Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,900cataloged exploits
35,840CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
22,600 exploits
Referência
CVE-2026-14700
CVE-2026-14700MEDIUM
code-projects Internship Management System Employer Login Endpoint login.php sql injection
33RISK
open ↗
Referência
CVE-2021-39144
CVE-2021-39144HIGHunder attack
XStream is vulnerable to a Remote Command Execution attack
100RISK
open ↗
Referência
CVE-2010-0944
CVE-2010-0944—
Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to
43RISK
open ↗
Referência
CVE-2014-9415
CVE-2014-9415—
Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QE
23RISK
open ↗
Referência
CVE-2014-9416
CVE-2014-9416—
Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute
23RISK
open ↗
Referência
CVE-2014-9417
CVE-2014-9417—
The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (progr
23RISK
open ↗
Referência
CVE-2014-9439
CVE-2014-9439—
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary
23RISK
open ↗
Referência
CVE-2010-4830
CVE-2010-4830—
SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows r
23RISK
open ↗
Referência
CVE-2010-4834
CVE-2010-4834—
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allo
23RISK
open ↗
Referência
CVE-2010-4850
CVE-2010-4850—
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RISK
open ↗
Referência
CVE-2010-4853
CVE-2010-4853—
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2010-4853
CVE-2010-4853—
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2012-4060
CVE-2012-4060—
Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência
CVE-2010-0951
CVE-2010-0951—
SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2026-59097
CVE-2026-59097MEDIUM
Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets
33RISK
open ↗
Referência
CVE-2026-59095
CVE-2026-59095HIGH
LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl
41RISK
open ↗
Referência
CVE-2026-59094
CVE-2026-59094HIGH
Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store
41RISK
open ↗
Referência
CVE-2026-34097
CVE-2026-34097MEDIUM
Guardian Language-System XSS via id Parameter in text_file.php
33RISK
open ↗
Referência
CVE-2026-34096
CVE-2026-34096MEDIUM
Guardian Language-System XSS via name Parameter in designer.php
33RISK
open ↗
Referência
CVE-2026-58127
CVE-2026-58127CRITICAL
PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service
48RISK
open ↗
Referência
CVE-2026-11562
CVE-2026-11562MEDIUM
WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update
33RISK
open ↗
Referência
CVE-2026-9576
CVE-2026-9576MEDIUM
Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export
33RISK
open ↗
Referência
CVE-2026-13565
CVE-2026-13565MEDIUM
SourceCodester Class and Exam Timetabling System edit_class1.php sql injection
33RISK
open ↗
Referência
CVE-2026-13563
CVE-2026-13563HIGH
Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow
41RISK
open ↗
Referência
CVE-2010-1062
CVE-2010-1062—
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi
23RISK
open ↗
Referência
CVE-2010-1066
CVE-2010-1066—
AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whic
23RISK
open ↗
Referência
CVE-2014-9633
CVE-2014-9633—
The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device ha
23RISK
open ↗
Referência
CVE-2020-6207
CVE-2020-6207CRITICALunder attack
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an
100RISK
open ↗
Referência
CVE-2020-6207
CVE-2020-6207CRITICALunder attack
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an
100RISK
open ↗
Referência
CVE-2020-6207
CVE-2020-6207CRITICALunder attack
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an
100RISK
open ↗
← previouspage 641 / 754next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.