Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2026-15526
augmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal
33RISK
open ↗Referência
CVE-2026-15478
IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection
33RISK
open ↗Referência
CVE-2026-5741
suvarchal docker-mcp-server HTTP index.ts pull_image os command injection
33RISK
open ↗Referência
CVE-2026-4338
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
41RISK
open ↗Referência
CVE-2018-25285
Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow
33RISK
open ↗Referência
CVE-2026-5803
bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery
33RISK
open ↗Referência
CVE-2010-0723
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗Referência
CVE-2016-20059
IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation
41RISK
open ↗Referência
CVE-2016-20058
Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation
41RISK
open ↗Referência
CVE-2016-20057
NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.