Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,900cataloged exploits
35,840CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
Orca Ringmaker 2.3 - 'Ringmaker.php' SQL Injection
SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Orca Blog 1.3 - 'blog.php' SQL Injection
SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL c
23RISK
open ↗Exploit-DB✓ VexDay Proof
Post Affiliate Pro 2.0.4 - 'index.php' SQL Injection
SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to ex
23RISK
open ↗Exploit-DB✓ VexDay Proof
FAQ System 1.1 - 'index.php?category_id' SQL Injection
Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
FAQ System 1.1 - 'viewFAQ.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Fantastic Scripts Fantastic News 2.1.1 - 'news.php' SQL Injection
SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BosDates 4.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arb
23RISK
open ↗Exploit-DB✓ VexDay Proof
N-13 News 1.2 - SQL Injection
SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Survey System 1.1 - 'survey.php' SQL Injection
SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Time_Out_Leases PrintK Local Denial of Service
The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of servi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Orca KnowledgeBase 2.1 - 'KnowledgeBase.php' SQL Injection
SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
CenterICQ 4.20/4.5 - Packet Handling Remote Denial of Service
centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (
28RISK
open ↗Exploit-DB✓ VexDay Proof
Netzbrett 1.5.1 - 'P_Entry' SQL Injection
SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Top Music Module 3.0 - SQL Injection
Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attacke
23RISK
open ↗Exploit-DB✓ VexDay Proof
Enterprise Heart Enterprise Connector 1.0.2 - 'messages.php?messageid' SQL Injection
Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'nwlmail.php?lng' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'dbbatch.php?lng' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'editorTypetool.php?meskin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
BerliOS SourceWell 1.1.3 - SQL Injection
SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP Doc System 1.5.1 - Local File Inclusion
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or
23RISK
open ↗Exploit-DB✓ VexDay Proof
Unalz 0.x - Archive Filename Buffer Overflow
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archiv
28RISK
open ↗Exploit-DB✓ VexDay Proof
Guppy 4.5.9 - 'REMOTE_ADDR' Remote Command Execution
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, a
23RISK
open ↗Exploit-DB✓ VexDay Proof
UGroup 2.6.2 - 'topic.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comma
23RISK
open ↗Exploit-DB✓ VexDay Proof
EdmoBBS 0.9 - SQL Injection
Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arb
23RISK
open ↗Exploit-DB✓ VexDay Proof
Randshop - Multiple SQL Injections
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL c
23RISK
open ↗Exploit-DB✓ VexDay Proof
Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote att
23RISK
open ↗Exploit-DB✓ VexDay Proof
AllWeb Search 3.0 - SQL Injection
SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary S
23RISK
open ↗Exploit-DB✓ VexDay Proof
ShockBoard 3.0/4.0 - 'Offset' SQL Injection
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗Exploit-DB✓ VexDay Proof
K-Search 1.0 - SQL Injection
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comma
23RISK
open ↗Exploit-DB✓ VexDay Proof
Softbiz Resource Repository Script - 'details_res.php?sbres_id' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.