Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,883cataloged exploits

40,037CVEs with public exploitation

24,696lab-tested

All Referência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecent popular risk

3,528 exploits

Metasploit300

SAP Host Agent Information Disclosure

CVE-2013-3319—

The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitiv

23RISK

Metasploit300

Binom3 Web Management Login Scanner, Config and Password File Dump

CVE-2017-5162—

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for rem

23RISK

Metasploit300

Windows Pulse Secure Connect Client Saved Password Extractor

CVE-2020-8956LOW

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settin

23RISK

Metasploit300

Windows Gather TeamViewer Passwords

CVE-2019-18988HIGHunder attack

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

86RISK

Metasploit300

Apache Axis2 Brute Force Utility

CVE-2010-0219—

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products

60RISK

Metasploit300

Atlassian Crowd XML Entity Expansion Remote File Access

CVE-2012-2926—

Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible bef

50RISK

Metasploit300

Apache "mod_userdir" User Enumeration

CVE-2001-1013—

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists a

50RISK

Metasploit300

Windows Gather Forensics Duqu Registry Check

CVE-2011-3402HIGHunder attack

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Wind

88RISK

Metasploit300

FannyBMP or DementiaWheel Detection Registry Check

CVE-2010-2568HIGHunder attack

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 all

100RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-2010-4094—

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-2010-0557—

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-3843—

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-3548—

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-4188—

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RISK

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-4189—

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RISK

Metasploit300

TP-Link Wireless Lite N Access Point Directory Traversal Vulnerability

CVE-2012-5687—

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13

50RISK

Metasploit300

Apache Tomcat User Enumeration

CVE-2009-0580—

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, al

60RISK

Metasploit300

HTTP Cross-Site Tracing Detection

CVE-2005-3398—

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the

23RISK

Metasploit300

WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversal

CVE-2012-4031—

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attacke

50RISK

Metasploit300

HTTP WebDAV Internal IP Scanner

CVE-2002-0422—

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whic

30RISK

Metasploit300

WordPress XMLRPC GHOST Vulnerability Scanner

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RISK

Metasploit300

WordPress Brute Force and User Enumeration Utility

CVE-2009-2335—

WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the u

60RISK

Metasploit300

D-Link DIR-615H HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISK

Metasploit300

D-Link DIR-300A / DIR-320 / DIR-615D HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISK

Metasploit300

Wordpress Pingback Locator

CVE-2013-0235—

The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct

23RISK

Metasploit300

SSH Username Enumeration

CVE-2006-5229—

OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations

50RISK

Metasploit300

SSH Username Enumeration

CVE-2003-0190—

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user d

60RISK

Metasploit300

SSH Username Enumeration

CVE-2018-15473MEDIUM

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

Metasploit300

SSH Username Enumeration

CVE-2016-6210MEDIUM

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static

70RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.