Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,001cataloged exploits
40,084CVEs with public exploitation
24,696lab-tested
AllReferência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'NtQueryInformationThread(ThreadBasicInformation)' 64-bit Stack Memory Disclosure
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RISK
open ↗Exploit-DB✓ VexDay Proof
Internet Explorer - 'RegExp.lastMatch' Memory Disclosure
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT
28RISK
open ↗Exploit-DB
Vehicle Sales Management System - Multiple Vulnerabilities
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/veh
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'nt!NtWaitForDebugEvent' 64-bit Stack Memory Disclosure
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RISK
open ↗Exploit-DB✓ VexDay Proof
Google Software Updater macOS - Unsafe use of Distributed Objects Privilege Escalation
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local
23RISK
open ↗Exploit-DB
Coship RT3052 Wireless Router - Persistent Cross-Site Scripting
Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen.
23RISK
open ↗Exploit-DB
Intelbras Telefone IP TIP200 LITE - Local File Disclosure
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via t
23RISK
open ↗Exploit-DB
Linux Kernel < 4.4.0-116 (Ubuntu 16.04.4) - Local Privilege Escalation
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RISK
open ↗Exploit-DB✓ VexDay Proof
Firefox 44.0.2 - ASM.JS JIT-Spray Remote Code Execution
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RISK
open ↗Exploit-DB✓ VexDay Proof
Firefox 46.0.1 - ASM.JS JIT-Spray Remote Code Execution
Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to ex
28RISK
open ↗Exploit-DB
Unitrends UEB 10.0 - Root Remote Code Execution
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL i
50RISK
open ↗Exploit-DB✓ VexDay Proof
Firefox 46.0.1 - ASM.JS JIT-Spray Remote Code Execution
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RISK
open ↗Exploit-DB
Unitrends UEB 10.0 - Root Remote Code Execution
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, w
50RISK
open ↗Exploit-DB✓ VexDay Proof
Firefox 44.0.2 - ASM.JS JIT-Spray Remote Code Execution
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox
35RISK
open ↗Exploit-DB
WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for
23RISK
open ↗Exploit-DB
Android DRM Services - Buffer Overflow
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Thi
23RISK
open ↗Exploit-DB
Microsoft Windows Kernel (7 x86) - Local Privilege Escalation (MS17-017)
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7
83RISK
open ↗Exploit-DB
MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remot
90RISK
open ↗Exploit-DB
Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri
60RISK
open ↗Exploit-DB
SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information pr
68RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e
28RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitr
23RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers
23RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Tuleap 9.17.99.189 - Blind SQL Injection
A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 a
23RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mai
23RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1
23RISK
open ↗Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within th
35RISK
open ↗Exploit-DB
ManageEngine Applications Manager 13.5 - Remote Code Execution (Metasploit)
A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The pu
60RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.