Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,020cataloged exploits
35,276CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,446Referência 22,166GitHub PoC 14,080VulnCheck XDB 8,604Nuclei 4,251Metasploit 3,473✓ verified onlyrecentpopularrisk
22,103 exploits
Referência
CVE-2010-2461
CVE-2010-2461—
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2010-2464
CVE-2010-2464—
Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla!
23RISK
open ↗
Referência
CVE-2012-3152
CVE-2012-3152CRITICALunder attack
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RISK
open ↗
Referência
CVE-2018-15473
CVE-2018-15473MEDIUM
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RISK
open ↗
Referência
CVE-2026-16293
CVE-2026-16293MEDIUM
Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL
33RISK
open ↗
Referência✓ VexDay Proof
EasyCalendar 4.0tr - Multiple Vulnerabilities
CVE-2008-1345—webappsphp
Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and ear
23RISK
open ↗
Referência
CVE-2010-4636
CVE-2010-4636—
SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2010-4638
CVE-2010-4638—
SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0
23RISK
open ↗
Referência
CVE-2010-4737
CVE-2010-4737—
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2010-4738
CVE-2010-4738—
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attac
23RISK
open ↗
Referência
CVE-2010-4740
CVE-2010-4740—
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote
50RISK
open ↗
Referência
CVE-2010-4770
CVE-2010-4770—
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit
23RISK
open ↗
Referência
CVE-2010-4770
CVE-2010-4770—
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit
23RISK
open ↗
Referência
CVE-2010-4771
CVE-2010-4771—
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2010-4772
CVE-2010-4772—
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web
23RISK
open ↗
Referência
CVE-2015-1427
CVE-2015-1427CRITICALunder attack
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s
100RISK
open ↗
Referência
CVE-2010-4774
CVE-2010-4774—
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Referência
CVE-2010-4776
CVE-2010-4776—
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISK
open ↗
Referência
CVE-2010-4776
CVE-2010-4776—
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISK
open ↗
Referência
CVE-2010-1980
CVE-2010-1980—
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RISK
open ↗
Referência
CVE-2019-1003000
CVE-2019-1003000—
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/
60RISK
open ↗
Referência
CVE-2019-1003000
CVE-2019-1003000—
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/
60RISK
open ↗
Referência
CVE-2026-18601
CVE-2026-18601CRITICAL
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
48RISK
open ↗
Referência
CVE-2026-18600
CVE-2026-18600HIGH
GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection
41RISK
open ↗
Referência
CVE-2026-18599
CVE-2026-18599HIGH
GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection
41RISK
open ↗
Referência
CVE-2026-18598
CVE-2026-18598HIGH
GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection
41RISK
open ↗
Referência✓ VexDay Proof
Smoothflash - 'cid' SQL Injection
CVE-2008-1623—webappsphp
SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗
Referência
CVE-2026-65920
CVE-2026-65920MEDIUM
Diffusers Path Traversal via weight_map Arbitrary File Read
33RISK
open ↗
Referência
CVE-2026-65918
CVE-2026-65918HIGH
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
41RISK
open ↗
Referência
CVE-2026-65702
CVE-2026-65702HIGH
Vanna 2.0.2 Path Traversal via FileSystemConversationStore
41RISK
open ↗
← previouspage 380 / 737next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.