Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits

35,760CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecent popular risk

22,523 exploits

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISK

open ↗

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISK

open ↗

Referência

CVE-2018-6411

CVE-2018-6411—

An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically

23RISK

open ↗

Referência

CVE-2013-6246

CVE-2013-6246—

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sens

23RISK

open ↗

Referência

SoftExpert (SE) Suite v2.1.3 - Local File Inclusion

CVE-2023-30330CRITICALwebappsphp

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42

48RISK

open ↗

Referência

CVE-2015-0935

CVE-2015-0935—

Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to

28RISK

open ↗

Referência

CVE-2025-14879

CVE-2025-14879CRITICAL

Tenda WH450 HTTP Request onSSIDChange stack-based overflow

48RISK

open ↗

Referência

CVE-2014-0497

CVE-2014-0497HIGHunder attack

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma

100RISK

open ↗

Referência

CVE-2011-0519

CVE-2011-0519—

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows

23RISK

open ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - Remote File Inclusion

CVE-2007-1968—webappsphp

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attacke

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

CVE-2007-6555—webappsphp

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 componen

23RISK

open ↗

Referência✓ VexDay Proof

PHPEasyData 1.5.4 - 'cat_id' SQL Injection

CVE-2008-2113—webappsphp

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Referência

CVE-2022-26982

CVE-2022-26982—

SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting

23RISK

open ↗

Referência

CVE-2021-3394

CVE-2021-3394—

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISK

open ↗

Referência

CVE-2012-4751

CVE-2012-4751—

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor

23RISK

open ↗

Referência

CVE-2013-5692

CVE-2013-5692—

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and

23RISK

open ↗

Referência

CVE-2009-4964

CVE-2009-4964—

Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .

23RISK

open ↗

Referência

CVE-2009-3338

CVE-2009-3338—

Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code v

23RISK

open ↗

Referência

CVE-2009-3670

CVE-2009-3670—

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a

23RISK

open ↗

Referência

CVE-2017-13784

CVE-2017-13784—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISK

open ↗

Referência

CVE-2017-13785

CVE-2017-13785—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISK

open ↗

Referência

CVE-2014-0620

CVE-2014-0620—

Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote att

23RISK

open ↗

Referência✓ VexDay Proof

Mambo Component SMF Forum 1.3.1.3 - Remote File Inclusion

CVE-2006-3773—webappsphp

PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and M

23RISK

open ↗

Referência

CVE-2014-4311

CVE-2014-4311—

Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mai

23RISK

open ↗

Referência✓ VexDay Proof

Myspace Clone Script - 'index.php' Remote File Inclusion

CVE-2007-6057—webappsphp

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) all

23RISK

open ↗

Referência✓ VexDay Proof

TUTOS 1.3 - 'cmd.php' Remote Command Execution

CVE-2008-0148—webappsphp

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comman

23RISK

open ↗

Referência✓ VexDay Proof

asg-sentry 7.0.0 - Multiple Vulnerabilities

CVE-2008-1320—dosmultiple

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary co

28RISK

open ↗

Referência

CVE-2010-2920

CVE-2010-2920—

Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow

38RISK

open ↗

Referência

CVE-2016-4997

CVE-2016-4997—

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux

38RISK

open ↗

Referência

CVE-2016-4997

CVE-2016-4997—

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux

38RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.