Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,644cataloged exploits
40,922CVEs with public exploitation
24,696lab-tested
AllReferência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,560 exploits
Referência
CVE-2019-25701
CVE-2019-25701HIGH
Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2019-25697
CVE-2019-25697HIGH
CMSsite 1.0 SQL Injection via category.php
41RISK
open ↗
Referência
CVE-2019-25689
CVE-2019-25689HIGH
HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH
41RISK
open ↗
Referência
CVE-2018-25258
CVE-2018-25258HIGH
RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass
41RISK
open ↗
Referência
CVE-2026-6492
CVE-2026-6492MEDIUM
arnobt78 Hotel Booking Management System Health Check Endpoint detailed information disclosure
33RISK
open ↗
Referência
CVE-2026-6491
CVE-2026-6491MEDIUM
libvips nip2 vips7compat.c im_minpos_vec heap-based overflow
33RISK
open ↗
Referência
CVE-2026-6487
CVE-2026-6487MEDIUM
Qihui jtbc5 CMS Code Endpoint manage.php path traversal
33RISK
open ↗
Referência
CVE-2026-6486
CVE-2026-6486MEDIUM
classroombookings User Display Name layout.php read cross site scripting
33RISK
open ↗
Referência
CVE-2026-6483
CVE-2026-6483HIGH
Wavlink WL-WN530H4 internet.cgi snprintf os command injection
46RISK
open ↗
Referência
CVE-2026-6490
CVE-2026-6490MEDIUM
QueryMine sms GET Request Parameter deletecourse.php sql injection
33RISK
open ↗
Referência
CVE-2026-6489
CVE-2026-6489MEDIUM
QueryMine sms Background Management addteacher.php unrestricted upload
33RISK
open ↗
Referência
CVE-2026-6488
CVE-2026-6488MEDIUM
QueryMine sms GET Request Parameter editcourse.php sql injection
33RISK
open ↗
Referência
CVE-2018-25257
CVE-2018-25257HIGH
Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
41RISK
open ↗
Referência
CVE-2017-20239
CVE-2017-20239MEDIUM
MDwiki Cross-Site Scripting via Location Hash Parameter
33RISK
open ↗
Referência
CVE-2026-6126
CVE-2026-6126MEDIUM
zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
33RISK
open ↗
Referência
CVE-2026-6148
CVE-2026-6148MEDIUM
code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection
33RISK
open ↗
Referência
CVE-2026-6140
CVE-2026-6140CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
48RISK
open ↗
Referência
CVE-2026-6139
CVE-2026-6139CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
48RISK
open ↗
Referência
CVE-2026-6138
CVE-2026-6138CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
48RISK
open ↗
Referência
CVE-2019-25695
CVE-2019-25695HIGH
R 3.4.4 Local Buffer Overflow Windows XP SP3
41RISK
open ↗
Referência
CVE-2019-25693
CVE-2019-25693HIGH
ResourceSpace 8.6 SQL Injection via collection_edit.php
41RISK
open ↗
Referência
CVE-2019-25691
CVE-2019-25691HIGH
Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass
41RISK
open ↗
Referência
CVE-2026-5543
CVE-2026-5543MEDIUM
PHPGurukul User Registration & Login and User Management System yesterday-reg-users.php sql injection
33RISK
open ↗
Referência
CVE-2026-5542
CVE-2026-5542MEDIUM
code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5557
CVE-2026-5557MEDIUM
badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass
33RISK
open ↗
Referência
CVE-2026-5556
CVE-2026-5556MEDIUM
badlogic pi-mono loader.ts discoverAndLoadExtensions code injection
33RISK
open ↗
Referência
CVE-2026-5555
CVE-2026-5555MEDIUM
code-projects Concert Ticket Reservation System Parameter login.php sql injection
33RISK
open ↗
Referência
CVE-2026-5554
CVE-2026-5554MEDIUM
code-projects Concert Ticket Reservation System Parameter process_search.php sql injection
33RISK
open ↗
Referência
CVE-2026-5553
CVE-2026-5553MEDIUM
itsourcecode Online Cellphone System Parameter available.php sql injection
33RISK
open ↗
Referência
CVE-2026-5541
CVE-2026-5541MEDIUM
code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting
33RISK
open ↗
← previouspage 776 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.