Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,900cataloged exploits
35,840CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
22,573 exploits
Referência
CVE-2026-13729
CVE-2026-13729MEDIUM
Podlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRF
33RISK
open ↗
Referência
CVE-2026-13725
CVE-2026-13725HIGH
Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax
41RISK
open ↗
Referência
CVE-2026-13604
CVE-2026-13604MEDIUM
Pixelavo < 1.5.4 - Unauthenticated Facebook CAPI Event Injection via pixelavo_event AJAX
33RISK
open ↗
Referência
CVE-2026-13596
CVE-2026-13596CRITICAL
Participants Database < 2.7.8.4 - Unauthenticated SQL Injection via List Search
48RISK
open ↗
Referência
CVE-2026-13329
CVE-2026-13329MEDIUM
WC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order Refund
33RISK
open ↗
Referência
CVE-2026-13157
CVE-2026-13157HIGH
Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload
41RISK
open ↗
Referência✓ VexDay Proof
flinx 1.3 - 'id' SQL Injection
CVE-2008-0468—webappsphp
SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
Referência
CVE-2025-55315
CVE-2025-55315CRITICAL
ASP.NET Security Feature Bypass Vulnerability
60RISK
open ↗
Referência
CVE-2025-5548
CVE-2025-5548MEDIUM
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗
Referência
CVE-2010-0459
CVE-2010-0459—
SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! al
23RISK
open ↗
Referência
CVE-2010-0470
CVE-2010-0470—
Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inj
23RISK
open ↗
Referência
CVE-2010-1060
CVE-2010-1060—
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabl
23RISK
open ↗
Referência
CVE-2012-2580
CVE-2012-2580—
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows re
23RISK
open ↗
Referência
CVE-2012-2583
CVE-2012-2583—
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers
23RISK
open ↗
Referência
CVE-2026-61511
CVE-2026-61511CRITICAL
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
48RISK
open ↗
Referência
CVE-2012-2584
CVE-2012-2584—
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr
23RISK
open ↗
Referência
CVE-2026-14189
CVE-2026-14189LOW
WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields
28RISK
open ↗
Referência
CVE-2012-2591
CVE-2012-2591—
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack
23RISK
open ↗
Referência
CVE-2025-71408
CVE-2025-71408HIGH
NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
41RISK
open ↗
Referência
CVE-2026-65709
CVE-2026-65709HIGH
sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API
41RISK
open ↗
Referência
CVE-2012-2601
CVE-2012-2601—
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute ar
23RISK
open ↗
Referência
CVE-2023-3519
CVE-2023-3519CRITICALunder attackransomware
Unauthenticated remote code execution
100RISK
open ↗
Referência
CVE-2010-1472
CVE-2010-1472—
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attac
43RISK
open ↗
Referência
CVE-2026-8189
CVE-2026-8189MEDIUM
Wavlink NU516U1 adm.cgi wzdrepeater os command injection
33RISK
open ↗
Referência
CVE-2026-8188
CVE-2026-8188MEDIUM
Wavlink NU516U1 adm.cgi change_wifi_password os command injection
33RISK
open ↗
Referência
CVE-2010-0672
CVE-2010-0672—
SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2010-1723
CVE-2010-1723—
Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! all
38RISK
open ↗
Referência
CVE-2026-63730
CVE-2026-63730MEDIUM
HyperDX < 2.31.0 SSRF via Webhook Test Endpoint
33RISK
open ↗
Referência
CVE-2026-12724
CVE-2026-12724MEDIUM
Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password
33RISK
open ↗
Referência
CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
← previouspage 601 / 753next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.