Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
22,523 exploits
Referência✓ VexDay Proof
sflog! 0.96 - Remote File Disclosure
CVE-2008-0703—webappsphp
Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (dot
23RISK
open ↗
Referência✓ VexDay Proof
GdPicture Pro - ActiveX 'gdpicture4s.ocx' File Overwrite / Exec
CVE-2008-4453—remotewindows
The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro
28RISK
open ↗
Referência
CVE-2010-4701
CVE-2010-4701—
Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover
35RISK
open ↗
Referência
CVE-2011-3981
CVE-2011-3981—
PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attac
28RISK
open ↗
Referência
CVE-2019-16692
CVE-2019-16692—
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us
28RISK
open ↗
Referência
CVE-2020-35737
CVE-2020-35737—
In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information
28RISK
open ↗
Referência
CVE-2011-1546
CVE-2011-1546—
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to exec
23RISK
open ↗
Referência
CVE-2010-1029
CVE-2010-1029—
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf
28RISK
open ↗
Referência
CVE-2010-1029
CVE-2010-1029—
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf
28RISK
open ↗
Referência
CVE-2020-6857
CVE-2020-6857—
CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FT
23RISK
open ↗
Referência
CVE-2017-8770
CVE-2017-8770—
There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys
28RISK
open ↗
Referência
CVE-2019-15993
CVE-2019-15993HIGH
Cisco Small Business Switches Information Disclosure Vulnerability
46RISK
open ↗
Referência
CVE-2026-6594
CVE-2026-6594MEDIUM
brikcss merge prototype pollution
33RISK
open ↗
Referência✓ VexDay Proof
DNS Tools (PHP Digger) - Remote Command Execution
CVE-2009-1916—webappsphp
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the
28RISK
open ↗
Referência✓ VexDay Proof
SolidState 0.4 - Multiple Remote File Inclusions
CVE-2006-5020—webappsphp
Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbit
28RISK
open ↗
Referência
CVE-2013-2681
CVE-2013-2681—
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to
28RISK
open ↗
Referência
CVE-2009-2364
CVE-2009-2364—
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISK
open ↗
Referência
CVE-2009-2364
CVE-2009-2364—
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISK
open ↗
Referência
CVE-2017-12929
CVE-2017-12929—
Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users
28RISK
open ↗
Referência
CVE-2017-12969
CVE-2017-12969—
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows r
28RISK
open ↗
Referência
CVE-2012-6530
CVE-2012-6530—
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users w
50RISK
open ↗
Referência
CVE-2018-18773
CVE-2018-18773—
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demo
23RISK
open ↗
Referência
CVE-2018-18773
CVE-2018-18773—
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demo
23RISK
open ↗
Referência
CVE-2017-17999
CVE-2017-17999—
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Referência
CVE-2017-5972
CVE-2017-5972—
The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fa
28RISK
open ↗
Referência
CVE-2016-4806
CVE-2016-4806—
Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended u
28RISK
open ↗
Referência
CVE-2016-4806
CVE-2016-4806—
Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended u
28RISK
open ↗
Referência
CVE-2010-2917
CVE-2010-2917—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to i
23RISK
open ↗
Referência
CVE-2009-4940
CVE-2009-4940—
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2014-10011
CVE-2014-10011—
Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView ca
28RISK
open ↗
← previouspage 551 / 751next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.