Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
26,327 exploits
Referência
CVE-2026-105486
CVE-2026-105486MEDIUM
OSSRS srs System API api.go systemAPI.Run missing authentication
33RISK
open ↗
Referência
CVE-2016-2184
CVE-2016-2184—
The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.
23RISK
open ↗
Referência✓ VexDay Proof
Zenturi NixonMyPrograms Class 'sasatl.dll 1.5.0.531' - Remote Buffer Overflow
CVE-2007-3984—remotewindows
Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChec
23RISK
open ↗
Referência
CVE-2016-2188
CVE-2016-2188—
The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximat
23RISK
open ↗
Referência
CVE-2026-113388
CVE-2026-113388MEDIUM
opensource-socialnetwork Cache Settings dynamic.php input code injection
33RISK
open ↗
Referência
CVE-2026-87916
CVE-2026-87916MEDIUM
WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
33RISK
open ↗
Referência
CVE-2026-113392
CVE-2026-113392MEDIUM
DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
33RISK
open ↗
Referência
CVE-2026-82305
CVE-2026-82305MEDIUM
YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title
33RISK
open ↗
Referência
CVE-2026-113391
CVE-2026-113391CRITICAL
DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection
48RISK
open ↗
Referência
CVE-2026-113390
CVE-2026-113390CRITICAL
DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection
48RISK
open ↗
Referência
CVE-2026-18042
CVE-2026-18042MEDIUM
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation
33RISK
open ↗
Referência✓ VexDay Proof
Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method
CVE-2007-4902—remotewindows
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co
23RISK
open ↗
Referência
Sanitized XenForo write-up and proof of concept for CVE-2026-73314.
CVE-2026-73314HIGH
XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook
41RISK
open ↗
Referência
CVE-2026-86297
CVE-2026-86297CRITICAL
D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
48RISK
open ↗
Referência
CVE-2026-105156
CVE-2026-105156MEDIUM
YzmCMS MD5 system.func.php password weak password hash
33RISK
open ↗
Referência
CVE-2026-104118
CVE-2026-104118MEDIUM
Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
33RISK
open ↗
Referência
CVE-2026-17005
CVE-2026-17005MEDIUM
Horizontal Scrolling Announcements <= 2.6 - Contributor+ Stored XSS via Style Field
33RISK
open ↗
Referência
CVE-2026-105134
CVE-2026-105134CRITICALunder attack
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
100RISK
open ↗
Referência
CVE-2026-105133
CVE-2026-105133MEDIUMunder attack
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
100RISK
open ↗
Referência✓ VexDay Proof
EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities
CVE-2007-5110—remotewindows
Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e
23RISK
open ↗
Referência✓ VexDay Proof
EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities
CVE-2007-5111—remotewindows
A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (
23RISK
open ↗
Referência
CVE-2016-2494
CVE-2016-2494—
Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before
23RISK
open ↗
Referência✓ VexDay Proof
Adult Script 1.6 - Unauthorized Administrative Access
CVE-2007-6414—webappsphp
admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which all
23RISK
open ↗
Referência
CVE-2026-82610
CVE-2026-82610MEDIUM
itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection
33RISK
open ↗
Referência
CVE-2026-77786
CVE-2026-77786MEDIUM
Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo Ability
33RISK
open ↗
Referência
CVE-2026-112146
CVE-2026-112146MEDIUM
D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
33RISK
open ↗
Referência
CVE-2016-4309
CVE-2016-4309—
Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers
28RISK
open ↗
Referência
CVE-2026-112281
CVE-2026-112281MEDIUM
libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi
33RISK
open ↗
Referência
CVE-2026-82801
CVE-2026-82801MEDIUM
NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery
33RISK
open ↗
Referência
CVE-2026-82703
CVE-2026-82703MEDIUM
Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injection
33RISK
open ↗
← previouspage 564 / 878next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.