Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,644cataloged exploits
40,922CVEs with public exploitation
24,696lab-tested
AllReferência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,560 exploits
Referência
CVE-2026-63769
CVE-2026-63769MEDIUM
Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method
33RISK
open ↗
Referência
CVE-2016-3473
CVE-2016-3473—
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0,
28RISK
open ↗
Referência
CVE-2019-13720
CVE-2019-13720HIGHunder attack
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap
83RISK
open ↗
Referência
CVE-2026-19968
CVE-2026-19968MEDIUM
Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow
33RISK
open ↗
Referência
CVE-2026-19966
CVE-2026-19966MEDIUM
CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization
33RISK
open ↗
Referência
CVE-2026-19967
CVE-2026-19967MEDIUM
Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow
33RISK
open ↗
Referência
CVE-2016-0492
CVE-2016-0492—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RISK
open ↗
Referência
CVE-2016-0492
CVE-2016-0492—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RISK
open ↗
Referência✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
CVE-2006-1778—webappsphp
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute ar
23RISK
open ↗
Referência
CVE-2026-8155
CVE-2026-8155MEDIUM
BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR
33RISK
open ↗
Referência
CVE-2026-16630
CVE-2026-16630MEDIUM
syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
33RISK
open ↗
Referência
CVE-2016-5847
CVE-2016-5847—
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard l
23RISK
open ↗
Referência
CVE-2026-19844
CVE-2026-19844HIGH
TOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflow
41RISK
open ↗
Referência
CVE-2019-15107
CVE-2019-15107CRITICALunder attackransomware
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
Referência
CVE-2026-107449
CVE-2026-107449LOW
linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enha
28RISK
open ↗
Referência
CVE-2026-8987
CVE-2026-8987CRITICAL
Authenticated Heap Overflow
48RISK
open ↗
Referência✓ VexDay Proof
Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service
CVE-2007-0120—doswindows
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of ser
23RISK
open ↗
Referência
CVE-2016-0173
CVE-2016-0173—
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
23RISK
open ↗
Referência
CVE-2016-6602
CVE-2016-6602—
ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependen
50RISK
open ↗
Referência
CVE-2017-0561
CVE-2017-0561—
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
28RISK
open ↗
Referência
CVE-2026-86263
CVE-2026-86263MEDIUM
sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
33RISK
open ↗
Referência
CVE-2026-59255
CVE-2026-59255HIGH
BloodHound Missing Authorization on Custom Node Management API
41RISK
open ↗
Referência
CVE-2026-103686
CVE-2026-103686MEDIUM
rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting
33RISK
open ↗
Referência
CVE-2016-1721
CVE-2016-1721—
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o
23RISK
open ↗
Referência
CVE-2026-86260
CVE-2026-86260MEDIUM
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
33RISK
open ↗
Referência
CVE-2026-58660
CVE-2026-58660HIGH
Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop
41RISK
open ↗
Referência
CVE-2016-2776
CVE-2016-2776—
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly
60RISK
open ↗
Referência
CVE-2026-81022
CVE-2026-81022MEDIUM
SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak
33RISK
open ↗
Referência
CVE-2026-86779
CVE-2026-86779LOW
Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
28RISK
open ↗
Referência
CVE-2016-3115
CVE-2016-3115MEDIUM
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to
45RISK
open ↗
← previouspage 810 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.