Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência✓ VexDay Proof
Bandwebsite 1.5 - 'LOGIN' Remote Add Admin
CVE-2006-6722—webappsphp
Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct requ
23RISK
open ↗
Referência
CVE-2026-13592
CVE-2026-13592MEDIUM
liftoff-sr CIPster EtherNet IP Message append out-of-bounds write
33RISK
open ↗
Referência
CVE-2026-34112
CVE-2026-34112CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php
48RISK
open ↗
Referência✓ VexDay Proof
RealPlayer 10.5 - ActiveX Control Denial of Service
CVE-2006-6759—doswindows
A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of s
23RISK
open ↗
Referência
CVE-2026-115303
CVE-2026-115303LOW
Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping
28RISK
open ↗
Referência
CVE-2018-16763
CVE-2018-16763—
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗
Referência
CVE-2026-93310
CVE-2026-93310MEDIUM
O-RAN-SC SMO OAM VES Collector allocation of resources
33RISK
open ↗
Referência
CVE-2026-118685
CVE-2026-118685MEDIUM
ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard
33RISK
open ↗
Referência
CVE-2026-10877
CVE-2026-10877MEDIUM
SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection
33RISK
open ↗
Referência
CVE-2026-10876
CVE-2026-10876MEDIUM
SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
33RISK
open ↗
Referência
CVE-2026-10870
CVE-2026-10870HIGH
Shibby Tomato Web UI rc start_dhcpc os command injection
41RISK
open ↗
Referência
CVE-2025-71316
CVE-2025-71316CRITICAL
SQLite sqldiff remote code execution via argument injection
48RISK
open ↗
Referência
CVE-2026-25551
CVE-2026-25551HIGH
Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service
41RISK
open ↗
Referência
CVE-2026-10813
CVE-2026-10813LOW
LMCache KV Cache utils.py hex_hash_to_int16 weak hash
28RISK
open ↗
Referência
CVE-2021-28419
CVE-2021-28419—
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads
28RISK
open ↗
Referência
CVE-2026-110135
CVE-2026-110135HIGH
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force
41RISK
open ↗
Referência
CVE-2026-74923
CVE-2026-74923MEDIUM
Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
33RISK
open ↗
Referência✓ VexDay Proof
Microsoft Windows - 'WRITE_ANDX' SMB Command Handling Kernel Denial of Service (Metasploit)
CVE-2008-4114—doswindows
srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1
50RISK
open ↗
Referência✓ VexDay Proof
Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities
CVE-2008-4206—webappsphp
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is e
23RISK
open ↗
Referência
CVE-2014-125137
CVE-2014-125137HIGH
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php
41RISK
open ↗
Referência✓ VexDay Proof
CMS Buzz - 'id' SQL Injection
CVE-2008-4374—webappsphp
SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the i
23RISK
open ↗
Referência
CVE-2026-10181
CVE-2026-10181HIGH
TRENDnet TEW-432BRP formSysCmd stack-based overflow
41RISK
open ↗
Referência
CVE-2026-9562
CVE-2026-9562MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control
33RISK
open ↗
Referência
CVE-2026-116725
CVE-2026-116725MEDIUM
gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index
33RISK
open ↗
Referência
CVE-2026-11312
CVE-2026-11312MEDIUM
bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity
33RISK
open ↗
Referência
CVE-2026-10878
CVE-2026-10878MEDIUM
D-Link DWR-M920 formSmsManage sub_41C8E8 command injection
33RISK
open ↗
Referência
CVE-2026-9544
CVE-2026-9544MEDIUM
Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection
33RISK
open ↗
Referência
CVE-2026-9543
CVE-2026-9543CRITICAL
Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection
48RISK
open ↗
Referência
CVE-2026-116506
CVE-2026-116506CRITICAL
TOTOLINK A950RG firewall.so apmib_set command injection
48RISK
open ↗
Referência
CVE-2019-1003002
CVE-2019-1003002—
A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src
60RISK
open ↗
← previouspage 835 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.