Referência
CVE-2026-8241
CVE-2026-8241MEDIUM
Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization
33RISK
open ↗
Referência
CVE-2026-108612
CVE-2026-108612MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
33RISK
open ↗
Referência
CVE-2015-6589
CVE-2015-6589—
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before
28RISK
open ↗
Referência
CVE-2026-8235
CVE-2026-8235MEDIUM
8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection
33RISK
open ↗
Referência
CVE-2026-8229
CVE-2026-8229MEDIUM
Wavlink NU516U1 wireless.cgi WifiBasic os command injection
33RISK
open ↗
Referência
CVE-2026-8228
CVE-2026-8228MEDIUM
Wavlink NU516U1 wireless.cgi advance os command injection
33RISK
open ↗
Referência
CVE-2026-8227
CVE-2026-8227MEDIUM
Wavlink NU516U1 adm.cgi wzdapMesh os command injection
33RISK
open ↗
Referência
CVE-2026-8226
CVE-2026-8226MEDIUM
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service
33RISK
open ↗
← previouspage 537 / 878next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.