Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,678cataloged exploits
40,947CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,430VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2026-85398
CVE-2026-85398MEDIUM
code-projects Hospital Information System viewReq.php viewReq sql injection
33RISK
open ↗
Referência✓ VexDay Proof
AIDeX Mini-WebServer 1.1 - Remote Crash (Denial of Service)
CVE-2006-6855—doswindows
AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a flood
23RISK
open ↗
Referência✓ VexDay Proof
PHP-Update 2.7 - Multiple Vulnerabilities
CVE-2006-6879—webappsphp
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated us
23RISK
open ↗
Referência✓ VexDay Proof
Sony CONNECT Player 4.x - '.m3u' Local Stack Overflow
CVE-2007-5709—localwindows
Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code
28RISK
open ↗
Referência
MarcomCentral FusionPro VDP Creator < 10.0 - Directory Traversal
CVE-2019-7751—webappswindows
A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, for
28RISK
open ↗
Referência
CVE-2019-8452
CVE-2019-8452—
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security clien
23RISK
open ↗
Referência
CVE-2026-100881
CVE-2026-100881LOW
zhistaredu StarTraining application.yml cross site scripting
28RISK
open ↗
Referência
CVE-2026-100877
CVE-2026-100877MEDIUM
mathurvishal CloudClassroom-PHP-Project registrationform.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-85186
CVE-2026-85186MEDIUM
itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload
33RISK
open ↗
Referência
CVE-2026-114741
CVE-2026-114741LOW
WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR
28RISK
open ↗
Referência
CVE-2026-114740
CVE-2026-114740MEDIUM
WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizard
33RISK
open ↗
Referência
CVE-2026-111982
CVE-2026-111982HIGH
Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change
41RISK
open ↗
Referência
CVE-2023-3219
CVE-2023-3219—
EventON < 2.1.2 - Unauthenticated Post Access via IDOR
38RISK
open ↗
Referência✓ VexDay Proof
Adult Directory - 'cat_id' SQL Injection
CVE-2007-4056—webappsphp
SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Referência
CVE-2018-0837
CVE-2018-0837—
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISK
open ↗
Referência
CVE-2026-84832
CVE-2026-84832HIGH
Unsafe deserialization in the REST interface
21RISK
open ↗
Referência✓ VexDay Proof
NUNE News Script 2.0pre2 - Multiple Remote File Inclusions
CVE-2007-0143—webappsphp
Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitra
23RISK
open ↗
Referência
CVE-2018-0860
CVE-2018-0860—
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISK
open ↗
Referência
CVE-2018-0972
CVE-2018-0972—
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio
23RISK
open ↗
Referência
CVE-2018-0974
CVE-2018-0974—
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio
23RISK
open ↗
Referência
CVE-2026-83613
CVE-2026-83613HIGH
xmldom: Quadratic-time attribute deduplication
41RISK
open ↗
Referência
CVE-2018-10079
CVE-2018-10079—
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users
23RISK
open ↗
Referência
CVE-2026-77792
CVE-2026-77792HIGH
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
41RISK
open ↗
Referência
CVE-2021-48015
CVE-2021-48015HIGH
JeeWMS Path Traversal via showOrDownByurl.do
41RISK
open ↗
Referência
CVE-2026-82834
CVE-2026-82834MEDIUM
Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control
33RISK
open ↗
Referência
CVE-2026-82833
CVE-2026-82833MEDIUM
Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control
33RISK
open ↗
Referência
CVE-2020-0601
CVE-2020-0601HIGHunder attack
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
Referência✓ VexDay Proof
phpBP RC3 (2.204) - SQL Injection / Remote Code Execution
CVE-2007-0369—webappsphp
SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands v
23RISK
open ↗
Referência✓ VexDay Proof
PHP Blue Dragon CMS 3.0.0 - SQL Injection
CVE-2007-4312—webappsphp
SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência✓ VexDay Proof
PHP blue dragon CMS 3.0.0 - Remote File Inclusion
CVE-2007-4313—webappsphp
PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 all
35RISK
open ↗
← previouspage 818 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.