Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
79,980cataloged exploits
36,899CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,476Referência 23,400GitHub PoC 15,250VulnCheck XDB 8,959Nuclei 4,393Metasploit 3,502✓ verified onlyrecentpopularrisk
24,476 exploits
Exploit-DB
TestLink Open Source Test Management < 1.9.16 - Remote Code Execution
install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c
23RISK
open ↗Exploit-DB✓ VexDay Proof
uWSGI < 2.0.17 - Directory Traversal
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversa
50RISK
open ↗Exploit-DB
DualDesk 20 - 'Proxy.exe' Denial of Service
Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.
35RISK
open ↗Exploit-DB
SEGGER embOS/IP FTP Server 3.22 - Denial of Service
SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service (daemon crash) via an in
23RISK
open ↗Exploit-DB
antMan < 0.9.1a - Authentication Bypass
antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and
35RISK
open ↗Exploit-DB
D-Link DIR-600M Wireless - Cross-Site Scripting
Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.
23RISK
open ↗Exploit-DB
Microsoft Windows Kernel (7 x86) - Local Privilege Escalation (MS16-039)
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W
76RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iOS 11.2.5 / watchOS 4.2.2 / tvOS 11.2.5 - 'bluetoothd' Memory Corruption
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchO
23RISK
open ↗Exploit-DB✓ VexDay Proof
Routers2 2.24 - Cross-Site Scripting
A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph
23RISK
open ↗Exploit-DB
School Management Script 3.0.4 - Authentication Bypass
SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/
23RISK
open ↗Exploit-DB✓ VexDay Proof
Asterisk chan_pjsip 15.2.0 - 'SUBSCRIBE' Stack Corruption
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Ce
35RISK
open ↗Exploit-DB
Concrete5 CMS < 8.3.0 - Username / Comments Enumeration
An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enum
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 8.1/2012 R2 - SMBv3 Null Pointer Dereference Denial of Service
The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2
35RISK
open ↗Exploit-DB
CMS Made Simple 2.1.6 - Remote Code Execution
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote
28RISK
open ↗Exploit-DB✓ VexDay Proof
Asterisk chan_pjsip 15.2.0 - 'INVITE' Denial of Service
An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asteris
35RISK
open ↗Exploit-DB✓ VexDay Proof
CloudMe Sync 1.10.9 - Stack-Based Buffer Overflow (Metasploit)
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RISK
open ↗Exploit-DB✓ VexDay Proof
AsusWRT LAN - Remote Code Execution (Metasploit)
An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpn
60RISK
open ↗Exploit-DB✓ VexDay Proof
AsusWRT LAN - Remote Code Execution (Metasploit)
An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, pro
60RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdr
23RISK
open ↗Exploit-DB
Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection
SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system
23RISK
open ↗Exploit-DB
Joomla! Component Alexandria Book Library 3.1.2 - 'letter' SQL Injection
SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter.
23RISK
open ↗Exploit-DB
Joomla! Component Proclaim 9.1.1 - Arbitrary File Upload
Arbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbi
23RISK
open ↗Exploit-DB
Joomla! Component CW Tags 2.0.6 - SQL Injection
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.
28RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log fi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allo
28RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle
23RISK
open ↗Exploit-DB
Armadito Antivirus 0.12.7.2 - Detection Bypass
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames cont
23RISK
open ↗Exploit-DB
NoMachine < 6.0.80 (x86) - 'nxfuse' Privilege Escalation
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoM
23RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to exe
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.