Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,636cataloged exploits

40,917CVEs with public exploitation

24,696lab-tested

All Referência 26,560Exploit-DB 24,489GitHub PoC 18,399VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecent popular risk

26,560 exploits

Referência

CVE-2010-2916

CVE-2010-2916—

SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2016-1104

CVE-2016-1104—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISK

open ↗

Referência

CVE-2014-7872

CVE-2014-7872—

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges

23RISK

open ↗

Referência

CVE-2026-103359

CVE-2026-103359MEDIUM

PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery

33RISK

open ↗

Referência

CVE-2015-1100

CVE-2015-1100—

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denia

23RISK

open ↗

Referência

CVE-2026-117512

CVE-2026-117512MEDIUM

oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

33RISK

open ↗

Referência✓ VexDay Proof

BluSky CMS - 'news_id' SQL Injection

CVE-2009-1548—webappsphp

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência

CVE-2010-4866

CVE-2010-4866—

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

XOOPS module Articles 1.02 - 'print.php?id' SQL Injection

CVE-2007-3311—webappsphp

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex

23RISK

open ↗

Referência

CVE-2022-3241

CVE-2022-3241CRITICAL

Build App Online < 1.0.19 - Unauthenticated SQL Injection

48RISK

open ↗

Referência

CVE-2022-4383

CVE-2022-4383CRITICAL

CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi

48RISK

open ↗

Referência

CVE-2022-4099

CVE-2022-4099CRITICAL

Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi

48RISK

open ↗

Referência

CVE-2026-117511

CVE-2026-117511MEDIUM

desmondmorris node-tesseract Command Builder tesseract.js process os command injection

33RISK

open ↗

Referência✓ VexDay Proof

phpFullAnnu (PFA) 6.0 - SQL Injection

CVE-2007-5068—webappsphp

SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

Referência✓ VexDay Proof

JobSite Professional 2.0 - 'file.php' SQL Injection

CVE-2007-5785—webappsphp

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência

CVE-2011-2523

CVE-2011-2523—

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

open ↗

Referência

CVE-2012-5323

CVE-2012-5323—

Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows

23RISK

open ↗

Referência

CVE-2012-0906

CVE-2012-0906—

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execut

23RISK

open ↗

Referência

CVE-2013-1773

CVE-2013-1773—

Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileg

23RISK

open ↗

Referência

CVE-2014-7872

CVE-2014-7872—

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges

23RISK

open ↗

Referência

CVE-2016-3222

CVE-2016-3222—

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

35RISK

open ↗

Referência✓ VexDay Proof

Content Injector 1.53 - 'index.php' SQL Injection

CVE-2007-6394—webappsphp

SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

Referência✓ VexDay Proof

ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection

CVE-2008-4717—webappsphp

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência✓ VexDay Proof

DigiLeave 1.2 - 'book_id' Blind SQL Injection

CVE-2008-3309—webappsasp

SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência

CVE-2008-4344

CVE-2008-4344—

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the Ca

23RISK

open ↗

Referência

CVE-2017-14311

CVE-2017-14311—

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402

23RISK

open ↗

Referência

CVE-2010-4996

CVE-2010-4996—

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

Adobe Shockwave - 'ShockwaveVersion()' Stack Overflow (PoC)

CVE-2007-5941—doswindows

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a den

35RISK

open ↗

Referência

CVE-2012-1778

CVE-2012-1778—

SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL co

23RISK

open ↗

Referência✓ VexDay Proof

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

CVE-2009-1032—webappsphp

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attacke

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.