Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗Exploit-DB✓ VexDay Proof
VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inje
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection
Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow
Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows
23RISK
open ↗Exploit-DB✓ VexDay Proof
EncapsGallery 1.0 - 'gallery.php' SQL Injection
SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitra
23RISK
open ↗Exploit-DB✓ VexDay Proof
Plogger Beta 2 - 'index.php?id' SQL Injection
SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.3.4/1.5.1 - 'picture.php' SQL Injection
Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP JackKnife 2.21 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote at
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access
Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary loc
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snipe Gallery 3.1.4 - 'search.php?keyword' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inj
23RISK
open ↗Exploit-DB✓ VexDay Proof
McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion
PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗Exploit-DB✓ VexDay Proof
Plogger Beta 2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
EveryAuction 1.53 - Auction.pl Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to injec
23RISK
open ↗Exploit-DB✓ VexDay Proof
McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion
Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via t
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.3.4/1.5.1 - 'comments.php' SQL Injection
Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
VCD-db 0.9x - 'search.php?by' SQL Injection
SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL co
23RISK
open ↗Exploit-DB✓ VexDay Proof
McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL
23RISK
open ↗Exploit-DB✓ VexDay Proof
LogiSphere 0.9.9 j - 'Search?NS-query-pat' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (
23RISK
open ↗Exploit-DB✓ VexDay Proof
LocazoList Classifieds 1.0 - 'SearchDB.asp' Input Validation
Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inje
23RISK
open ↗Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allow
33RISK
open ↗Exploit-DB✓ VexDay Proof
Scout Portal Toolkit 1.3.1 - 'SPT-QuickSearch.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke
23RISK
open ↗Exploit-DB✓ VexDay Proof
Arab Portal 2.0 - 'Link.php' SQL Injection
SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpCOIN 1.2.2 - 'phpcoinsessid' SQL Injection / Remote Code Execution
SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon WorldClient 8.1.3 - Denial of Service
WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inbox
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sights 'N Sounds Streaming Media Server 2.0.3 - 'SWS.exe' Buffer Overflow
Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cau
23RISK
open ↗Exploit-DB✓ VexDay Proof
Magic Book Professional 2.0 - 'Book.cfm' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.