Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,133cataloged exploits
35,369CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,232GitHub PoC 14,112VulnCheck XDB 8,607Nuclei 4,257Metasploit 3,474✓ verified onlyrecentpopularrisk
22,175 exploits
Referência
CVE-2009-3362
CVE-2009-3362—
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP
23RISK
open ↗
Referência
CVE-2012-0902
CVE-2012-0902—
AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/
23RISK
open ↗
Referência
CVE-2017-6089
CVE-2017-6089—
SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2013-3728
CVE-2013-3728—
Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissio
23RISK
open ↗
Referência
CVE-2016-3986
CVE-2016-3986—
Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a
23RISK
open ↗
Referência
CVE-2011-4670
CVE-2011-4670—
Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arb
23RISK
open ↗
Referência
CVE-2011-4670
CVE-2011-4670—
Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arb
23RISK
open ↗
Referência
CVE-2018-11508
CVE-2018-11508—
The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitiv
23RISK
open ↗
Referência
CVE-2010-4792
CVE-2010-4792—
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar
23RISK
open ↗
Referência
CVE-2010-5042
CVE-2010-5042—
Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remo
23RISK
open ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHunder attack
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RISK
open ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHunder attack
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RISK
open ↗
Referência
CVE-2018-1002001
CVE-2018-1002001—
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re
23RISK
open ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHunder attack
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RISK
open ↗
Referência
CVE-2009-4154
CVE-2009-4154—
Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitra
23RISK
open ↗
Referência✓ VexDay Proof
eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities
CVE-2006-6872—webappsphp
Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. (
23RISK
open ↗
Referência✓ VexDay Proof
Open Azimyt CMS 0.22 - 'lang' Local File Inclusion
CVE-2008-2820—webappsphp
Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote
23RISK
open ↗
Referência✓ VexDay Proof
RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion
CVE-2007-1636—webappsphp
Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files
23RISK
open ↗
Referência✓ VexDay Proof
Sepcity Classified - 'ID' SQL Injection
CVE-2008-6157—webappsasp
SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent at
23RISK
open ↗
Referência
CVE-2018-1002002
CVE-2018-1002002—
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re
23RISK
open ↗
Referência
CVE-2009-2397
CVE-2009-2397—
Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary f
23RISK
open ↗
Referência
CVE-2026-15715
CVE-2026-15715MEDIUM
SourceCodester Class and Exam Timetabling System exam.php cross site scripting
33RISK
open ↗
Referência
CVE-2014-4114
CVE-2014-4114HIGHunder attack
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RISK
open ↗
Referência
CVE-2009-3425
CVE-2009-3425—
Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to
23RISK
open ↗
Referência
CVE-2006-4631
CVE-2006-4631—
Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote auth
23RISK
open ↗
Referência
CVE-2012-10041
CVE-2012-10041CRITICAL
WAN Emulator v2.3 Command Execution
63RISK
open ↗
Referência
CVE-2012-10041
CVE-2012-10041CRITICAL
WAN Emulator v2.3 Command Execution
63RISK
open ↗
Referência
CVE-2017-7004
CVE-2017-7004—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The
23RISK
open ↗
Referência✓ VexDay Proof
Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow
CVE-2007-2770—remotewindows
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long
23RISK
open ↗
Referência
CVE-2018-0882
CVE-2018-0882—
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el
23RISK
open ↗
← previouspage 408 / 740next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.