Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,205cataloged exploits

35,417CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,266GitHub PoC 14,123VulnCheck XDB 8,617Nuclei 4,274Metasploit 3,474✓ verified onlyrecent popular risk

22,233 exploits

Referência

CVE-2017-17610

CVE-2017-17610—

E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid paramet

23RISK

open ↗

Referência

CVE-2017-17610

CVE-2017-17610—

E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid paramet

23RISK

open ↗

Referência

CVE-2017-17611

CVE-2017-17611—

Doctor Search Script 1.0 has SQL Injection via the /list city parameter.

23RISK

open ↗

Referência

CVE-2017-17611

CVE-2017-17611—

Doctor Search Script 1.0 has SQL Injection via the /list city parameter.

23RISK

open ↗

Referência

CVE-2026-10875

CVE-2026-10875MEDIUM

projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

33RISK

open ↗

Referência

CVE-2026-10874

CVE-2026-10874MEDIUM

projectworlds Online Art Gallery Shop Project adminHome.php sql injection

33RISK

open ↗

Referência

CVE-2017-17613

CVE-2017-17613—

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati

23RISK

open ↗

Referência

CVE-2017-17613

CVE-2017-17613—

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati

23RISK

open ↗

Referência

CVE-2017-17614

CVE-2017-17614—

Food Order Script 1.0 has SQL Injection via the /list city parameter.

23RISK

open ↗

Referência

CVE-2017-17614

CVE-2017-17614—

Food Order Script 1.0 has SQL Injection via the /list city parameter.

23RISK

open ↗

Referência✓ VexDay Proof

Mole Group Pizza - 'manufacturers_id' SQL Injection

CVE-2008-5046—webappsphp

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

Mole Group Rental Script - Authentication Bypass

CVE-2008-5047—webappsphp

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary

23RISK

open ↗

Referência

CVE-2017-17616

CVE-2017-17616—

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

23RISK

open ↗

Referência✓ VexDay Proof

Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation

CVE-2008-5049—localwindows

Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other version

23RISK

open ↗

Referência

CVE-2017-17616

CVE-2017-17616—

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

23RISK

open ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RISK

open ↗

Referência

CVE-2017-17618

CVE-2017-17618—

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

23RISK

open ↗

Referência

CVE-2017-17618

CVE-2017-17618—

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

23RISK

open ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RISK

open ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RISK

open ↗

Referência✓ VexDay Proof

BitDefender - Module pdf.xmd Infinite Loop Denial of Service (PoC)

CVE-2008-5409—doswindows

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGu

28RISK

open ↗

Referência

CVE-2010-3458

CVE-2010-3458—

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attack

23RISK

open ↗

Referência

CVE-2017-17634

CVE-2017-17634—

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.

23RISK

open ↗

Referência✓ VexDay Proof

yahoo answers - 'id' SQL Injection

CVE-2008-5490—webappsphp

SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência

CVE-2010-3458

CVE-2010-3458—

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attack

23RISK

open ↗

Referência

CVE-2026-9517

CVE-2026-9517MEDIUM

hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control

33RISK

open ↗

Referência

CVE-2017-17634

CVE-2017-17634—

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.

23RISK

open ↗

Referência✓ VexDay Proof

SlimCMS 1.0.0 - 'edit.php' SQL Injection

CVE-2008-5491—webappsphp

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL co

23RISK

open ↗

Referência✓ VexDay Proof

VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)

CVE-2008-5492—doswindows

Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX

50RISK

open ↗

Referência

CVE-2010-3462

CVE-2010-3462—

Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.