Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,813cataloged exploits

35,788CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,549GitHub PoC 14,290VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

22,549 exploits

Referência

CVE-2018-7745

CVE-2018-7745—

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/inst

28RISK

open ↗

Referência

CVE-2016-6599

CVE-2016-6599—

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService)

28RISK

open ↗

Referência

CVE-2014-2072

CVE-2014-2072—

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks

23RISK

open ↗

Referência

CVE-2011-2505

CVE-2011-2505—

libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4

28RISK

open ↗

Referência✓ VexDay Proof

Axiom Photo/News Gallery 0.8.6 - Remote File Inclusion

CVE-2007-0200—webappsphp

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 a

23RISK

open ↗

Referência✓ VexDay Proof

CoD2: DreamStats 4.2 - 'index.php' Remote File Inclusion

CVE-2007-0757—webappsphp

PHP remote file inclusion vulnerability in index.php in Miguel Nunes Call of Duty 2 (CoD2) DreamStats System 4.2 and ear

23RISK

open ↗

Referência✓ VexDay Proof

AgerMenu 0.01 - 'top.inc.php?rootdir' Remote File Inclusion

CVE-2007-0837—webappsphp

PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

GLLCTS2 - 'sort' Blind SQL Injection

CVE-2008-2919—webappsphp

SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência

CVE-2023-54335

CVE-2023-54335CRITICAL

eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)

48RISK

open ↗

Referência

CVE-2021-28242

CVE-2021-28242—

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive dat

23RISK

open ↗

Referência

CVE-2017-0300

CVE-2017-0300—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISK

open ↗

Referência

CVE-2019-13623

CVE-2019-13623—

In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive)

23RISK

open ↗

Referência

CVE-2013-4868

CVE-2013-4868—

Karotz API 12.07.19.00: Session Token Information Disclosure

23RISK

open ↗

Referência

CVE-2018-10188

CVE-2018-10188—

phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_ope

23RISK

open ↗

Referência

CVE-2017-0100

CVE-2017-0100—

A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold

23RISK

open ↗

Referência

CVE-2022-4117

CVE-2022-4117CRITICAL

IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi

63RISK

open ↗

Referência

CVE-2017-4916

CVE-2017-4916—

VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succes

23RISK

open ↗

Referência

CVE-2014-9261

CVE-2014-9261—

The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which

23RISK

open ↗

Referência

CVE-2014-9261

CVE-2014-9261—

The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which

23RISK

open ↗

Referência

CVE-2010-3155

CVE-2010-3155—

Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly r

28RISK

open ↗

Referência

CVE-2017-15014

CVE-2017-15014—

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga

23RISK

open ↗

Referência

CVE-2022-37255

CVE-2022-37255HIGH

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL07552646

41RISK

open ↗

Referência✓ VexDay Proof

Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion

CVE-2008-6253—webappsphp

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allow

23RISK

open ↗

Referência

CVE-2014-2090

CVE-2014-2090—

Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inje

23RISK

open ↗

Referência✓ VexDay Proof

ICQ 6.5 - URL Search Hook (Windows Explorer) Remote Buffer Overflow (PoC)

CVE-2009-1915—doswindows

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial

23RISK

open ↗

Referência

CVE-2016-9566

CVE-2016-9566—

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root

23RISK

open ↗

Referência

CVE-2018-7704

CVE-2018-7704—

SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1

23RISK

open ↗

Referência

CVE-2026-18645

CVE-2026-18645MEDIUM

danpros HTMLy Admin Content Endpoint admin.php add_content path traversal

33RISK

open ↗

Referência

CVE-2026-18644

CVE-2026-18644MEDIUM

danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal

33RISK

open ↗

Referência

CVE-2026-18641

CVE-2026-18641MEDIUM

Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection

33RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.