Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,401cataloged exploits
35,511CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,332GitHub PoC 14,209VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,332 exploits
Referência
CVE-2026-8774
CVE-2026-8774MEDIUM
Edimax BR-6228NC POST Request mp command injection
33RISK
open ↗
Referência
CVE-2026-8773
CVE-2026-8773MEDIUM
linlinjava litemall Database Setting DbUtil.java load argument injection
33RISK
open ↗
Referência
CVE-2025-56352
CVE-2025-56352HIGH
In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations duri
41RISK
open ↗
Referência
CVE-2026-8772
CVE-2026-8772MEDIUM
linlinjava litemall Admin Endpoint sql injection
33RISK
open ↗
Referência
CVE-2021-47970
CVE-2021-47970HIGH
Macaron Notes 5.5 Denial of Service via Buffer Overflow
41RISK
open ↗
Referência
CVE-2021-47969
CVE-2021-47969HIGH
Color Notes 1.4 Denial of Service via Long Character String
41RISK
open ↗
Referência
CVE-2021-47957
CVE-2021-47957MEDIUM
WordPress Plugin Cookie Law Bar 1.2.1 Stored XSS via clb_bar_msg
33RISK
open ↗
Referência
CVE-2020-37239
CVE-2020-37239CRITICAL
libbabl 0.1.62 Broken Double Free Detection Memory Safety
48RISK
open ↗
Referência
CVE-2020-37238
CVE-2020-37238MEDIUM
CMS Made Simple 2.2.15 Stored XSS via SVG File Upload
33RISK
open ↗
Referência
CVE-2025-14562
CVE-2025-14562LOW
Incorrect Authorization in GitLab
28RISK
open ↗
Referência
CVE-2026-3093
CVE-2026-3093MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
33RISK
open ↗
Referência
CVE-2026-4672
CVE-2026-4672MEDIUM
Missing Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-6267
CVE-2026-6267HIGH
Insertion of Sensitive Information Into Sent Data in GitLab
41RISK
open ↗
Referência
CVE-2026-6336
CVE-2026-6336MEDIUM
Incorrect Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-12436
CVE-2026-12436HIGH
Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab
41RISK
open ↗
Referência
CVE-2026-14341
CVE-2026-14341MEDIUM
Missing Authorization in GitLab
33RISK
open ↗
Referência
CVE-2026-14351
CVE-2026-14351MEDIUM
Exposure of Sensitive Information Through Metadata in GitLab
33RISK
open ↗
Referência
CVE-2026-11351
CVE-2026-11351MEDIUM
ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure
33RISK
open ↗
Referência
CVE-2026-54653
CVE-2026-54653HIGH
`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
41RISK
open ↗
Referência
CVE-2026-55391
CVE-2026-55391HIGH
datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
41RISK
open ↗
Referência
CVE-2020-37237
CVE-2020-37237MEDIUM
Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners
33RISK
open ↗
Referência
CVE-2026-13493
CVE-2026-13493LOW
AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection
28RISK
open ↗
Referência
CVE-2026-13491
CVE-2026-13491MEDIUM
78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service
33RISK
open ↗
Referência
CVE-2026-13489
CVE-2026-13489LOW
78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization
28RISK
open ↗
Referência
CVE-2026-13488
CVE-2026-13488MEDIUM
SourceCodester Class and Exam Timetabling System preview7.php sql injection
33RISK
open ↗
Referência
CVE-2026-13487
CVE-2026-13487MEDIUM
SourceCodester Class and Exam Timetabling System archive.php sql injection
33RISK
open ↗
Referência
CVE-2026-11437
CVE-2026-11437MEDIUM
perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery
33RISK
open ↗
Referência
CVE-2026-11436
CVE-2026-11436MEDIUM
Mage AI Sign-in Flow index.tsx useMutation cross site scripting
33RISK
open ↗
Referência
CVE-2026-11435
CVE-2026-11435MEDIUM
Jinher OA nextselectplan.aspx sql injection
33RISK
open ↗
Referência
CVE-2026-11412
CVE-2026-11412MEDIUM
Jinher OA GetFormSn.aspx sql injection
33RISK
open ↗
← previouspage 489 / 745next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.