Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,401cataloged exploits
35,511CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,332GitHub PoC 14,209VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,332 exploits
Referência
CVE-2019-1652
CVE-2019-1652HIGHunder attack
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISK
open ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHunder attack
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISK
open ↗
Referência
CVE-2004-1444
CVE-2004-1444—
Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (d
23RISK
open ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHunder attack
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISK
open ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHunder attack
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISK
open ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHunder attack
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISK
open ↗
Referência
CVE-2026-19210
CVE-2026-19210MEDIUM
SourceCodester Photo Share Website ajax.php save_upload unrestricted upload
33RISK
open ↗
Referência
CVE-2026-19209
CVE-2026-19209MEDIUM
SourceCodester Photo Share Website index.php home cross site scripting
33RISK
open ↗
Referência
CVE-2026-19208
CVE-2026-19208MEDIUM
WonderTrader TraderDD.cpp queryTrades behavioral workflow
33RISK
open ↗
Referência
CVE-2026-19207
CVE-2026-19207MEDIUM
PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting
33RISK
open ↗
Referência
CVE-2022-4995
CVE-2022-4995CRITICAL
Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
48RISK
open ↗
Referência
CVE-2026-65707
CVE-2026-65707HIGH
Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint
41RISK
open ↗
Referência
CVE-2026-12689
CVE-2026-12689MEDIUM
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
33RISK
open ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISK
open ↗
Referência✓ VexDay Proof
AspWebCalendar 4.5 - 'eventid' SQL Injection
CVE-2004-1552—webappsasp
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the us
23RISK
open ↗
Referência
CVE-2026-16486
CVE-2026-16486MEDIUM
SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting
33RISK
open ↗
Referência
CVE-2026-16252
CVE-2026-16252MEDIUM
Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection
33RISK
open ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISK
open ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISK
open ↗
Referência✓ VexDay Proof
aspwebalbum 3.2 - Multiple Vulnerabilities
CVE-2004-1553—webappsasp
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern
23RISK
open ↗
Referência✓ VexDay Proof
aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting
CVE-2004-1553—webappsphp
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern
23RISK
open ↗
Referência
CVE-2022-4995
CVE-2022-4995CRITICAL
Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
48RISK
open ↗
Referência
CVE-2026-11466
CVE-2026-11466MEDIUM
zilliztech deep-searcher collection_router.py CollectionRouter.invoke access control
33RISK
open ↗
Referência
CVE-2026-11462
CVE-2026-11462MEDIUM
Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization
33RISK
open ↗
Referência
CVE-2026-11461
CVE-2026-11461MEDIUM
NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization
33RISK
open ↗
Referência
CVE-2026-11460
CVE-2026-11460MEDIUM
Boost Serialization improper validation of specified type of input
33RISK
open ↗
Referência
CVE-2026-49494
CVE-2026-49494HIGH
Xcitium Client Security / Comodo Internet Security Remote Denial of Service
41RISK
open ↗
Referência
CVE-2026-11456
CVE-2026-11456MEDIUM
Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection
33RISK
open ↗
Referência
CVE-2026-11453
CVE-2026-11453MEDIUM
Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection
33RISK
open ↗
Referência
CVE-2026-15629
CVE-2026-15629MEDIUM
louisho5 picobot Workspace filesystem.go GetSkill link following
33RISK
open ↗
← previouspage 488 / 745next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.