Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,644cataloged exploits
40,922CVEs with public exploitation
24,696lab-tested
AllReferência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,560 exploits
Referência
CVE-2026-6033
CVE-2026-6033MEDIUM
CodeAstro Online Classroom updatedetailsfromstudent.php sql injection
33RISK
open ↗
Referência
CVE-2026-6032
CVE-2026-6032MEDIUM
code-projects Simple Laundry System checkcheckout.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-6031
CVE-2026-6031MEDIUM
code-projects Simple IT Discussion Forum add-category-function.php sql injection
33RISK
open ↗
Referência
CVE-2026-6030
CVE-2026-6030MEDIUM
itsourcecode Construction Management System del1.php sql injection
33RISK
open ↗
Referência
CVE-2026-6029
CVE-2026-6029CRITICAL
Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection
48RISK
open ↗
Referência
CVE-2026-6026
CVE-2026-6026CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection
48RISK
open ↗
Referência
CVE-2026-6025
CVE-2026-6025CRITICAL
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection
48RISK
open ↗
Referência
CVE-2026-6024
CVE-2026-6024MEDIUM
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal
33RISK
open ↗
Referência
CVE-2026-6016
CVE-2026-6016HIGH
Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
41RISK
open ↗
Referência
CVE-2026-6015
CVE-2026-6015HIGH
Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
41RISK
open ↗
Referência
CVE-2026-7013
CVE-2026-7013MEDIUM
MaxSite CMS mail_send Plugin cross site scripting
33RISK
open ↗
Referência
CVE-2026-7012
CVE-2026-7012MEDIUM
MaxSite CMS Redirect Plugin cross site scripting
33RISK
open ↗
Referência
CVE-2018-25277
CVE-2018-25277MEDIUM
PixGPS 1.1.8 Buffer Overflow Denial of Service
33RISK
open ↗
Referência
CVE-2026-7018
CVE-2026-7018MEDIUM
Datavane Datavines JWT Token TokenManager.java hard-coded key
33RISK
open ↗
Referência
CVE-2018-25373
CVE-2018-25373HIGH
DVD Photo Slideshow Professional 8.07 Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2024-14032
CVE-2024-14032HIGH
Twitch Studio LauncherHelper XPC Missing Authorization to Root File Write
41RISK
open ↗
Referência
CVE-2026-5666
CVE-2026-5666MEDIUM
code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information
33RISK
open ↗
Referência
CVE-2026-5665
CVE-2026-5665MEDIUM
code-projects Online FIR System Login checklogin.php sql injection
33RISK
open ↗
Referência
CVE-2026-5661
CVE-2026-5661MEDIUM
Free5GC NGSetupRequest denial of service
33RISK
open ↗
Referência
CVE-2026-5660
CVE-2026-5660MEDIUM
itsourcecode Construction Management System Parameter borrowed_equip.php sql injection
33RISK
open ↗
Referência
CVE-2026-7016
CVE-2026-7016MEDIUM
MaxSite CMS ushki Plugin cross site scripting
33RISK
open ↗
Referência
CVE-2018-25276
CVE-2018-25276MEDIUM
RoboImport 1.2.0.72 Denial of Service via Registration Fields
33RISK
open ↗
Referência
CVE-2018-25275
CVE-2018-25275MEDIUM
Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow
33RISK
open ↗
Referência
CVE-2018-25274
CVE-2018-25274MEDIUM
InfraRecorder 0.53 Denial of Service via txt File Import
33RISK
open ↗
Referência
CVE-2018-25273
CVE-2018-25273MEDIUM
CrossFont 7.5 Denial of Service via License Key Field
33RISK
open ↗
Referência
CVE-2026-7019
CVE-2026-7019HIGH
Tenda F456 P2pListFilter fromP2pListFilter buffer overflow
41RISK
open ↗
Referência
CVE-2026-7015
CVE-2026-7015MEDIUM
MaxSite CMS Guestbook Plugin cross site scripting
33RISK
open ↗
Referência
CVE-2026-7014
CVE-2026-7014MEDIUM
MaxSite CMS down_count Plugin cross site scripting
33RISK
open ↗
Referência
CVE-2016-20053
CVE-2016-20053MEDIUM
Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint
33RISK
open ↗
Referência
CVE-2016-6433
CVE-2016-6433—
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users
60RISK
open ↗
← previouspage 774 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.