Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2026-11344
code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload
33RISK
open ↗Referência
CVE-2018-18772
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as dem
23RISK
open ↗Referência
Flowise 1.6.5 - Authentication Bypass
An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted sc
68RISK
open ↗Referência
CVE-2026-83743
invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization
33RISK
open ↗Referência✓ VexDay Proof
phpDynaSite 3.2.2 - 'racine' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute ar
23RISK
open ↗Referência
CVE-2026-82697
sambitraj Student-Management-System session_start cookie httponly flag
33RISK
open ↗Referência
CVE-2022-45899
Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as
33RISK
open ↗Referência
CVE-2024-33724
SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.
48RISK
open ↗Referência
CVE-2026-7709
janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization
33RISK
open ↗Referência
CVE-2026-7708
Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service
33RISK
open ↗Referência
CVE-2026-7700
langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection
33RISK
open ↗Referência
CVE-2026-7698
Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection
33RISK
open ↗Referência
CVE-2026-7697
AMTT Hotel Broadband Operation System cardhand_submit.php sql injection
33RISK
open ↗Referência
CVE-2026-7696
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5Files unrestricted upload
33RISK
open ↗Referência
CVE-2026-7695
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMinAvgValue sql injection
33RISK
open ↗Referência
CVE-2026-77006
WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal
48RISK
open ↗Referência
CVE-2026-89260
MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint
41RISK
open ↗Referência
CVE-2026-107237
Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live
41RISK
open ↗Referência
CVE-2026-106932
Moloni < 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoice
33RISK
open ↗Referência
CVE-2026-114040
DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal
33RISK
open ↗Referência
CVE-2026-72704 — Rocq Guard Checker Trusts Corrupted Recursive Tree After Transport
Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport
33RISK
open ↗Referência
CVE-2026-8738
Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error
33RISK
open ↗Referência
CVE-2026-8737
Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication
33RISK
open ↗Referência
CVE-2026-8736
Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal
28RISK
open ↗Referência
CVE-2026-8735
Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserialization
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.