Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
22,523 exploits
Referência
CVE-2019-0232
CVE-2019-0232—
When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0
60RISK
open ↗
Referência
CVE-2026-45585
CVE-2026-45585MEDIUM
Windows BitLocker Security Feature Bypass Vulnerability
33RISK
open ↗
Referência
CVE-2026-41470
CVE-2026-41470HIGH
LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token
41RISK
open ↗
Referência
CVE-2018-25405
CVE-2018-25405HIGH
eNdonesia Portal 8.7 SQL Injection via mod.php
41RISK
open ↗
Referência
CVE-2026-10115
CVE-2026-10115MEDIUM
Open5GS Shared NF-profile nnrf-handler.c denial of service
33RISK
open ↗
Referência
CVE-2026-10114
CVE-2026-10114MEDIUM
Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write
33RISK
open ↗
Referência
CVE-2026-10113
CVE-2026-10113MEDIUM
Open5GS Shared NF-profile nnrf-handler.c denial of service
33RISK
open ↗
Referência
CVE-2026-10112
CVE-2026-10112MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting
33RISK
open ↗
Referência
CVE-2026-10111
CVE-2026-10111MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
33RISK
open ↗
Referência
CVE-2026-10110
CVE-2026-10110MEDIUM
code-projects Student Details Management System index.php sql injection
33RISK
open ↗
Referência
CVE-2026-44420
CVE-2026-44420HIGH
FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
41RISK
open ↗
Referência
CVE-2018-25398
CVE-2018-25398HIGH
The Open ISES Project 3.30A SQL Injection via main.php
41RISK
open ↗
Referência
CVE-2018-25397
CVE-2018-25397MEDIUM
PHP-SHOP 1.0 Cross-Site Request Forgery via users.php
33RISK
open ↗
Referência
CVE-2018-25396
CVE-2018-25396HIGH
Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
41RISK
open ↗
Referência
CVE-2018-25395
CVE-2018-25395HIGH
Kados R10 GreenBee SQL Injection via update_feature.php
41RISK
open ↗
Referência
CVE-2019-0539
CVE-2019-0539—
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RISK
open ↗
Referência
CVE-2019-0539
CVE-2019-0539—
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RISK
open ↗
Referência
CVE-2026-32848
CVE-2026-32848MEDIUM
NetBSD cryptodev Race Condition Double-Free via cryptodev_op()
33RISK
open ↗
Referência
CVE-2026-32849
CVE-2026-32849MEDIUM
NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c
33RISK
open ↗
Referência
CVE-2018-25391
CVE-2018-25391HIGH
HaPe PKH 1.1 Missing Authorization Allows Unauthenticated Record Deletion
41RISK
open ↗
Referência
CVE-2018-25390
CVE-2018-25390HIGH
HaPe PKH 1.1 SQL Injection via desa Parameter
41RISK
open ↗
Referência
CVE-2026-9807
CVE-2026-9807MEDIUM
Incorrect Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-6268
CVE-2026-6268HIGH
EventPress < 22.2 – Reflected Cross-Site Scripting
41RISK
open ↗
Referência
CVE-2026-9603
CVE-2026-9603MEDIUM
SourceCodester eDoc Doctor Appointment System delete-session.php authorization
33RISK
open ↗
Referência
CVE-2026-9484
CVE-2026-9484MEDIUM
SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization
33RISK
open ↗
Referência
CVE-2026-9483
CVE-2026-9483MEDIUM
SourceCodester Student Grades Management System grades.php improper authorization
33RISK
open ↗
Referência
CVE-2026-9479
CVE-2026-9479HIGH
Edimax EW-7438RPn formLogout stack-based overflow
41RISK
open ↗
Referência
CVE-2026-9581
CVE-2026-9581MEDIUM
JeecgBoot add access control
33RISK
open ↗
Referência
CVE-2026-9542
CVE-2026-9542MEDIUM
CodeAstro Leave Management System add_staff.php sql injection
33RISK
open ↗
Referência
CVE-2026-9541
CVE-2026-9541MEDIUM
Squirrel Cnut File sqobject.cpp ReadObject heap-based overflow
33RISK
open ↗
← previouspage 546 / 751next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.