Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,652cataloged exploits

34,545CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,581GitHub PoC 13,708VulnCheck XDB 8,225Nuclei 4,228Metasploit 3,467✓ verified onlyrecent popular risk

21,554 exploits

Referência✓ VexDay Proof

Mambo Component Pearl 1.6 - Multiple Remote File Inclusions

CVE-2006-3340—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is ena

28RISK

open ↗

Referência✓ VexDay Proof

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

CVE-2008-0224—webappsphp

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attacke

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component joovideo 1.2.2 - 'id' SQL Injection

CVE-2008-1460—webappsphp

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote a

23RISK

open ↗

Referência✓ VexDay Proof

iGaming CMS 1.3.1/1.5 - SQL Injection

CVE-2008-0255—webappsphp

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arb

23RISK

open ↗

Referência✓ VexDay Proof

PHP Classifieds Script 05122008 - SQL Injection

CVE-2008-2453—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência✓ VexDay Proof

SunByte e-Flower - 'id' SQL Injection

CVE-2008-5969—webappsphp

SQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

CVE-2008-6182—webappsphp

SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows r

23RISK

open ↗

Referência✓ VexDay Proof

Peel Shopping 3.1 - 'rubid' SQL Injection

CVE-2008-6892—webappsphp

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.3 - Multiple Local File Inclusions

CVE-2008-7055—webappsphp

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include

23RISK

open ↗

Referência

CVE-2010-2317

CVE-2010-2317—

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência

CVE-2009-2340

CVE-2009-2340—

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RISK

open ↗

Referência

CVE-2012-1023

CVE-2012-1023—

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary

23RISK

open ↗

Referência

CVE-2017-6086

CVE-2017-6086—

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.1

23RISK

open ↗

Referência

CVE-2010-4801

CVE-2010-4801—

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute

23RISK

open ↗

Referência

CVE-2010-4801

CVE-2010-4801—

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute

23RISK

open ↗

Referência

CVE-2025-34112

CVE-2025-34112CRITICAL

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

63RISK

open ↗

Referência

CVE-2021-22557

CVE-2021-22557MEDIUM

Code execution in SLO Generator via YAML Payload

33RISK

open ↗

Referência

CVE-2023-3526

CVE-2023-3526CRITICAL

PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

48RISK

open ↗

Referência

CVE-2012-5104

CVE-2012-5104—

Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attacke

23RISK

open ↗

Referência

CVE-2014-3992

CVE-2014-3992—

Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary S

23RISK

open ↗

Referência

CVE-2006-3362

CVE-2006-3362—

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) G

23RISK

open ↗

Referência✓ VexDay Proof

Osprey 1.0 - 'GetRecord.php' Remote File Inclusion

CVE-2006-6631—webappsphp

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers t

23RISK

open ↗

Referência✓ VexDay Proof

MultiCart 1.0 - Blind SQL Injection

CVE-2007-5261—webappsphp

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6124—webappsphp

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject

23RISK

open ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.6 - SQL Injection

CVE-2008-1726—webappsphp

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

Tribiq CMS 5.0.10a (Windows) - Local File Inclusion

CVE-2008-4894—webappsphp

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10

23RISK

open ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5728—webappsphp

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and regi

23RISK

open ↗

Referência

CVE-2010-1740

CVE-2010-1740—

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência

CVE-2010-1713

CVE-2010-1713—

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência

CVE-2010-1713

CVE-2010-1713—

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.