Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,644cataloged exploits
40,922CVEs with public exploitation
24,696lab-tested
AllReferência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,560 exploits
Referência
CVE-2017-1000353
CVE-2017-1000353CRITICALunder attack
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code exe
100RISK
open ↗
Referência
CVE-2017-12786
CVE-2017-12786—
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW40
28RISK
open ↗
Referência
CVE-2017-14153
CVE-2017-14153—
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must
23RISK
open ↗
Referência
CVE-2026-15701
CVE-2026-15701CRITICAL
Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow
48RISK
open ↗
Referência
CVE-2014-0749
CVE-2014-0749—
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso
28RISK
open ↗
Referência
CVE-2014-0749
CVE-2014-0749—
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso
28RISK
open ↗
Referência
CVE-2017-14712
CVE-2017-14712—
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
23RISK
open ↗
Referência
CVE-2026-8345
CVE-2026-8345MEDIUM
D-Link DIR-816 singlePortForward sub_445E7C command injection
33RISK
open ↗
Referência
CVE-2026-8344
CVE-2026-8344MEDIUM
D-Link DIR-816 formDMZ.cgi sub_445E7C command injection
33RISK
open ↗
Referência
CVE-2026-43884
CVE-2026-43884HIGH
WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()
41RISK
open ↗
Referência
CVE-2026-42613
CVE-2026-42613CRITICAL
Grav: Privilege Escalation via Missing Server-Side Validation of groups/access
48RISK
open ↗
Referência
CVE-2026-8292
CVE-2026-8292MEDIUM
Open5GS NRF conv.c yuarel_parse denial of service
33RISK
open ↗
Referência
CVE-2019-2215
CVE-2019-2215HIGHunder attack
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗
Referência
CVE-2026-86610
CVE-2026-86610MEDIUM
Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon
33RISK
open ↗
Referência
CVE-2026-7814
CVE-2026-7814MEDIUM
pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer
33RISK
open ↗
Referência
CVE-2026-8290
CVE-2026-8290MEDIUM
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
33RISK
open ↗
Referência
CVE-2026-8276
CVE-2026-8276MEDIUM
bettercap MySQL Server mysql_server.go integer coercion
33RISK
open ↗
Referência
CVE-2026-8274
CVE-2026-8274MEDIUM
npitre cramfs-tools Directory cramfsck.c do_directory path traversal
33RISK
open ↗
Referência
CVE-2026-8272
CVE-2026-8272MEDIUM
D-Link DNS-320 webfile_mgr.cgi chown os command injection
33RISK
open ↗
Referência
CVE-2026-8271
CVE-2026-8271MEDIUM
D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection
33RISK
open ↗
Referência
CVE-2026-8269
CVE-2026-8269MEDIUM
Open5GS SMF smf_nsmf_handle_create_sm_context denial of service
33RISK
open ↗
Referência
CVE-2026-8305
CVE-2026-8305MEDIUM
OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication
33RISK
open ↗
Referência
CVE-2026-8288
CVE-2026-8288MEDIUM
Open5GS SMF gsm-handler.c denial of service
33RISK
open ↗
Referência
CVE-2026-16484
CVE-2026-16484MEDIUM
SourceCodester Class and Exam Timetabling System edit_subjecta.php sql injection
33RISK
open ↗
Referência
CVE-2026-42881
CVE-2026-42881HIGH
STIGQter: Arbitrary File Write leading to Local Code Execution via Export HTML
41RISK
open ↗
Referência
CVE-2026-43644
CVE-2026-43644MEDIUM
podinfo 6.11.2 Reflected XSS via /echo Endpoint
33RISK
open ↗
Referência✓ VexDay Proof
Yourownbux 4.0 - 'cookie' SQL Injection
CVE-2008-4492—webappsphp
SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2026-13569
CVE-2026-13569MEDIUM
weng-xianhu EyouCMS API index.php sql injection
33RISK
open ↗
Referência
CVE-2021-47952
CVE-2021-47952CRITICAL
python jsonpickle 2.0.0 Remote Code Execution via py/repr
48RISK
open ↗
Referência
CVE-2021-47934
CVE-2021-47934MEDIUM
MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF
33RISK
open ↗
← previouspage 782 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.