Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,682cataloged exploits

39,953CVEs with public exploitation

24,696lab-tested

All Referência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

4,513 exploits

Nucleimedium

Fortinet FortiOS - Cross-Site Scripting

CVE-2018-13380MEDIUM

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and

40RISK

open ↗

Nucleimedium

Zeta Producer Desktop CMS <14.2.1 - Local File Inclusion

CVE-2018-13980—

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclos

38RISK

open ↗

Nucleimedium

Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting

CVE-2018-14013—

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.

18RISK

open ↗

Nucleicritical

VelotiSmart Wifi - Directory Traversal

CVE-2018-14064—

The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../..

50RISK

open ↗

Nucleimedium

Orange Forum 1.4.0 - Open Redirect

CVE-2018-14474—

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.

18RISK

open ↗

Nucleimedium

Django - Open Redirect

CVE-2018-14574—

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

23RISK

open ↗

Nucleicritical

Responsive filemanager 9.13.1 Server-Side Request Forgery

CVE-2018-14728—

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

60RISK

open ↗

Nucleihigh

cgit < 1.2.1 - Directory Traversal

CVE-2018-14912—

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned

60RISK

open ↗

Nucleicritical

Loytec LGATE-902 <6.4.2 - Local File Inclusion

CVE-2018-14916—

LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.

23RISK

open ↗

Nucleihigh

LOYTEC LGATE-902 6.3.2 - Local File Inclusion

CVE-2018-14918—

LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.

23RISK

open ↗

Nucleimedium

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect

CVE-2018-14931—

An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exis

18RISK

open ↗

Nucleicritical

NUUO NVRmini - Remote Command Execution

CVE-2018-14933CRITICALunder attack

upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir par

100RISK

open ↗

Nucleihigh

LG-Ericsson iPECS NMS 30M - Local File Inclusion

CVE-2018-15138—

Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.

23RISK

open ↗

Nucleihigh

D-Link Central WifiManager - Server-Side Request Forgery

CVE-2018-15517—

The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an

30RISK

open ↗

Nucleihigh

Responsive FileManager <9.13.4 - Local File Inclusion

CVE-2018-15535—

/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname

50RISK

open ↗

Nucleihigh

Argus Surveillance DVR 4.0.0.0 - Local File Inclusion

CVE-2018-15745—

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F

60RISK

open ↗

Nucleihigh

DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization

CVE-2018-15811HIGHunder attack

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

100RISK

open ↗

Nucleimedium

Jorani Leave Management System 0.6.5 - Cross-Site Scripting

CVE-2018-15917—

Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HT

38RISK

open ↗

Nucleicritical

Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

CVE-2018-15961CRITICALunder attack

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RISK

open ↗

Nucleimedium

WirelessHART Fieldgate SWG70 3.0 - Local File Inclusion

CVE-2018-16059—

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename par

43RISK

open ↗

Nucleimedium

Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion

CVE-2018-16133—

Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.

50RISK

open ↗

Nucleimedium

BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting

CVE-2018-16139—

Cross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web sc

18RISK

open ↗

Nucleicritical

WordPress Gift Voucher <4.1.8 - Blind SQL Injection

CVE-2018-16159—

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/ad

30RISK

open ↗

Nucleicritical

LogonTracer <=1.2.0 - Remote Command Injection

CVE-2018-16167—

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

60RISK

open ↗

Nucleimedium

vBulletin - Open Redirect

CVE-2018-6200—

vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.

18RISK

open ↗

Nucleicritical

D-Link - Unauthenticated Remote Code Execution

CVE-2018-6530CRITICALunder attackransomware

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_

95RISK

open ↗

Nucleicritical

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

CVE-2018-6605—

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, get

50RISK

open ↗

Nucleimedium

Zimbra Collaboration Suite - Cross-site Scripting

CVE-2018-6882MEDIUMunder attackransomware

Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Sui

63RISK

open ↗

Nucleihigh

DedeCMS 5.7 - Path Disclosure

CVE-2018-6910—

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/in

23RISK

open ↗

Nucleicritical

VMware NSX SD-WAN Edge - Command Injection

CVE-2018-6961HIGHunder attack

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.