Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,008cataloged exploits
34,638CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,662GitHub PoC 13,743VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
21,662 exploits
Referência
CVE-2017-7446
CVE-2017-7446—
HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
23RISK
open ↗
Referência
CVE-2025-34101
CVE-2025-34101CRITICAL
Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter
63RISK
open ↗
Referência
CVE-2015-8258
CVE-2015-8258—
AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via v
23RISK
open ↗
Referência
CVE-2025-34101
CVE-2025-34101CRITICAL
Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter
63RISK
open ↗
Referência
CVE-2025-34101
CVE-2025-34101CRITICAL
Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter
63RISK
open ↗
Referência
CVE-2025-34101
CVE-2025-34101CRITICAL
Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter
63RISK
open ↗
Referência
CVE-2014-4643
CVE-2014-4643—
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a den
23RISK
open ↗
Referência
CVE-2010-5002
CVE-2010-5002—
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remot
23RISK
open ↗
Referência
CVE-2017-6020
CVE-2017-6020—
Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237
23RISK
open ↗
Referência
CVE-2025-12664
CVE-2025-12664HIGH
Improper Validation of Specified Quantity in Input in GitLab
41RISK
open ↗
Referência✓ VexDay Proof
BitsCast 0.13.0 - invalid string Remote Denial of Service
CVE-2007-2726—doswindows
BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with c
23RISK
open ↗
Referência✓ VexDay Proof
WebCalendar 1.0.4 - 'includedir' Remote File Inclusion
CVE-2008-2836—webappsphp
PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute ar
23RISK
open ↗
Referência✓ VexDay Proof
mUnky 0.0.1 - 'zone' Local File Inclusion
CVE-2008-2876—webappsphp
Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary l
23RISK
open ↗
Referência
CVE-2012-5913
CVE-2012-5913—
Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allo
38RISK
open ↗
Referência
CVE-2023-23956
CVE-2023-23956MEDIUM
A user can supply malicious HTML and JavaScript code that will be executed in the client browser
33RISK
open ↗
Referência
CVE-2023-23956
CVE-2023-23956MEDIUM
A user can supply malicious HTML and JavaScript code that will be executed in the client browser
33RISK
open ↗
Referência
CVE-2009-2600
CVE-2009-2600—
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea
23RISK
open ↗
Referência
CVE-2015-1862
CVE-2015-1862—
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot
23RISK
open ↗
Referência
CVE-2015-1862
CVE-2015-1862—
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot
23RISK
open ↗
Referência
CVE-2015-1862
CVE-2015-1862—
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot
23RISK
open ↗
Referência
CVE-2015-1862
CVE-2015-1862—
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot
23RISK
open ↗
Referência
CVE-2016-6664
CVE-2016-6664—
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo
23RISK
open ↗
Referência
CVE-2016-6664
CVE-2016-6664—
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo
23RISK
open ↗
Referência
CVE-2020-7991
CVE-2020-7991—
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.
23RISK
open ↗
Referência
CVE-2020-7991
CVE-2020-7991—
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.
23RISK
open ↗
Referência
CVE-2021-21466
CVE-2021-21466CRITICAL
SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow
48RISK
open ↗
Referência
Joomla JS Jobs plugin 1.4.2 - SQL injection
CVE-2025-49484HIGHwebappsphp
Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla
41RISK
open ↗
Referência✓ VexDay Proof
HP Compaq Notebooks - ActiveX Remote Code Execution
CVE-2007-6333—remotewindows
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 i
23RISK
open ↗
Referência✓ VexDay Proof
Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure
CVE-2008-1125—webappsphp
Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read
23RISK
open ↗
Referência✓ VexDay Proof
ExBB 0.22 - Local/Remote File Inclusion
CVE-2008-1862—webappsphp
ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which al
23RISK
open ↗
← previouspage 269 / 723next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.