Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2026-15238
CVE-2026-15238MEDIUM
Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR
33RISK
open ↗
Referência
CVE-2026-15237
CVE-2026-15237MEDIUM
Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint
33RISK
open ↗
Referência
CVE-2026-107166
CVE-2026-107166MEDIUM
Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
33RISK
open ↗
Referência
CVE-2026-9478
CVE-2026-9478CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection
48RISK
open ↗
Referência✓ VexDay Proof
Apple Mac OSX Safari 2.0.3 (417.9.2) - 'ROWSPAN' Denial of Service (PoC)
CVE-2006-2019—dososx
Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CP
23RISK
open ↗
Referência✓ VexDay Proof
Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion
CVE-2006-2142—webappsphp
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers
23RISK
open ↗
Referência✓ VexDay Proof
Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion
CVE-2006-2149—webappsphp
PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_
23RISK
open ↗
Referência
CVE-2026-9428
CVE-2026-9428HIGH
Tenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflow
41RISK
open ↗
Referência
CVE-2018-25350
CVE-2018-25350CRITICAL
userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php
48RISK
open ↗
Referência
CVE-2018-25340
CVE-2018-25340HIGH
Smartshop 1 SQL Injection via category.php
41RISK
open ↗
Referência
CVE-2026-9306
CVE-2026-9306MEDIUM
QuantumNous new-api Midjourney Image Relay Endpoint relay-router.go GetByOnlyMJId authorization
33RISK
open ↗
Referência
CVE-2026-9305
CVE-2026-9305MEDIUM
QuantumNous new-api self Endpoint topup.go SearchAllTopUps sql injection
33RISK
open ↗
Referência
CVE-2026-9304
CVE-2026-9304LOW
calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgery
28RISK
open ↗
Referência
CVE-2026-9303
CVE-2026-9303MEDIUM
calcom cal.diy cross-site request forgery
33RISK
open ↗
Referência
CVE-2026-87782
CVE-2026-87782HIGH
Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator
41RISK
open ↗
Referência
CVE-2026-17044
CVE-2026-17044HIGH
WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid
41RISK
open ↗
Referência
CVE-2026-14767
CVE-2026-14767MEDIUM
CodeAstro Ecommerce Website POST Parameter confirm.php sql injection
33RISK
open ↗
Referência
CVE-2026-14766
CVE-2026-14766MEDIUM
CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection
33RISK
open ↗
Referência
CVE-2026-14764
CVE-2026-14764MEDIUM
code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection
33RISK
open ↗
Referência
CVE-2026-14763
CVE-2026-14763MEDIUM
code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection
33RISK
open ↗
Referência✓ VexDay Proof
TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)
CVE-2006-2151—webappsphp
PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab
28RISK
open ↗
Referência✓ VexDay Proof
X7 Chat 2.0 - 'help_file' Remote Command Execution
CVE-2006-2156—webappsphp
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitr
23RISK
open ↗
Referência
CVE-2026-67216
CVE-2026-67216HIGH
cJSON cJSON_Compare Exponential Complexity Denial of Service
41RISK
open ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RISK
open ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RISK
open ↗
Referência
CVE-2018-5723
CVE-2018-5723—
MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.
23RISK
open ↗
Referência
CVE-2026-94278
CVE-2026-94278MEDIUM
File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat
33RISK
open ↗
Referência
CVE-2026-89289
CVE-2026-89289MEDIUM
Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint
33RISK
open ↗
Referência
CVE-2018-5751
CVE-2018-5751—
The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev4
23RISK
open ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RISK
open ↗
← previouspage 844 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.