Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,902cataloged exploits
34,597CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,624GitHub PoC 13,727VulnCheck XDB 8,410Nuclei 4,231Metasploit 3,467✓ verified onlyrecentpopularrisk
21,624 exploits
Referência
CVE-2026-13583
CVE-2026-13583HIGH
Edimax EW-7478APC POST Request formUSBFolder buffer overflow
41RISK
open ↗
Referência
CVE-2026-13582
CVE-2026-13582HIGH
Edimax EW-7478APC POST Request formUSBAccount buffer overflow
41RISK
open ↗
Referência
CVE-2026-13581
CVE-2026-13581MEDIUM
Edimax EW-7478APC POST Request formStaDrvSetup os command injection
33RISK
open ↗
Referência
CVE-2026-40521
CVE-2026-40521HIGH
FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload
41RISK
open ↗
Referência
CVE-2026-13567
CVE-2026-13567MEDIUM
code-projects Online Music Site POST Request Feedback.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-40522
CVE-2026-40522HIGH
FrontAccounting < 2.4.20 SQL Injection via rep601.php
41RISK
open ↗
Referência
CVE-2026-13565
CVE-2026-13565MEDIUM
SourceCodester Class and Exam Timetabling System edit_class1.php sql injection
33RISK
open ↗
Referência
CVE-2026-13563
CVE-2026-13563HIGH
Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow
41RISK
open ↗
Referência
CVE-2026-13561
CVE-2026-13561MEDIUM
Edimax EW-7478APC POST Request formiNICbasic os command injection
33RISK
open ↗
Referência
CVE-2026-10835
CVE-2026-10835HIGH
SALESmanago & Leadoo < 3.11.3 - Subscriber+ SQL Injection
41RISK
open ↗
Referência
CVE-2026-10823
CVE-2026-10823HIGH
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
56RISK
open ↗
Referência
CVE-2025-10268
CVE-2025-10268MEDIUM
Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal
33RISK
open ↗
Referência
CVE-2026-57522
CVE-2026-57522LOW
Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates
28RISK
open ↗
Referência
CVE-2026-57521
CVE-2026-57521MEDIUM
Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController
33RISK
open ↗
Referência
CVE-2026-0934
CVE-2026-0934LOW
Incorrect Authorization in GitLab
28RISK
open ↗
Referência
CVE-2026-1606
CVE-2026-1606MEDIUM
Improper Control of Generation of Code ('Code Injection') in GitLab
33RISK
open ↗
Referência
CVE-2026-2238
CVE-2026-2238MEDIUM
Missing Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-3176
CVE-2026-3176LOW
Missing Authorization in GitLab
28RISK
open ↗
Referência
CVE-2026-5309
CVE-2026-5309MEDIUM
Authorization Bypass Through User-Controlled Key in GitLab
33RISK
open ↗
Referência
CVE-2026-5796
CVE-2026-5796MEDIUM
Incorrect Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-5952
CVE-2026-5952MEDIUM
Incorrect Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-10712
CVE-2026-10712HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RISK
open ↗
Referência
CVE-2026-12053
CVE-2026-12053HIGH
Insertion of Sensitive Information into Log File in GitLab
41RISK
open ↗
Referência
CVE-2026-10749
CVE-2026-10749HIGH
Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData
41RISK
open ↗
Referência
CVE-2026-10735
CVE-2026-10735HIGH
ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
41RISK
open ↗
Referência
CVE-2026-10531
CVE-2026-10531MEDIUM
AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute
33RISK
open ↗
Referência
CVE-2026-56115
CVE-2026-56115HIGH
Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass
41RISK
open ↗
Referência
CVE-2026-56109
CVE-2026-56109HIGH
ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c
41RISK
open ↗
Referência
CVE-2026-6858
CVE-2026-6858HIGH
Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS
41RISK
open ↗
Referência
CVE-2026-4259
CVE-2026-4259HIGH
Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctions
41RISK
open ↗
← previouspage 257 / 721next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.