Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,401cataloged exploits
35,511CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,332GitHub PoC 14,209VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,301 exploits
Referência
CVE-2017-20264
CVE-2017-20264HIGH
Joomla! Component Sponsor Wall 8.0 SQL Injection
41RISK
open ↗
Referência
CVE-2026-10181
CVE-2026-10181HIGH
TRENDnet TEW-432BRP formSysCmd stack-based overflow
41RISK
open ↗
Referência
CVE-2026-10175
CVE-2026-10175MEDIUM
Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
33RISK
open ↗
Referência
CVE-2026-10174
CVE-2026-10174MEDIUM
Aider-AI Aider Pre-commit Hook args.py protection mechanism
33RISK
open ↗
Referência
CVE-2026-10173
CVE-2026-10173MEDIUM
Orthanc Explorer 2 URL StudyList.vue cross site scripting
33RISK
open ↗
Referência
CVE-2026-10172
CVE-2026-10172MEDIUM
Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload
33RISK
open ↗
Referência
CVE-2019-0541
CVE-2019-0541HIGHunder attack
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML E
83RISK
open ↗
Referência
CVE-2026-9562
CVE-2026-9562MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control
33RISK
open ↗
Referência
CVE-2026-11312
CVE-2026-11312MEDIUM
bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity
33RISK
open ↗
Referência
CVE-2026-10878
CVE-2026-10878MEDIUM
D-Link DWR-M920 formSmsManage sub_41C8E8 command injection
33RISK
open ↗
Referência
CVE-2026-9544
CVE-2026-9544MEDIUM
Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection
33RISK
open ↗
Referência
CVE-2026-9543
CVE-2026-9543CRITICAL
Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection
48RISK
open ↗
Referência
CVE-2026-10783
CVE-2026-10783LOW
gradio-app gradio Audio Cache Key save_audio_to_cache weak hash
28RISK
open ↗
Referência
CVE-2026-10722
CVE-2026-10722MEDIUM
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
33RISK
open ↗
Referência
CVE-2026-10704
CVE-2026-10704MEDIUM
SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection
33RISK
open ↗
Referência
CVE-2026-10703
CVE-2026-10703MEDIUM
EIPStackGroup OpENer SendRRData cipmessagerouter.c CreateMessageRouterRequestStructure use after free
33RISK
open ↗
Referência
CVE-2026-10692
CVE-2026-10692MEDIUM
johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos
33RISK
open ↗
Referência
CVE-2026-10691
CVE-2026-10691MEDIUM
wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos
33RISK
open ↗
Referência
CVE-2026-10688
CVE-2026-10688MEDIUM
ahujasid blender-mcp server.py execute_blender_code code injection
33RISK
open ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
Referência
CVE-2026-10294
CVE-2026-10294MEDIUM
PackageKit API pk-transaction.c g_file_test improper authorization
33RISK
open ↗
Referência
CVE-2026-10287
CVE-2026-10287MEDIUM
SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgery
33RISK
open ↗
Referência
CVE-2026-10258
CVE-2026-10258MEDIUM
itsourcecode Content Management System add_sub_topic.php sql injection
33RISK
open ↗
Referência
CVE-2026-10253
CVE-2026-10253MEDIUM
itsourcecode Online House Rental System manage_payment.php sql injection
33RISK
open ↗
Referência
CVE-2026-10251
CVE-2026-10251MEDIUM
itsourcecode Online House Rental System ajax.php login sql injection
33RISK
open ↗
Referência
CVE-2026-10250
CVE-2026-10250MEDIUM
itsourcecode Online Blood Bank Management System campsdetails.php sql injection
33RISK
open ↗
Referência
CVE-2026-10219
CVE-2026-10219MEDIUM
nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection
33RISK
open ↗
Referência
CVE-2026-10218
CVE-2026-10218MEDIUM
nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization
33RISK
open ↗
← previouspage 484 / 744next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.