Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,902cataloged exploits

34,597CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,624GitHub PoC 13,727VulnCheck XDB 8,410Nuclei 4,231Metasploit 3,467✓ verified onlyrecent popular risk

21,624 exploits

Referência

CVE-2010-4517

CVE-2010-4517—

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is

23RISK

open ↗

Referência

CVE-2010-4566

CVE-2010-4566—

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and

43RISK

open ↗

Referência

CVE-2010-2610

CVE-2010-2610—

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Referência

CVE-2010-4598

CVE-2010-4598—

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary f

28RISK

open ↗

Referência✓ VexDay Proof

Mambo Component garyscookbook 1.1.1 - SQL Injection

CVE-2008-1137—webappsphp

SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla!

23RISK

open ↗

Referência✓ VexDay Proof

Web Calendar 4.1 - Blind SQL Injection

CVE-2008-1954—webappsphp

SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

Kolifa.net Download Script 1.2 - 'id' SQL Injection

CVE-2008-4054—webappsphp

SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

TR News 2.1 - 'nb' SQL Injection

CVE-2008-1957—webappsphp

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

CVE-2008-4889—webappsphp

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to exe

23RISK

open ↗

Referência✓ VexDay Proof

Pro Traffic One - 'poll_results.php' SQL Injection

CVE-2008-6214—webappsphp

SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arb

23RISK

open ↗

Referência

CVE-2010-4604

CVE-2010-4604—

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in

23RISK

open ↗

Referência

CVE-2010-4609

CVE-2010-4609—

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência

CVE-2007-5180

CVE-2007-5180—

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência

CVE-2010-4614

CVE-2010-4614—

SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands vi

23RISK

open ↗

Referência

CVE-2010-4615

CVE-2010-4615—

Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência

CVE-2026-4181

CVE-2026-4181CRITICAL

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

48RISK

open ↗

Referência

CVE-2026-4184

CVE-2026-4184CRITICAL

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

48RISK

open ↗

Referência

CVE-2026-4183

CVE-2026-4183CRITICAL

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

48RISK

open ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISK

open ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISK

open ↗

Referência

CVE-2012-4877

CVE-2012-4877—

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remo

23RISK

open ↗

Referência

CVE-2018-12904

CVE-2018-12904—

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause

23RISK

open ↗

Referência

CVE-2008-4142

CVE-2008-4142—

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RISK

open ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RISK

open ↗

Referência✓ VexDay Proof

YenerTurk Haber Script 1.0 - SQL Injection

CVE-2006-4064—webappsasp

SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

Yblog 0.2.2.2 - Cross-Site Scripting / SQL Injection

CVE-2008-2669—webappsphp

Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1)

23RISK

open ↗

Referência✓ VexDay Proof

E-PHP CMS - 'article.php' SQL Injection

CVE-2008-4142—webappsphp

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4205—webappsphp

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitra

23RISK

open ↗

Referência✓ VexDay Proof

NetRisk 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-4887—webappsphp

SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.