Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,566cataloged exploits

39,907CVEs with public exploitation

24,696lab-tested

All Referência 25,846Exploit-DB 24,488GitHub PoC 17,314VulnCheck XDB 9,877Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

25,846 exploits

Referência

CVE-2026-108680

CVE-2026-108680MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement

33RISK

open ↗

Referência

CVE-2010-5011

CVE-2010-5011—

SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb

23RISK

open ↗

Referência✓ VexDay Proof

FlexPHPDirectory 0.0.1 - Authentication Bypass

CVE-2008-6750—webappsphp

Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Arbitrary File Upload

CVE-2008-6751—webappsphp

Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allows

23RISK

open ↗

Referência✓ VexDay Proof

SmartSite CMS 1.0 - 'root' Remote File Inclusion

CVE-2006-3162—webappsphp

PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow (PoC) (2)

CVE-2009-0658—doswindows

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra

60RISK

open ↗

Referência✓ VexDay Proof

VMware Inc 6.0.0 - 'vielib.dll 2.2.5.42958' Remode Code Execution

CVE-2007-4058—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows

28RISK

open ↗

Referência

CVE-2010-5012

CVE-2010-5012—

SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência✓ VexDay Proof

pForum 1.30 - 'showprofil.php' SQL Injection

CVE-2008-4355—webappsphp

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r

23RISK

open ↗

Referência✓ VexDay Proof

DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

CVE-2008-4362—doswindows

The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (syst

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component Volunteer 2.0 - SQL Injection

CVE-2008-6337—webappsphp

SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote atta

23RISK

open ↗

Referência

CVE-2005-2855

CVE-2005-2855—

Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web

23RISK

open ↗

Referência✓ VexDay Proof

MyPHP Forum 3.0 - Edit Topics / Blind SQL Injection

CVE-2008-6777—webappsphp

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL co

23RISK

open ↗

Referência✓ VexDay Proof

SFS EZ Home Business Directory - 'cat_id' SQL Injection

CVE-2008-6783—webappsphp

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attacke

23RISK

open ↗

Referência✓ VexDay Proof

smNews 1.0 - Authentication Bypass / Column Truncation

CVE-2009-0750—webappsphp

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to ex

23RISK

open ↗

Referência

CVE-2010-4142

CVE-2010-4142—

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a

50RISK

open ↗

Referência✓ VexDay Proof

RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow

CVE-2009-1646—localwindows

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISK

open ↗

Referência

CVE-2009-3193

CVE-2009-3193—

SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execu

23RISK

open ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RISK

open ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISK

open ↗

Referência

CVE-2024-20353

CVE-2024-20353HIGHunder attack

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

93RISK

open ↗

Referência✓ VexDay Proof

ParsaWeb CMS - 'Search' SQL Injection

CVE-2008-4364—webappsasp

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

Lizardware CMS 0.6.0 - Blind SQL Injection

CVE-2008-6787—webappsphp

SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to ex

23RISK

open ↗

Referência

CVE-2015-7768

CVE-2015-7768—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

50RISK

open ↗

Referência✓ VexDay Proof

SFS EZ Pub Site - SQL Injection

CVE-2008-6794—webappsphp

SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute a

23RISK

open ↗

Referência

CVE-2016-0151

CVE-2016-0151HIGHunder attackransomware

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,

83RISK

open ↗

Referência✓ VexDay Proof

Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1)

CVE-2006-0021—doswindows

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang)

35RISK

open ↗

Referência

CVE-2010-5022

CVE-2010-5022—

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at

23RISK

open ↗

Referência

CVE-2018-7422

CVE-2018-7422—

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to re

50RISK

open ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.