Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,644cataloged exploits
40,922CVEs with public exploitation
24,696lab-tested
AllReferência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,560 exploits
Referência
CVE-2026-4964
letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery
33RISK
open ↗Referência
CVE-2026-4963
huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
33RISK
open ↗Referência
CVE-2026-4961
Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow
41RISK
open ↗Referência
CVE-2026-4960
Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow
41RISK
open ↗Referência
CVE-2026-4959
OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication
33RISK
open ↗Referência
CVE-2026-4958
OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization
28RISK
open ↗Referência
CVE-2026-4957
OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file
33RISK
open ↗Referência
CVE-2026-4956
Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injection
33RISK
open ↗Referência
CVE-2026-4955
Shenzhen Ruiming Technology Streamax Crocus OperateStatistic.do sql injection
33RISK
open ↗Referência
CVE-2026-4954
mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection
33RISK
open ↗Referência
CVE-2026-4953
mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery
33RISK
open ↗Referência
CVE-2026-4910
Shenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do sql injection
33RISK
open ↗Referência
CVE-2026-42785
OpenKM 6.3.12 Remote Code Execution via Administrative Scripting
41RISK
open ↗Referência
CVE-2010-4997
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL co
23RISK
open ↗Referência
CVE-2026-18723
diaowen DWSurvey Survey Status up-survey-status.do improper authorization
33RISK
open ↗Referência
CVE-2026-34109
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php
48RISK
open ↗Referência
CVE-2018-15884
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.
23RISK
open ↗Referência
CVE-2014-5112
maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacha
23RISK
open ↗Referência
CVE-2018-16133
Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.
50RISK
open ↗Referência
CVE-2026-13562
Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow
41RISK
open ↗Referência
CVE-2014-3220
F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary u
28RISK
open ↗Referência
CVE-2026-13548
itsourcecode Hospital Management System doctortimings.php sql injection
33RISK
open ↗Referência
CVE-2014-3434
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,
23RISK
open ↗Referência
CVE-2022-1175
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor
63RISK
open ↗Referência
CVE-2026-56789
RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.