Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,864cataloged exploits
40,957CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,439VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2018-15745
Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F
60RISK
open ↗Referência
CVE-2026-14864
JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
33RISK
open ↗Referência
CVE-2026-14841
King Addons for Elementor < 51.1.76 - Reflected XSS via Posts Grid Widget
33RISK
open ↗Referência
CVE-2026-14291
Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa
41RISK
open ↗Referência
CVE-2026-64824
Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore
48RISK
open ↗Referência
CVE-2026-16450
zsadmin2025 ZS-Admin MyBatis-Plus Tenant Plugin page getTenantId authorization
33RISK
open ↗Referência
CVE-2026-16124
nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery
33RISK
open ↗Referência
CVE-2026-16122
nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization
33RISK
open ↗Referência
CVE-2026-16121
nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization
33RISK
open ↗Referência
CVE-2026-16120
nextlevelbuilder GoClaw exec_approval.go extractBin name resolution
33RISK
open ↗Referência
CVE-2026-15513
Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection
33RISK
open ↗Referência
CVE-2026-15512
pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection
33RISK
open ↗Referência
CVE-2017-7494
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
100RISK
open ↗Referência
CVE-2017-15960
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.
23RISK
open ↗Referência
CVE-2019-19844
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address
35RISK
open ↗Referência
CVE-2026-90845
PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting
33RISK
open ↗Referência
CVE-2026-90844
PHPGurukul Daily Expense Tracker System Login index.php sql injection
33RISK
open ↗Referência
CVE-2026-10514
1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting
33RISK
open ↗Referência
CVE-2017-6090
Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authentica
60RISK
open ↗Referência
CVE-2017-15989
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.
23RISK
open ↗Referência
CVE-2026-82908
MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
48RISK
open ↗Referência
CVE-2026-24061
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISK
open ↗Referência
CVE-2017-15993
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.
23RISK
open ↗Referência
CVE-2017-16777
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a loc
23RISK
open ↗Referência
CVE-2026-77701
WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.