Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
26,571 exploits
Referência
CVE-2017-17600
CVE-2017-17600—
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
23RISK
open ↗
Referência
CVE-2026-74926
CVE-2026-74926HIGH
MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint
41RISK
open ↗
Referência
CVE-2017-17600
CVE-2017-17600—
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
23RISK
open ↗
Referência
CVE-2017-17601
CVE-2017-17601—
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
23RISK
open ↗
Referência
CVE-2026-90843
CVE-2026-90843MEDIUM
SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection
33RISK
open ↗
Referência
CVE-2017-17608
CVE-2017-17608—
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RISK
open ↗
Referência
CVE-2026-90619
CVE-2026-90619MEDIUM
0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection
33RISK
open ↗
Referência
CVE-2026-97879
CVE-2026-97879MEDIUM
zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication
33RISK
open ↗
Referência
CVE-2026-86842
CVE-2026-86842MEDIUM
Real3D Flipbook Lite < 5.4 - Author+ Content Deletion and Stored XSS via Global Settings Overwrite
33RISK
open ↗
Referência
CVE-2026-95820
CVE-2026-95820MEDIUM
anirbandutta9 College-Notes-Gallery userprofile.php admin1 unrestricted upload
33RISK
open ↗
Referência
CVE-2026-92774
CVE-2026-92774MEDIUM
Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission
33RISK
open ↗
Referência
CVE-2026-90493
CVE-2026-90493CRITICAL
Tonec Internet Download Manager Kernel Driver idmwfp.sys access control
48RISK
open ↗
Referência
CVE-2026-90491
CVE-2026-90491MEDIUM
sanjevirau gsubs Electron index.js showQuerySuccessPage code injection
33RISK
open ↗
Referência
CVE-2026-82845
CVE-2026-82845CRITICAL
Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection
48RISK
open ↗
Referência
CVE-2026-82848
CVE-2026-82848MEDIUM
Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure
33RISK
open ↗
Referência
CVE-2026-82185
CVE-2026-82185MEDIUM
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset
33RISK
open ↗
Referência
CVE-2026-90876
CVE-2026-90876MEDIUM
SourceCodester Online Faculty Clearance System delete_requirement.php sql injection
33RISK
open ↗
Referência
CVE-2026-90850
CVE-2026-90850MEDIUM
PHPGurukul Hostel Management System manage-students.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-90828
CVE-2026-90828MEDIUM
GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
33RISK
open ↗
Referência
CVE-2026-90827
CVE-2026-90827MEDIUM
GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
33RISK
open ↗
Referência
CVE-2026-90803
CVE-2026-90803MEDIUM
GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow
33RISK
open ↗
Referência
CVE-2026-90802
CVE-2026-90802MEDIUM
GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference
33RISK
open ↗
Referência
CVE-2026-90796
CVE-2026-90796MEDIUM
itsourcecode Leave Management System index.php sql injection
33RISK
open ↗
Referência
CVE-2026-97877
CVE-2026-97877MEDIUM
zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
33RISK
open ↗
Referência
CVE-2026-96763
CVE-2026-96763MEDIUM
kvcache-ai mooncake MountSegment Request Processing segment.cpp access control
33RISK
open ↗
Referência
CVE-2026-96601
CVE-2026-96601MEDIUM
Abdurrab5 online-makeup-store Admin Login index.php sql injection
33RISK
open ↗
Referência
CVE-2026-95924
CVE-2026-95924MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php add sql injection
33RISK
open ↗
Referência
CVE-2026-95897
CVE-2026-95897MEDIUM
Dask Loader core.py from_npy_stack deserialization
33RISK
open ↗
Referência
CVE-2026-96272
CVE-2026-96272HIGH
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
41RISK
open ↗
Referência
CVE-2026-95868
CVE-2026-95868MEDIUM
AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection
33RISK
open ↗
← previouspage 872 / 886next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.