Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits

32,195CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecent popular risk

20,003 exploits

Referência

CVE-2015-7944

CVE-2015-7944—

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

28RISK

open ↗

Referência

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

CVE-2008-5587—

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is ena

43RISK

open ↗

Referência

CVE-2008-6264

CVE-2008-6264—

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência

CVE-2023-32749

CVE-2023-32749HIGH

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying t

46RISK

open ↗

Referência

CVE-2019-11080

CVE-2019-11080—

Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 2

28RISK

open ↗

Referência

CVE-2013-1597

CVE-2013-1597—

A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ

28RISK

open ↗

Referência

CVE-2022-3792

CVE-2022-3792CRITICAL

SQL Injection in GullsEye Terminal Operating System

53RISK

open ↗

Referência

CVE-2022-3792

CVE-2022-3792CRITICAL

SQL Injection in GullsEye Terminal Operating System

53RISK

open ↗

Referência

CVE-2015-9098

CVE-2015-9098—

In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mon

28RISK

open ↗

Referência

CVE-2014-4170

CVE-2014-4170—

A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric

28RISK

open ↗

Referência

CVE-2016-5679

CVE-2016-5679—

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticat

28RISK

open ↗

Referência

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1669—

The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers

28RISK

open ↗

Referência

CVE-2018-9842

CVE-2018-9842—

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISK

open ↗

Referência

CVE-2018-9842

CVE-2018-9842—

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISK

open ↗

Referência

CVE-2018-9842

CVE-2018-9842—

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISK

open ↗

Referência

CVE-2010-3127

CVE-2010-3127—

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers

28RISK

open ↗

Referência

CVE-2010-3426

CVE-2010-3426—

Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo

43RISK

open ↗

Referência

CVE-2010-3426

CVE-2010-3426—

Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo

43RISK

open ↗

Referência

CVE-2012-5106

CVE-2012-5106—

Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via

28RISK

open ↗

Referência

CVE-2019-4013

CVE-2019-4013CRITICAL

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root pr

53RISK

open ↗

Referência

CVE-2025-9090

CVE-2025-9090MEDIUM

Tenda AC20 Telnet Service telnet websFormDefine command injection

38RISK

open ↗

Referência

CVE-2016-9838

CVE-2016-9838—

An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of

28RISK

open ↗

Referência

CVE-2019-6445

CVE-2019-6445—

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd

28RISK

open ↗

Referência

CVE-2022-22832

CVE-2022-22832—

An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/u

28RISK

open ↗

Referência

CVE-2010-0944

CVE-2010-0944—

Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to

43RISK

open ↗

Referência

CVE-2017-9080

CVE-2017-9080—

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile

50RISK

open ↗

Referência

CVE-2010-0944

CVE-2010-0944—

Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to

43RISK

open ↗

Referência

CVE-2010-1304

CVE-2010-1304—

Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! al

43RISK

open ↗

Referência

CVE-2015-2068

CVE-2015-2068—

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server a

43RISK

open ↗

Referência

CVE-2015-2068

CVE-2015-2068—

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server a

43RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.