Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,137cataloged exploits
35,961CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,657GitHub PoC 14,424VulnCheck XDB 8,773Nuclei 4,340Metasploit 3,485✓ verified onlyrecentpopularrisk
22,657 exploits
Referência
CVE-2015-7768
CVE-2015-7768—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma
50RISK
open ↗
Referência
CVE-2015-7768
CVE-2015-7768—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma
50RISK
open ↗
Referência
CVE-2015-7768
CVE-2015-7768—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma
50RISK
open ↗
Referência✓ VexDay Proof
Clansys 1.1 (showid) - SQL Injection
CVE-2006-1708—webappsphp
SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via t
23RISK
open ↗
Referência✓ VexDay Proof
Micro CMS 0.3.5 - 'microcms_path' Remote File Inclusion
CVE-2006-3144—webappsphp
PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5
23RISK
open ↗
Referência
CVE-2009-2401
CVE-2009-2401—
Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script o
23RISK
open ↗
Referência
CVE-2009-3592
CVE-2009-3592—
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbi
23RISK
open ↗
Referência
CVE-2009-4596
CVE-2009-4596—
Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary w
23RISK
open ↗
Referência
CVE-2014-9582
CVE-2014-9582—
Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to
23RISK
open ↗
Referência
CVE-2011-0748
CVE-2011-0748—
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack th
23RISK
open ↗
Referência
CVE-2026-75087
CVE-2026-75087MEDIUM
itsourcecode Hospital Management System viewdepartment.php sql injection
33RISK
open ↗
Referência✓ VexDay Proof
WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting
CVE-2008-6267—webappsphp
Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to
23RISK
open ↗
Referência
CVE-2010-4868
CVE-2010-4868—
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote atta
23RISK
open ↗
Referência
CVE-2015-7865
CVE-2015-7865—
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before
23RISK
open ↗
Referência
CVE-2010-1111
CVE-2010-1111—
Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary
23RISK
open ↗
Referência
CVE-2008-6891
CVE-2008-6891—
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RISK
open ↗
Referência✓ VexDay Proof
ezpack 4.2b2 - Cross-Site Scripting / SQL Injection
CVE-2009-0105—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web sc
23RISK
open ↗
Referência✓ VexDay Proof
ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure
CVE-2009-1321—webappsphp
Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbi
23RISK
open ↗
Referência✓ VexDay Proof
LinkBase 2.0 - Remote Cookie Grabber
CVE-2009-1607—webappsphp
Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers
23RISK
open ↗
Referência✓ VexDay Proof
yogurt 0.3 - Cross-Site Scripting / SQL Injection
CVE-2009-2033—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web scri
23RISK
open ↗
Referência
CVE-2015-7865
CVE-2015-7865—
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before
23RISK
open ↗
Referência
CVE-2020-14864
CVE-2020-14864HIGHunder attack
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ins
100RISK
open ↗
Referência
CVE-2026-8275
CVE-2026-8275MEDIUM
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion
33RISK
open ↗
Referência
CVE-2018-10828
CVE-2018-10828—
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wri
23RISK
open ↗
Referência
CVE-2017-1000366
CVE-2017-1000366—
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin
23RISK
open ↗
Referência
CVE-2013-10070
CVE-2013-10070CRITICAL
PHP-Charts v1.0 PHP Code Execution
63RISK
open ↗
Referência
CVE-2013-10070
CVE-2013-10070CRITICAL
PHP-Charts v1.0 PHP Code Execution
63RISK
open ↗
Referência
CVE-2013-10070
CVE-2013-10070CRITICAL
PHP-Charts v1.0 PHP Code Execution
63RISK
open ↗
Referência
CVE-2012-10038
CVE-2012-10038CRITICAL
Auxilium RateMyPet Arbitrary File Upload RCE
63RISK
open ↗
Referência
CVE-2025-34089
CVE-2025-34089CRITICAL
Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection
63RISK
open ↗
← previouspage 652 / 756next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.