Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2016-1846
CVE-2016-1846—
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows a
23RISK
open ↗
Referência
CVE-2026-87916
CVE-2026-87916MEDIUM
WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
33RISK
open ↗
Referência
CVE-2026-82305
CVE-2026-82305MEDIUM
YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title
33RISK
open ↗
Referência
CVE-2026-18042
CVE-2026-18042MEDIUM
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation
33RISK
open ↗
Referência
Sanitized XenForo write-up and proof of concept for CVE-2026-73314.
CVE-2026-73314HIGH
XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook
41RISK
open ↗
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMunder attack
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
Referência
CVE-2026-113392
CVE-2026-113392MEDIUM
DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
33RISK
open ↗
Referência
CVE-2026-86297
CVE-2026-86297CRITICAL
D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
48RISK
open ↗
Referência✓ VexDay Proof
Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method
CVE-2007-4902—remotewindows
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co
23RISK
open ↗
Referência✓ VexDay Proof
EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities
CVE-2007-5110—remotewindows
Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e
23RISK
open ↗
Referência
CVE-2026-105156
CVE-2026-105156MEDIUM
YzmCMS MD5 system.func.php password weak password hash
33RISK
open ↗
Referência
CVE-2026-104118
CVE-2026-104118MEDIUM
Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
33RISK
open ↗
Referência
CVE-2026-17005
CVE-2026-17005MEDIUM
Horizontal Scrolling Announcements <= 2.6 - Contributor+ Stored XSS via Style Field
33RISK
open ↗
Referência
CVE-2026-105134
CVE-2026-105134CRITICALunder attack
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
100RISK
open ↗
Referência
CVE-2026-105133
CVE-2026-105133MEDIUMunder attack
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
100RISK
open ↗
Referência✓ VexDay Proof
EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities
CVE-2007-5111—remotewindows
A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (
23RISK
open ↗
Referência
CVE-2016-2494
CVE-2016-2494—
Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before
23RISK
open ↗
Referência
CVE-2026-19889
CVE-2026-19889HIGH
Server-Side Request Forgery (SSRF) in GitLab AI Gateway
41RISK
open ↗
Referência
CVE-2026-77017
CVE-2026-77017HIGH
Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment
41RISK
open ↗
Referência
CVE-2026-4523
CVE-2026-4523LOW
Missing Authorization in GitLab
28RISK
open ↗
Referência
CVE-2026-102372
CVE-2026-102372MEDIUM
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
33RISK
open ↗
Referência★ 1
Original research and PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler
CVE-2026-76071CRITICAL
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter
48RISK
open ↗
Referência
CVE-2026-78182
CVE-2026-78182MEDIUM
Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection
33RISK
open ↗
Referência
CVE-2026-103533
CVE-2026-103533LOW
David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal
28RISK
open ↗
Referência
CVE-2026-47080
CVE-2026-47080LOW
CDATA Section Breakout via Unsanitised ]]> in xml_builder
28RISK
open ↗
Referência
CVE-2026-14196
CVE-2026-14196MEDIUM
WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR
33RISK
open ↗
Referência
CVE-2026-13175
CVE-2026-13175MEDIUM
Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR
33RISK
open ↗
Referência
CVE-2026-12983
CVE-2026-12983HIGH
Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection
41RISK
open ↗
Referência
CVE-2021-26085
CVE-2021-26085MEDIUMunder attackransomware
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriza
100RISK
open ↗
Referência
CVE-2026-19919
CVE-2026-19919MEDIUM
code-projects Online Shopping System Login login.php sql injection
33RISK
open ↗
← previouspage 867 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.