Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,302cataloged exploits
35,469CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,301GitHub PoC 14,141VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,266 exploits
Referência
CVE-2010-5009
CVE-2010-5009—
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Referência
CVE-2010-5010
CVE-2010-5010—
Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers t
23RISK
open ↗
Referência
CVE-2010-5011
CVE-2010-5011—
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb
23RISK
open ↗
Referência
CVE-2010-5011
CVE-2010-5011—
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb
23RISK
open ↗
Referência
CVE-2010-5012
CVE-2010-5012—
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência
CVE-2010-5012
CVE-2010-5012—
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência
CVE-2018-25381
CVE-2018-25381HIGH
Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters
41RISK
open ↗
Referência
CVE-2010-5013
CVE-2010-5013—
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem
23RISK
open ↗
Referência
CVE-2010-5013
CVE-2010-5013—
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem
23RISK
open ↗
Referência
CVE-2010-5014
CVE-2010-5014—
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Referência
CVE-2010-5015
CVE-2010-5015—
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arb
23RISK
open ↗
Referência
CVE-2010-5019
CVE-2010-5019—
SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arb
23RISK
open ↗
Referência
CVE-2010-5021
CVE-2010-5021—
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e
23RISK
open ↗
Referência
CVE-2010-5021
CVE-2010-5021—
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e
23RISK
open ↗
Referência
CVE-2010-5022
CVE-2010-5022—
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at
23RISK
open ↗
Referência
CVE-2010-5023
CVE-2010-5023—
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
CVE-2010-5023
CVE-2010-5023—
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
CVE-2018-1122
CVE-2018-1122HIGH
procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset
41RISK
open ↗
Referência
CVE-2026-14695
CVE-2026-14695MEDIUM
SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection
33RISK
open ↗
Referência
CVE-2026-14694
CVE-2026-14694MEDIUM
SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection
33RISK
open ↗
Referência
CVE-2026-14693
CVE-2026-14693MEDIUM
SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization
33RISK
open ↗
Referência
CVE-2026-9302
CVE-2026-9302MEDIUM
546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection
33RISK
open ↗
Referência
CVE-2026-9301
CVE-2026-9301MEDIUM
omec-project amf NGReset Message memory corruption
33RISK
open ↗
Referência
CVE-2026-9300
CVE-2026-9300MEDIUM
omec-project amf NGSetupRequest memory corruption
33RISK
open ↗
Referência
CVE-2010-5024
CVE-2010-5024—
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, wi
23RISK
open ↗
Referência
CVE-2010-5026
CVE-2010-5026—
SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e
23RISK
open ↗
Referência
CVE-2010-5026
CVE-2010-5026—
SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e
23RISK
open ↗
Referência
CVE-2018-11502
CVE-2018-11502—
An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display t
23RISK
open ↗
Referência
CVE-2018-11510
CVE-2018-11510—
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/
35RISK
open ↗
Referência
CVE-2018-11510
CVE-2018-11510—
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/
35RISK
open ↗
← previouspage 462 / 743next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.