Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,978 exploits
Referência
CVE-2015-3302
CVE-2015-3302—
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1
28RISK
open ↗
Referência
CVE-2009-1330
CVE-2009-1330—
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISK
open ↗
Referência
Easy RM to MP3 Converter - Universal Stack Overflow
CVE-2009-1330—
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISK
open ↗
Referência
CVE-2016-6272
CVE-2016-6272—
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing s
28RISK
open ↗
Referência
CVE-2018-20525
CVE-2018-20525—
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
28RISK
open ↗
Referência
CVE-2018-20525
CVE-2018-20525—
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
28RISK
open ↗
Referência
CVE-2018-20525
CVE-2018-20525—
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
28RISK
open ↗
Referência
CVE-2023-3643
CVE-2023-3643HIGH
Boss Mini document file inclusion
78RISK
open ↗
Referência
CVE-2015-1497
CVE-2015-1497—
radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execu
60RISK
open ↗
Referência
CVE-2020-35848
CVE-2020-35848—
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.
60RISK
open ↗
Referência
CVE-2005-0116
CVE-2005-0116—
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RISK
open ↗
Referência
CVE-2021-40379
CVE-2021-40379—
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 doe
28RISK
open ↗
Referência
Barryvan Compo Manager 0.3 - Remote File Inclusion
CVE-2008-1126—
PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arb
28RISK
open ↗
Referência
Joomla! Component imagebrowser 0.1.5 rc2 - Directory Traversal
CVE-2008-4668—
Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote atta
43RISK
open ↗
Referência
CVE-2011-0959
CVE-2011-0959—
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote a
28RISK
open ↗
Referência
Microsoft Windows Media Player - '.wav' Remote Crash (PoC)
CVE-2008-5745—
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, includ
28RISK
open ↗
Referência
Google Chrome - 'ChromeHTML://' Remote Parameter Injection
CVE-2008-5750—
Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to ex
28RISK
open ↗
Referência
CVE-2016-9899
CVE-2016-9899—
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.
28RISK
open ↗
Referência
CVE-2009-1667
CVE-2009-1667—
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RISK
open ↗
Referência
CVE-2009-1667
CVE-2009-1667—
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RISK
open ↗
Referência
CVE-2009-1667
CVE-2009-1667—
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RISK
open ↗
Referência
CVE-2017-3195
CVE-2017-3195—
Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack
28RISK
open ↗
Referência
CVE-2017-6548
CVE-2017-6548—
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC
28RISK
open ↗
Referência
CVE-2017-2931
CVE-2017-2931—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the pa
28RISK
open ↗
Referência
CVE-2018-5159
CVE-2018-5159—
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,
28RISK
open ↗
Referência
CVE-2013-0657
CVE-2013-0657—
Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote
28RISK
open ↗
Referência
EFS Easy Chat Server 2.2 - Remote Denial of Service
CVE-2004-2466—
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username
60RISK
open ↗
Referência
CVE-2014-5111
CVE-2014-5111—
Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a ..
43RISK
open ↗
Referência
CVE-2011-1563
CVE-2011-1563—
Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier
60RISK
open ↗
Referência
CVE-2013-0177
CVE-2013-0177—
Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business
28RISK
open ↗
← previouspage 103 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.