Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,360cataloged exploits
35,511CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,332GitHub PoC 14,168VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,301 exploits
Referência
CVE-2026-13553
CVE-2026-13553MEDIUM
itsourcecode Online Hotel Management System controller.php add unrestricted upload
33RISK
open ↗
Referência
CVE-2011-0611
CVE-2011-0611HIGHunder attack
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A
100RISK
open ↗
Referência
CVE-2013-3214
CVE-2013-3214—
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
60RISK
open ↗
Referência
CVE-2026-13549
CVE-2026-13549MEDIUM
CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization
33RISK
open ↗
Referência
CVE-2026-13546
CVE-2026-13546MEDIUM
Feehi CMS REST API Endpoint articles missing authentication
33RISK
open ↗
Referência
CVE-2026-5832
CVE-2026-5832MEDIUM
atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgery
33RISK
open ↗
Referência
CVE-2026-5830
CVE-2026-5830HIGH
Tenda AC15 SysToolChangePwd websGetVar stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5829
CVE-2026-5829MEDIUM
code-projects Simple IT Discussion Forum content.php sql injection
33RISK
open ↗
Referência
CVE-2026-5828
CVE-2026-5828MEDIUM
code-projects Simple IT Discussion Forum addcomment.php sql injection
33RISK
open ↗
Referência
CVE-2026-5827
CVE-2026-5827MEDIUM
code-projects Simple IT Discussion Forum question-function.php sql injection
33RISK
open ↗
Referência
CVE-2026-5826
CVE-2026-5826MEDIUM
code-projects Simple IT Discussion Forum edit-category.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5705
CVE-2026-5705MEDIUM
code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-5691
CVE-2026-5691MEDIUM
Totolink A7100RU cstecgi.cgi setFirewallType os command injection
33RISK
open ↗
Referência
CVE-2026-5690
CVE-2026-5690MEDIUM
Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection
33RISK
open ↗
Referência
CVE-2026-5689
CVE-2026-5689MEDIUM
Totolink A7100RU cstecgi.cgi setNtpCfg os command injection
33RISK
open ↗
Referência
CVE-2026-5688
CVE-2026-5688MEDIUM
Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection
33RISK
open ↗
Referência
CVE-2026-5687
CVE-2026-5687HIGH
Tenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5686
CVE-2026-5686HIGH
Tenda CX12L RouteStatic fromRouteStatic stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5685
CVE-2026-5685HIGH
Tenda CX12L addressNat fromAddressNat stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5684
CVE-2026-5684HIGH
Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow
41RISK
open ↗
Referência
CVE-2026-5683
CVE-2026-5683MEDIUM
Tenda CX12L P2pListFilter fromP2pListFilter stack-based overflow
33RISK
open ↗
Referência
CVE-2026-5682
CVE-2026-5682MEDIUM
Meesho Online Shopping App com.meesho.supply endpoint risky encryption
33RISK
open ↗
Referência
CVE-2026-5681
CVE-2026-5681MEDIUM
itsourcecode sanitize or validate this input Parameter borrowedequip.php sql injection
33RISK
open ↗
Referência
CVE-2026-5679
CVE-2026-5679MEDIUM
Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection
33RISK
open ↗
Referência
CVE-2026-5678
CVE-2026-5678MEDIUM
Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection
33RISK
open ↗
Referência
CVE-2026-5677
CVE-2026-5677MEDIUM
Totolink A7100RU cstecgi.cgi CsteSystem os command injection
33RISK
open ↗
Referência
CVE-2026-5676
CVE-2026-5676MEDIUM
Totolink A8000R cstecgi.cgi setLanguageCfg missing authentication
33RISK
open ↗
Referência
CVE-2026-5675
CVE-2026-5675MEDIUM
itsourcecode Construction Management System Parameter borrowed_tool.php sql injection
33RISK
open ↗
Referência
CVE-2026-5672
CVE-2026-5672MEDIUM
code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection
33RISK
open ↗
Referência
CVE-2026-5671
CVE-2026-5671MEDIUM
Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting
33RISK
open ↗
← previouspage 480 / 744next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.