Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
25,887 exploits
Referência
CVE-2014-7235
CVE-2014-7235—
htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9,
35RISK
open ↗
Referência✓ VexDay Proof
Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection
CVE-2008-5864—webappsphp
SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System
23RISK
open ↗
Referência
CVE-2017-16651
CVE-2017-16651HIGHunder attack
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary file
98RISK
open ↗
Referência
CVE-2017-0061
CVE-2017-0061—
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and
35RISK
open ↗
Referência✓ VexDay Proof
Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion
CVE-2006-4368—webappsphp
PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows rem
23RISK
open ↗
Referência
CVE-2022-4060
CVE-2022-4060CRITICAL
User Post Gallery <= 2.19 - Unauthenticated RCE
75RISK
open ↗
Referência
CVE-2017-6526
CVE-2017-6526—
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution throug
50RISK
open ↗
Referência
CVE-2018-3811
CVE-2018-3811—
SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthentica
35RISK
open ↗
Referência
CVE-2020-11738
CVE-2020-11738HIGHunder attack
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver
100RISK
open ↗
Referência
CVE-2013-3591
CVE-2013-3591—
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
50RISK
open ↗
Referência
CVE-2020-11738
CVE-2020-11738HIGHunder attack
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver
100RISK
open ↗
Referência
CVE-2022-32272
CVE-2022-32272—
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5
23RISK
open ↗
Referência✓ VexDay Proof
Alstrasoft e-Friends 4.85 - Remote Command Execution
CVE-2006-4913—webappsphp
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to in
23RISK
open ↗
Referência
CVE-2011-3490
CVE-2011-3490—
Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to
35RISK
open ↗
Referência★ 32
CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution
CVE-2025-64155CRITICAL
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
60RISK
open ↗
Referência
CVE-2025-64155-hunter
CVE-2025-64155CRITICAL
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
60RISK
open ↗
Referência✓ VexDay Proof
Joomla! Component com_allhotels - Blind SQL Injection
CVE-2008-5874—webappsphp
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack
23RISK
open ↗
Referência
CVE-2016-4232
CVE-2016-4232—
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632
35RISK
open ↗
Referência
CVE-2018-0114
CVE-2018-0114—
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker
35RISK
open ↗
Referência
CVE-2018-5767
CVE-2018-5767—
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code
35RISK
open ↗
Referência
CVE-2026-108921
CVE-2026-108921MEDIUM
KusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authentication
33RISK
open ↗
Referência
CVE-2026-108918
CVE-2026-108918CRITICAL
Edimax BR-6208AC formWlanMP command injection
48RISK
open ↗
Referência
CVE-2026-108917
CVE-2026-108917CRITICAL
Edimax BR-6208AC formAutoFWupgrade command injection
48RISK
open ↗
Referência✓ VexDay Proof
Elkagroup Image Gallery 1.0 - Arbitrary File Upload
CVE-2009-1446—webappsphp
Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to
23RISK
open ↗
Referência✓ VexDay Proof
Pragyan CMS 2.6.4 - Multiple SQL Injections
CVE-2009-1480—webappsphp
SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2013-3630
CVE-2013-3630—
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell
50RISK
open ↗
Referência
CVE-2026-108899
CVE-2026-108899MEDIUM
tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization
33RISK
open ↗
Referência
CVE-2020-0787
CVE-2020-0787HIGHunder attackransomware
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISK
open ↗
Referência
CVE-2016-6210
CVE-2016-6210MEDIUM
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static
70RISK
open ↗
Referência
CVE-2020-13166
CVE-2020-13166—
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcod
60RISK
open ↗
← previouspage 93 / 863next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.