Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2020-10220
CVE-2020-10220—
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php
60RISK
open ↗
Referência
CVE-2026-77938
CVE-2026-77938HIGH
Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
41RISK
open ↗
Referência
CVE-2026-77937
CVE-2026-77937HIGH
Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
41RISK
open ↗
Referência
MLflow <=3.17.1 path traversal allows trace file writes outside the intended directory.
CVE-2026-53995HIGH
MLflow 3.17.1 and prior Path Traversal via Trace ID API
41RISK
open ↗
Referência
CVE-2026-101014
CVE-2026-101014MEDIUM
Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one
33RISK
open ↗
Referência
CVE-2020-11108
CVE-2020-11108—
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RISK
open ↗
Referência✓ VexDay Proof
LimeSurvey 4.1.11 - 'File Manager' Path Traversal
CVE-2020-11455—webappsphp
LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileM
60RISK
open ↗
Referência
CVE-2020-11456
CVE-2020-11456—
LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicati
45RISK
open ↗
Referência
CVE-2026-112302
CVE-2026-112302MEDIUM
kiwilan php-archive Extraction ArchiveZip.php extract path traversal
33RISK
open ↗
Referência
CVE-2026-112301
CVE-2026-112301MEDIUM
orbitale imagemagick-php Command.php font os command injection
33RISK
open ↗
Referência
CVE-2026-112252
CVE-2026-112252MEDIUM
Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection
33RISK
open ↗
Referência
CVE-2026-112251
CVE-2026-112251MEDIUM
antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect
33RISK
open ↗
Referência
CVE-2026-101010
CVE-2026-101010MEDIUM
aaPanel BaoTa data.py getData sql injection
33RISK
open ↗
Referência
CVE-2026-92996
CVE-2026-92996MEDIUM
Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done
33RISK
open ↗
Referência
CVE-2026-100899
CVE-2026-100899MEDIUM
DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection
33RISK
open ↗
Referência
CVE-2026-100884
CVE-2026-100884MEDIUM
Krayin laravel-crm attachment-download Endpoint acl.php resource injection
33RISK
open ↗
Referência
CVE-2026-100882
CVE-2026-100882MEDIUM
Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-100878
CVE-2026-100878MEDIUM
zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization
33RISK
open ↗
Referência
CVE-2015-3107
CVE-2015-3107—
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows
35RISK
open ↗
Referência
CVE-2015-3306
CVE-2015-3306CRITICALunder attack
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RISK
open ↗
Referência
CVE-2026-112013
CVE-2026-112013MEDIUM
libtta through 2.3 Divide by Zero via tta_decoder_init_get_info
33RISK
open ↗
Referência
CVE-2026-112012
CVE-2026-112012MEDIUM
libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count
33RISK
open ↗
Referência
CVE-2026-91830
CVE-2026-91830MEDIUM
Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie
33RISK
open ↗
Referência
CVE-2026-91833
CVE-2026-91833MEDIUM
WX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'attach' Parameter
33RISK
open ↗
Referência
CVE-2026-111221
CVE-2026-111221—
3RISK
open ↗
Referência
CVE-2026-110769
CVE-2026-110769HIGH
holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors
41RISK
open ↗
Referência
CVE-2020-14871
CVE-2020-14871CRITICALunder attack
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve
100RISK
open ↗
Referência
CVE-2015-6152
CVE-2015-6152—
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
35RISK
open ↗
Referência
CVE-2026-108708
CVE-2026-108708HIGH
Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil
41RISK
open ↗
Referência
CVE-2026-108674
CVE-2026-108674MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById
33RISK
open ↗
← previouspage 863 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.