Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,058cataloged exploits

35,300CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,175GitHub PoC 14,096VulnCheck XDB 8,607Nuclei 4,255Metasploit 3,474✓ verified onlyrecent popular risk

22,166 exploits

Referência

CVE-2018-6190

CVE-2018-6190—

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.

23RISK

open ↗

Referência

CVE-2010-1955

CVE-2010-1955—

Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote

43RISK

open ↗

Referência

CVE-2010-1956

CVE-2010-1956—

Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows

43RISK

open ↗

Referência

CVE-2010-1956

CVE-2010-1956—

Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows

43RISK

open ↗

Referência✓ VexDay Proof

groone glinks 2.1 - Remote File Inclusion

CVE-2009-0463—webappsphp

PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute a

23RISK

open ↗

Referência

CVE-2026-10662

CVE-2026-10662MEDIUM

ahujasid blender-mcp ZIP File server.py requests.get server-side request forgery

33RISK

open ↗

Referência

CVE-2010-3027

CVE-2010-3027—

SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência✓ VexDay Proof

Apple iOS 4.0.3 - DPAP Server Denial of Service

CVE-2008-0830—dosios

The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (c

23RISK

open ↗

Referência

CVE-2017-7571

CVE-2017-7571—

public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.

23RISK

open ↗

Referência

CVE-2018-19138

CVE-2018-19138—

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.

23RISK

open ↗

Referência

CVE-2023-25439

CVE-2023-25439MEDIUM

Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitr

33RISK

open ↗

Referência

CVE-2018-12090

CVE-2018-12090—

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introd

23RISK

open ↗

Referência✓ VexDay Proof

open-medium.CMS 0.25 - '404.php' Remote File Inclusion

CVE-2006-2683—webappsphp

PHP remote file inclusion vulnerability in 404.php in open-medium.CMS 0.25 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência

CVE-2012-4927

CVE-2012-4927—

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attack

23RISK

open ↗

Referência

CVE-2012-4927

CVE-2012-4927—

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attack

23RISK

open ↗

Referência✓ VexDay Proof

MyBloggie 2.1.6 - Multiple SQL Injections

CVE-2008-3080—webappsphp

Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to per

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component Brightcode Weblinks - 'catid' SQL Injection

CVE-2008-3083—webappsphp

SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to

23RISK

open ↗

Referência

CVE-2009-3171

CVE-2009-3171—

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to

23RISK

open ↗

Referência

CVE-2022-44900

CVE-2022-44900CRITICAL

A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and ea

48RISK

open ↗

Referência

CVE-2016-6435

CVE-2016-6435—

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via

50RISK

open ↗

Referência

CVE-2016-6483

CVE-2016-6483—

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Le

28RISK

open ↗

Referência

CVE-2016-6505

CVE-2016-6505—

epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allo

23RISK

open ↗

Referência✓ VexDay Proof

Simple Customer 1.3 - Arbitrary Change Admin Password

CVE-2009-1637—webappsphp

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to chan

23RISK

open ↗

Referência✓ VexDay Proof

ASP Stats Generator 2.1.1 - SQL Injection

CVE-2006-3184—webappsasp

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to

23RISK

open ↗

Referência

CVE-2009-2337

CVE-2009-2337—

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when mag

23RISK

open ↗

Referência

CVE-2011-5218

CVE-2011-5218—

SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência

CVE-2019-2721

CVE-2019-2721—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISK

open ↗

Referência

CVE-2009-2606

CVE-2009-2606—

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows rem

23RISK

open ↗

Referência

CVE-2009-2602

CVE-2009-2602—

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, whi

23RISK

open ↗

Referência

CVE-2018-25427

CVE-2018-25427CRITICAL

Arm Whois 3.11 Buffer Overflow via SEH Overwrite

48RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.