Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,302cataloged exploits
35,469CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,301GitHub PoC 14,141VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,266 exploits
Referência
CVE-2018-25346
CVE-2018-25346HIGH
WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
41RISK
open ↗
Referência
CVE-2018-25345
CVE-2018-25345HIGH
10-Strike Network Scanner 3.0 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2026-10202
CVE-2026-10202MEDIUM
OFCMS JSON Query SystemDictController.java query sql injection
33RISK
open ↗
Referência
CVE-2026-10201
CVE-2026-10201MEDIUM
Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero
33RISK
open ↗
Referência
CVE-2026-10200
CVE-2026-10200MEDIUM
Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow
33RISK
open ↗
Referência
CVE-2026-10199
CVE-2026-10199MEDIUM
Assimp glTF2Asset.h LazyDict null pointer dereference
33RISK
open ↗
Referência
CVE-2026-10191
CVE-2026-10191HIGH
Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow
41RISK
open ↗
Referência
CVE-2026-7553
CVE-2026-7553MEDIUM
code-projects Gym Management System edit_exercises.php sql injection
33RISK
open ↗
Referência
CVE-2026-7550
CVE-2026-7550MEDIUM
SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection
33RISK
open ↗
Referência
CVE-2026-7549
CVE-2026-7549MEDIUM
SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection
33RISK
open ↗
Referência
CVE-2026-7548
CVE-2026-7548HIGH
Totolink NR1800X cstecgi.cgi sub_41A68C command injection
41RISK
open ↗
Referência
CVE-2026-7546
CVE-2026-7546CRITICAL
Totolink NR1800X lighttpd find_host_ip stack-based overflow
48RISK
open ↗
Referência
CVE-2018-25312
CVE-2018-25312HIGH
LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution
41RISK
open ↗
Referência
CVE-2018-25309
CVE-2018-25309MEDIUM
MyBB Recent threads 17.0 Persistent Cross-Site Scripting
33RISK
open ↗
Referência
CVE-2018-25308
CVE-2018-25308HIGH
BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion
41RISK
open ↗
Referência
CVE-2018-25307
CVE-2018-25307HIGH
SysGauge Pro 4.6.12 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2018-25306
CVE-2018-25306MEDIUM
PDFunite 0.41.0 Buffer Overflow via Malformed PDF
33RISK
open ↗
Referência
CVE-2018-25305
CVE-2018-25305MEDIUM
librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG
33RISK
open ↗
Referência
CVE-2026-7117
CVE-2026-7117MEDIUM
code-projects Employee Management System approve.php sql injection
33RISK
open ↗
Referência
CVE-2026-7116
CVE-2026-7116MEDIUM
code-projects Employee Management System mark.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-7115
CVE-2026-7115MEDIUM
code-projects Employee Management System delete.php sql injection
33RISK
open ↗
Referência
CVE-2026-7114
CVE-2026-7114MEDIUM
code-projects Employee Management System edit.php sql injection
33RISK
open ↗
Referência
CVE-2026-10189
CVE-2026-10189HIGH
Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow
41RISK
open ↗
Referência
CVE-2026-7011
CVE-2026-7011MEDIUM
MaxSite CMS Antispam Plugin plugin_antispam cross site scripting
33RISK
open ↗
Referência✓ VexDay Proof
PHP-Fusion Mod TI - 'id' SQL Injection
CVE-2008-5733—webappsphp
SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to
23RISK
open ↗
Referência
CVE-2019-3398
CVE-2019-3398HIGHunder attack
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at
100RISK
open ↗
Referência
CVE-2026-15377
CVE-2026-15377MEDIUM
Eleveo Call Recording Software sendlogfile improper authorization
33RISK
open ↗
Referência
CVE-2026-15376
CVE-2026-15376MEDIUM
Eleveo Call Recording Software statisticReportAction.do improper authorization
33RISK
open ↗
Referência
CVE-2026-15375
CVE-2026-15375MEDIUM
Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization
33RISK
open ↗
Referência
CVE-2026-15374
CVE-2026-15374MEDIUM
Eleveo Call Recording Software Group roleAddAction.do improper authorization
33RISK
open ↗
← previouspage 456 / 743next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.