Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2018-25291
CVE-2018-25291MEDIUM
Project64 2.3.2 Denial of Service via Plugin Directory
33RISK
open ↗
Referência
CVE-2018-25290
CVE-2018-25290MEDIUM
Easyboot 6.6.0 Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2018-25289
CVE-2018-25289MEDIUM
Softdisk 3.0.3 Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2018-25288
CVE-2018-25288MEDIUM
StyleWriter 1.0 Denial of Service via Pattern Input
33RISK
open ↗
Referência
CVE-2026-5970
CVE-2026-5970MEDIUM
FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection
33RISK
open ↗
Referência
CVE-2026-5962
CVE-2026-5962MEDIUM
Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal
33RISK
open ↗
Referência
CVE-2026-5961
CVE-2026-5961MEDIUM
code-projects Simple IT Discussion Forum topic-details.php sql injection
33RISK
open ↗
Referência
CVE-2026-5960
CVE-2026-5960MEDIUM
code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure
33RISK
open ↗
Referência
CVE-2016-20055
CVE-2016-20055HIGH
IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation
41RISK
open ↗
Referência
CVE-2026-6005
CVE-2026-6005MEDIUM
code-projects Patient Record Management System hematology_print.php sql injection
33RISK
open ↗
Referência
CVE-2026-6004
CVE-2026-6004MEDIUM
code-projects Simple IT Discussion Forum delete-category.php sql injection
33RISK
open ↗
Referência
CVE-2026-5992
CVE-2026-5992HIGH
Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow
41RISK
open ↗
Referência
CVE-2026-86321
CVE-2026-86321MEDIUM
java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery
33RISK
open ↗
Referência
CVE-2016-5425
CVE-2016-5425—
The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu
38RISK
open ↗
Referência
CVE-2026-86665
CVE-2026-86665MEDIUM
aircheng-org iWebShop-5 update.php index authorization
33RISK
open ↗
Referência
CVE-2026-6010
CVE-2026-6010MEDIUM
CodeAstro Online Classroom takeassessment2.php sql injection
33RISK
open ↗
Referência
CVE-2026-6007
CVE-2026-6007MEDIUM
itsourcecode Construction Management System del.php sql injection
33RISK
open ↗
Referência
CVE-2026-6006
CVE-2026-6006MEDIUM
code-projects Patient Record Management System edit_hpatient.php sql injection
33RISK
open ↗
Referência
CVE-2014-2009
CVE-2014-2009—
The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path
23RISK
open ↗
Referência
CVE-2018-25293
CVE-2018-25293MEDIUM
Prime95 29.4b7 Denial of Service via Proxy Password Field
33RISK
open ↗
Referência
CVE-2018-25292
CVE-2018-25292MEDIUM
Bome Restorator 1793 Denial of Service via Buffer Overflow
33RISK
open ↗
Referência
CVE-2026-14783
CVE-2026-14783MEDIUM
NousResearch hermes-agent skills_tool.py skill_view path traversal
33RISK
open ↗
Referência
CVE-2026-15675
CVE-2026-15675MEDIUM
code-projects Online Job Portal EditUser.php sql injection
33RISK
open ↗
Referência
CVE-2026-67281
CVE-2026-67281HIGH
Unauthenticated file read in Mikrotik RouterOS
41RISK
open ↗
Referência
CVE-2026-12582
CVE-2026-12582HIGH
Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id
41RISK
open ↗
Referência
CVE-2014-3978
CVE-2014-3978—
SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHunder attack
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RISK
open ↗
Referência
CVE-2021-45783
CVE-2021-45783—
Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to
23RISK
open ↗
Referência
CVE-2026-5611
CVE-2026-5611HIGH
Belkin F9K1015 formCrossBandSwitch stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5610
CVE-2026-5610HIGH
Belkin F9K1015 formWISP5G stack-based overflow
41RISK
open ↗
← previouspage 555 / 878next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.