Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,813cataloged exploits
35,788CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,549GitHub PoC 14,290VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
22,523 exploits
Referência
CVE-2014-9567
CVE-2014-9567—
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows rem
50RISK
open ↗
Referência
CVE-2014-9583
CVE-2014-9583—
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RISK
open ↗
Referência
CVE-2014-9583
CVE-2014-9583—
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RISK
open ↗
Referência
CVE-2014-9583
CVE-2014-9583—
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RISK
open ↗
Referência
CVE-2015-0493
CVE-2015-0493—
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.
23RISK
open ↗
Referência
CVE-2009-4728
CVE-2009-4728—
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2024-24919
CVE-2024-24919HIGHunder attackransomware
Information disclosure
100RISK
open ↗
Referência✓ VexDay Proof
Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)
CVE-2009-1353—doswindows
Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause
23RISK
open ↗
Referência
CVE-2026-9627
CVE-2026-9627HIGH
UTT HiPER 1200GW Web Management setSysAdm strcpy buffer overflow
41RISK
open ↗
Referência
CVE-2025-8730
CVE-2025-8730CRITICAL
Belkin F9K1009/F9K1010 Web Interface hard-coded credentials
48RISK
open ↗
Referência✓ VexDay Proof
Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)
CVE-2009-1356—doswindows
Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi
23RISK
open ↗
Referência
CVE-2013-4659
CVE-2013-4659—
Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. T
28RISK
open ↗
Referência
CVE-2021-42013
CVE-2021-42013CRITICALunder attackransomware
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
Referência
CVE-2021-42013
CVE-2021-42013CRITICALunder attackransomware
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
Referência
CVE-2021-42013
CVE-2021-42013CRITICALunder attackransomware
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
Referência
CVE-2026-9575
CVE-2026-9575MEDIUM
itsourcecode Student Transcript Processing System index.php sql injection
33RISK
open ↗
Referência
CVE-2026-9574
CVE-2026-9574MEDIUM
itsourcecode Student Transcript Processing System trans.php sql injection
33RISK
open ↗
Referência
CVE-2026-9573
CVE-2026-9573MEDIUM
itsourcecode Student Transcript Processing System index.php sql injection
33RISK
open ↗
Referência
CVE-2013-4692
CVE-2013-4692—
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
23RISK
open ↗
Referência
CVE-2013-4694
CVE-2013-4694—
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial
28RISK
open ↗
Referência
CVE-2013-4863
CVE-2013-4863—
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute a
28RISK
open ↗
Referência
CVE-2026-7293
CVE-2026-7293MEDIUM
SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection
33RISK
open ↗
Referência✓ VexDay Proof
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
CVE-2009-1664—webappsphp
myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords
23RISK
open ↗
Referência✓ VexDay Proof
TCPDB 3.8 - Arbitrary Add Admin Account
CVE-2009-1670—webappsphp
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin a
23RISK
open ↗
Referência✓ VexDay Proof
32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)
CVE-2009-1675—remotewindows_x86
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a
43RISK
open ↗
Referência✓ VexDay Proof
Flyspeck CMS 6.8 - Local/Remote File Inclusion / Change Add Admin
CVE-2009-1770—webappsphp
Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attack
23RISK
open ↗
Referência✓ VexDay Proof
ST-Gallery 0.1a - Multiple SQL Injections
CVE-2009-1799—webappsphp
Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1
23RISK
open ↗
Referência
CVE-2013-5447
CVE-2013-5447—
Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to exe
50RISK
open ↗
Referência
CVE-2015-1130
CVE-2015-1130HIGHunder attack
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISK
open ↗
Referência
CVE-2009-4761
CVE-2009-4761—
Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st
23RISK
open ↗
← previouspage 599 / 751next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.