Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
79,980cataloged exploits
36,899CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,476Referência 23,400GitHub PoC 15,250VulnCheck XDB 8,959Nuclei 4,393Metasploit 3,502✓ verified onlyrecentpopularrisk
24,476 exploits
Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - Memory Corruption
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'NewScObjectNoCtor' Array Type Confusion
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - ImplicitCallFlags Checks Bypass
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'Array.prototype.reverse' Array Type Confusion
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site
23RISK
open ↗Exploit-DB
Tenda AC15 Router - Remote Code Execution
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code
35RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0
23RISK
open ↗Exploit-DB
NAT32 2.2 Build 22284 - Remote Command Execution
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is af
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
28RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
23RISK
open ↗Exploit-DB
NAT32 2.2 Build 22284 - Cross-Site Request Forgery
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is af
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an
23RISK
open ↗Exploit-DB
GNU binutils 2.26.1 - Integer Overflow (PoC)
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B
23RISK
open ↗Exploit-DB✓ VexDay Proof
CloudMe Sync < 1.11.0 - Buffer Overflow
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RISK
open ↗Exploit-DB
TypeSetter CMS 5.1 - Cross-Site Request Forgery
An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cro
23RISK
open ↗Exploit-DB
Advantech WebAccess 8.3.0 - Remote Code Execution
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS
28RISK
open ↗Exploit-DB
TypeSetter CMS 5.1 - 'Host' Header Injection
An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a m
23RISK
open ↗Exploit-DB✓ VexDay Proof
Juju-run Agent - Privilege Escalation (Metasploit)
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate pe
50RISK
open ↗Exploit-DB✓ VexDay Proof
glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro
38RISK
open ↗Exploit-DB✓ VexDay Proof
glibc - '$ORIGIN' Expansion Privilege Escalation (Metasploit)
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro
38RISK
open ↗Exploit-DB✓ VexDay Proof
glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use
43RISK
open ↗Exploit-DB
LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a
28RISK
open ↗Exploit-DB✓ VexDay Proof
macOS Kernel - Use-After-Free Due to Lack of Locking in 'AppleEmbeddedOSSupportHostClient::registerNotificationPort'
An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar S
23RISK
open ↗Exploit-DB
Adobe Coldfusion 11.0.03.292866 - BlazeDS Java Object Deserialization Remote Code Execution
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier hav
100RISK
open ↗Exploit-DB✓ VexDay Proof
Android - 'getpidcon' Permission Bypass in KeyStore Service
In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to loc
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.