Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits
40,804CVEs with public exploitation
24,696lab-tested
AllReferência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecentpopularrisk
26,426 exploits
Referência
CVE-2022-39290
CVE-2022-39290HIGH
CSRF key bypass using HTTP methods in zoneminder
41RISK
open ↗
Referência
CVE-2024-0566
CVE-2024-0566HIGH
Smart Manager < 8.28.0 - Admin+ SQL Injection
41RISK
open ↗
Referência
CVE-2016-0007
CVE-2016-0007—
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RISK
open ↗
Referência✓ VexDay Proof
Joomla! Component com_pccookbook - 'recipe_id' Blind SQL Injection
CVE-2009-0329—webappsphp
SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2026-94298
CVE-2026-94298MEDIUM
BuildKit < 1.0.29 - Contributor+ Stored SQLi via list_content Parameter
33RISK
open ↗
Referência
CVE-2023-54405
CVE-2023-54405CRITICAL
H3C CVM Unauthenticated File Upload via fileUpload/upload Token
48RISK
open ↗
Referência
CVE-2009-3598
CVE-2009-3598—
Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject
23RISK
open ↗
Referência
CVE-2011-2641
CVE-2011-2641—
Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a
23RISK
open ↗
Referência
CVE-2009-3364
CVE-2009-3364—
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long re
23RISK
open ↗
Referência
CVE-2013-4949
CVE-2013-4949—
Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code b
23RISK
open ↗
Referência
CVE-2016-0007
CVE-2016-0007—
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RISK
open ↗
Referência
CVE-2015-1561
CVE-2015-1561—
The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centre
23RISK
open ↗
Referência
CVE-2019-14339
CVE-2019-14339—
The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly res
23RISK
open ↗
Referência
CVE-2015-8368
CVE-2015-8368—
ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the u
23RISK
open ↗
Referência
CVE-2015-2678
CVE-2015-2678—
Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject
23RISK
open ↗
Referência✓ VexDay Proof
μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow
CVE-2007-0927—remotewindows
Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a c
35RISK
open ↗
Referência
CVE-2014-4033
CVE-2014-4033—
Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows
23RISK
open ↗
Referência
CVE-2015-8368
CVE-2015-8368—
ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the u
23RISK
open ↗
Referência✓ VexDay Proof
InoutMailingListManager 3.1 - Remote Command Execution
CVE-2007-2003—webappsphp
InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check
23RISK
open ↗
Referência✓ VexDay Proof
LAN Management System (LMS) 1.9.6 - Remote File Inclusion
CVE-2007-3325—webappsphp
PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remo
35RISK
open ↗
Referência✓ VexDay Proof
ZeusCMS 0.3 - Blind SQL Injection
CVE-2007-6623—webappsphp
Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary director
23RISK
open ↗
Referência
CVE-2015-2678
CVE-2015-2678—
Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject
23RISK
open ↗
Referência✓ VexDay Proof
Quate CMS 0.3.4 - Multiple Vulnerabilities
CVE-2008-2496—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web sc
23RISK
open ↗
Referência✓ VexDay Proof
Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow
CVE-2008-2745—remotewindows
Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows
28RISK
open ↗
Referência✓ VexDay Proof
Simple Machines Forum (SMF) 1.1.6 - Local File Inclusion / Code Execution
CVE-2008-6659—webappsphp
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 all
23RISK
open ↗
Referência✓ VexDay Proof
blogit! - SQL Injection / File Disclosure / Cross-Site Scripting
CVE-2009-0336—webappsphp
Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remo
23RISK
open ↗
Referência
CVE-2010-0677
CVE-2010-0677—
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers
23RISK
open ↗
Referência
CVE-2017-6516
CVE-2017-6516—
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow
38RISK
open ↗
Referência
CVE-2020-12501
CVE-2020-12501CRITICAL
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
48RISK
open ↗
Referência
CVE-2019-16118
CVE-2019-16118—
Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admi
23RISK
open ↗
← previouspage 715 / 881next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.