Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,883cataloged exploits
40,037CVEs with public exploitation
24,696lab-tested
AllReferência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecentpopularrisk
4,527 exploits
Nucleicritical
Amcrest IP Camera Web Management - Data Exposure
CVE-2017-8229—
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative cred
40RISK
open ↗
Nucleicritical
Joomla! <3.7.1 - SQL Injection
CVE-2017-8917—
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISK
open ↗
Nucleimedium
Reflected XSS - Telerik Reporting Module
CVE-2017-9140—
Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms
18RISK
open ↗
Nucleimedium
WordPress Raygun4WP <=1.8.0 - Cross-Site Scripting
CVE-2017-9288—
The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter).
18RISK
open ↗
Nucleimedium
Odoo 8.0/9.0/10.0 - Local File Inclusion
CVE-2017-9416—
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to rea
18RISK
open ↗
Nucleimedium
Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery
CVE-2017-9506—
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before
60RISK
open ↗
Nucleicritical
Apache Struts2 S2-053 - Remote Code Execution
CVE-2017-9791CRITICALunder attack
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe
100RISK
open ↗
Nucleihigh
Apache Struts2 S2-052 - Remote Code Execution
CVE-2017-9805HIGHunder attack
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RISK
open ↗
Nucleihigh
DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution
CVE-2017-9822HIGHunder attackransomware
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code e
100RISK
open ↗
Nucleihigh
BOA Web Server 0.94.14 - Arbitrary File Access
CVE-2017-9833—
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read
50RISK
open ↗
Nucleicritical
PHPUnit - Remote Code Execution
CVE-2017-9841CRITICALunder attack
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗
Nucleimedium
Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal
CVE-2017-9965—
An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2
18RISK
open ↗
Nucleicritical
Cisco RV132W/RV134W Router - Information Disclosure
CVE-2018-0127—
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VP
40RISK
open ↗
Nucleihigh
Cisco ASA - Local File Inclusion
CVE-2018-0296HIGHunder attack
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo
100RISK
open ↗
Nucleimedium
Jolokia 1.3.7 - Cross-Site Scripting
CVE-2018-1000129—
An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute ma
23RISK
open ↗
Nucleihigh
Jolokia Agent - JNDI Code Injection
CVE-2018-1000130—
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to
40RISK
open ↗
Nucleicritical
Cobbler - Authentication Bypass
CVE-2018-1000226—
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibl
23RISK
open ↗
Nucleicritical
GitList < 0.6.0 Remote Code Execution
CVE-2018-1000533—
klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in
40RISK
open ↗
Nucleihigh
Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
CVE-2018-1000600—
A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCrede
40RISK
open ↗
Nucleimedium
Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting
CVE-2018-19439—
XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later vers
23RISK
open ↗
Nucleihigh
PHP Proxy 3.0.3 - Local File Inclusion
CVE-2018-19458—
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI UR
50RISK
open ↗
Nucleimedium
DomainMOD 4.11.01 - Cross-Site Scripting
CVE-2018-19749—
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.
38RISK
open ↗
Nucleimedium
DomainMOD 4.11.01 - Cross-Site Scripting
CVE-2018-19751—
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
38RISK
open ↗
Nucleimedium
DomainMOD 4.11.01 - Cross-Site Scripting
CVE-2018-19752—
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
38RISK
open ↗
Nucleihigh
Tarantella Enterprise <3.11 - Local File Inclusion
CVE-2018-19753—
Tarantella Enterprise before 3.11 allows Directory Traversal.
23RISK
open ↗
Nucleimedium
Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting
CVE-2018-19877—
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.
43RISK
open ↗
Nucleimedium
DomainMOD 4.11.01 - Cross-Site Scripting
CVE-2018-19892—
DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.
18RISK
open ↗
Nucleimedium
DomainMOD 4.11.01 - Cross-Site Scripting
CVE-2018-19914—
DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.
38RISK
open ↗
Nucleimedium
DomainMOD <=4.11.01 - Cross-Site Scripting
CVE-2018-19915—
DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.
38RISK
open ↗
Nucleimedium
DomainMOD 4.11.01 - Cross-Site Scripting
CVE-2018-20009—
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.
38RISK
open ↗
← previouspage 113 / 151next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.