Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,866cataloged exploits

35,812CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,573GitHub PoC 14,316VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

22,549 exploits

Referência

CVE-2011-5228

CVE-2011-5228—

Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote att

23RISK

open ↗

Referência

CVE-2012-2939

CVE-2012-2939—

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute

23RISK

open ↗

Referência

CVE-2026-11530

CVE-2026-11530MEDIUM

imvks786 student_management_system Login index.ph sql injection

33RISK

open ↗

Referência✓ VexDay Proof

W3Filer 2.1.3 - Remote Stack Overflow (PoC)

CVE-2007-3548—doswindows

Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang or

23RISK

open ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

CVE-2007-4140—localwindows

Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary c

23RISK

open ↗

Referência

CVE-2015-1422

CVE-2015-1422—

Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary

23RISK

open ↗

Referência

CVE-2015-1422

CVE-2015-1422—

Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting

CVE-2008-2295—webappsphp

Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remot

23RISK

open ↗

Referência

CVE-2010-5001

CVE-2010-5001—

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr

23RISK

open ↗

Referência

CVE-2010-5008

CVE-2010-5008—

SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to

23RISK

open ↗

Referência

CVE-2010-5009

CVE-2010-5009—

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência

CVE-2026-11488

CVE-2026-11488MEDIUM

code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection

33RISK

open ↗

Referência

CVE-2012-4344

CVE-2012-4344—

Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web

23RISK

open ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2341—webappsphp

PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitr

23RISK

open ↗

Referência

CVE-2010-5032

CVE-2010-5032—

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers

23RISK

open ↗

Referência

CVE-2025-2749

CVE-2025-2749HIGHunder attack

Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

71RISK

open ↗

Referência

CVE-2021-31962

CVE-2021-31962CRITICAL

Kerberos AppContainer Security Feature Bypass Vulnerability

48RISK

open ↗

Referência✓ VexDay Proof

MeltingIce File System 1.0 - Arbitrary Add User

CVE-2008-2348—webappsphp

MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and e

23RISK

open ↗

Referência✓ VexDay Proof

CMS WebManager-Pro - Multiple SQL Injections

CVE-2008-2351—webappsphp

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência✓ VexDay Proof

How2ASP.net WebBoard 4.1 - SQL Injection

CVE-2008-2417—webappsphp

SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities

CVE-2008-5712—doslinux

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)

23RISK

open ↗

Referência

CVE-2015-1518

CVE-2015-1518—

SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote

23RISK

open ↗

Referência

CVE-2015-1538

CVE-2015-1538—

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

open ↗

Referência

CVE-2010-5034

CVE-2010-5034—

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbit

23RISK

open ↗

Referência

CVE-2010-1296

CVE-2010-1296—

Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary

28RISK

open ↗

Referência

CVE-2009-2223

CVE-2009-2223—

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute

23RISK

open ↗

Referência

CVE-2015-1725

CVE-2015-1725—

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISK

open ↗

Referência

CVE-2018-4090

CVE-2018-4090—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS

23RISK

open ↗

Referência

CVE-2019-19230

CVE-2019-19230CRITICAL

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component th

48RISK

open ↗

Referência

CVE-2015-3933

CVE-2015-3933—

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.