Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,644cataloged exploits
40,922CVEs with public exploitation
24,696lab-tested
AllReferência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,560 exploits
Referência
CVE-2026-5235
Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow
33RISK
open ↗Referência
CVE-2026-5214
D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow
41RISK
open ↗Referência
CVE-2026-5213
D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow
41RISK
open ↗Referência
CVE-2026-5212
D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow
41RISK
open ↗Referência
CVE-2026-5211
D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow
41RISK
open ↗Referência
CVE-2026-5209
SourceCodester Leave Application System User Management cross site scripting
33RISK
open ↗Referência
CVE-2026-32113
Discourse: Open redirect via `sso_destination_url` cookie in `enter`
33RISK
open ↗Referência
CVE-2026-5204
Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflow
41RISK
open ↗Referência
CVE-2026-14686
HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison
33RISK
open ↗Referência
CVE-2010-1600
SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker
23RISK
open ↗Referência
CVE-2014-4872
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbit
60RISK
open ↗Referência
CVE-2010-1472
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attac
43RISK
open ↗Referência
CVE-2010-1656
SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute a
23RISK
open ↗Referência
CVE-2026-14770
SourceCodester Class and Exam Timetabling System edit_room.php sql injection
33RISK
open ↗Referência
CVE-2018-10712
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RISK
open ↗Referência
CVE-2010-4983
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗Referência
CVE-2026-14731
itsourcecode Hospital Management System patientreport.php sql injection
33RISK
open ↗Referência
CVE-2026-14701
code-projects Internship Management System Password Change Endpoint change_password.php sql injection
33RISK
open ↗Referência
CVE-2026-4974
Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption
41RISK
open ↗Referência
CVE-2026-14698
SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload
33RISK
open ↗Referência
CVE-2026-13573
llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow
33RISK
open ↗Referência
CVE-2026-9302
546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.