Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2026-12774
BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery
33RISK
open ↗Referência
CVE-2026-12771
BerriAI litellm M2M JWT user_api_key_auth.py improper authorization
28RISK
open ↗Referência
CVE-2022-50972
WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php
48RISK
open ↗Referência
CVE-2026-115303
Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping
28RISK
open ↗Referência
CVE-2018-16763
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗Referência
CVE-2026-118685
ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard
33RISK
open ↗Referência
CVE-2026-10877
SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection
33RISK
open ↗Referência
CVE-2026-10876
SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
33RISK
open ↗Referência
CVE-2026-25551
Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service
41RISK
open ↗Referência
CVE-2021-28419
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads
28RISK
open ↗Referência
CVE-2026-110135
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force
41RISK
open ↗Referência
CVE-2026-74923
Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
33RISK
open ↗Referência✓ VexDay Proof
Microsoft Windows - 'WRITE_ANDX' SMB Command Handling Kernel Denial of Service (Metasploit)
srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1
50RISK
open ↗Referência✓ VexDay Proof
Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is e
23RISK
open ↗Referência
CVE-2026-116725
gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index
33RISK
open ↗Referência
CVE-2026-11312
bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity
33RISK
open ↗Referência
CVE-2026-9544
Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection
33RISK
open ↗Referência
CVE-2026-9543
Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection
48RISK
open ↗Referência
CVE-2019-1003002
A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src
60RISK
open ↗Referência
CVE-2026-110658
Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse
33RISK
open ↗Referência
CVE-2026-10722
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.