Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits

40,156CVEs with public exploitation

24,696lab-tested

All Referência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecent popular risk

24,488 exploits

Exploit-DB

Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

CVE-2017-14095—remotemultiple19 Dec 2017

A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to pe

28RISK

Exploit-DB

Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

CVE-2017-11398—remotemultiple19 Dec 2017

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 an

23RISK

Exploit-DB✓ VexDay Proof

Zoom Linux Client 2.0.106600.0904 - Stack-Based Buffer Overflow (PoC)

CVE-2017-15048—doslinux18 Dec 2017

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote

28RISK

Exploit-DB✓ VexDay Proof

Zoom Linux Client 2.0.106600.0904 - Command Injection

CVE-2017-15049—doslinux18 Dec 2017

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when c

28RISK

Exploit-DB✓ VexDay Proof

Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit)

CVE-2017-17560—remotephp18 Dec 2017

An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquer

60RISK

Exploit-DB✓ VexDay Proof

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Remote Code Execution

CVE-2017-17562HIGHunder attackremotelinux18 Dec 2017

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T

100RISK

Exploit-DB

Linux kernel < 4.10.15 - Race Condition Privilege Escalation

CVE-2017-10661—locallinux15 Dec 2017

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia

28RISK

Exploit-DB

Sync Breeze 10.2.12 - Denial of Service

CVE-2017-17088—doswindows15 Dec 2017

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The we

23RISK

Exploit-DB✓ VexDay Proof

Advantech WebAccess 8.2-2017.03.31 - Webvrpcs Service Opcode 80061 Stack Buffer Overflow (Metasploit)

CVE-2017-14016—webappswindows14 Dec 2017

A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati

43RISK

Exploit-DB✓ VexDay Proof

Paid To Read Script 2.0.5 - 'uid' / 'fnum' / 'fn' SQL Injection

CVE-2017-17651—webappsphp14 Dec 2017

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum para

23RISK

Exploit-DB

Linksys WVBR0 - 'User-Agent' Remote Command Injection

CVE-2017-17411—webappshardware14 Dec 2017

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authe

60RISK

Exploit-DB✓ VexDay Proof

Palo Alto Networks Firewalls - Root Remote Code Execution

CVE-2017-15944CRITICALunder attackremotehardware14 Dec 2017

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote

100RISK

Exploit-DB✓ VexDay Proof

FS Lynda Clone 1.0 - SQL Injection

CVE-2017-17643—webappsphp14 Dec 2017

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

23RISK

Exploit-DB

Piwigo 2.9.1 - 'cat_true' / 'cat_false' SQL Injection

CVE-2017-10682—webappsphp14 Dec 2017

SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitra

23RISK

Exploit-DB✓ VexDay Proof

Bus Booking Script 1.0 - 'txtname' SQL Injection

CVE-2017-17645—webappsphp14 Dec 2017

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.

23RISK

Exploit-DB

Readymade Video Sharing Script 3.2 - HTML Injection

CVE-2017-17649—webappsphp14 Dec 2017

Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

23RISK

Exploit-DB✓ VexDay Proof

GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow

CVE-2017-1000408—locallinux13 Dec 2017

A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environme

23RISK

Exploit-DB

Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read

CVE-2017-16787—webappscgi13 Dec 2017

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read

23RISK

Exploit-DB✓ VexDay Proof

Joomla! Component JEXTN Video Gallery 3.0.5 - 'id' SQL Injection

CVE-2017-17872—webappsphp13 Dec 2017

The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.

23RISK

Exploit-DB✓ VexDay Proof

GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow

CVE-2017-1000409—locallinux13 Dec 2017

A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environ

23RISK

Exploit-DB✓ VexDay Proof

Joomla! Component JEXTN Question And Answer 3.1.0 - SQL Injection

CVE-2017-17871—webappsphp13 Dec 2017

The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action

23RISK

Exploit-DB

vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion

CVE-2017-17672—webappsmultiple13 Dec 2017

In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file delet

28RISK

Exploit-DB✓ VexDay Proof

Apple macOS/iOS - Multiple Kernel Use-After-Frees due to Incorrect IOKit Object Lifetime Management in IOTimeSyncClockManagerUserClient

CVE-2017-13847—dosmultiple12 Dec 2017

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The is

23RISK

Exploit-DB✓ VexDay Proof

Apple macOS/iOS - Kernel Double Free due to Incorrect API Usage in Flow Divert Socket Option Handling

CVE-2017-13867—dosmultiple12 Dec 2017

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISK

Exploit-DB

Accesspress Anonymous Post Pro < 3.2.0 - Arbitrary File Upload

CVE-2017-16949—webappsphp12 Dec 2017

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper in

28RISK

Exploit-DB✓ VexDay Proof

Apple XNU Kernel - Memory Corruption due to Integer Overflow in __offsetof Usage in posix_spawn on 32-bit Platforms

CVE-2017-13876—dosmultiple12 Dec 2017

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISK

Exploit-DB✓ VexDay Proof

Joomla! Component JBuildozer 1.4.1 - 'appid' SQL Injection

CVE-2017-17870—webappsphp12 Dec 2017

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.

23RISK

Exploit-DB✓ VexDay Proof

Apple macOS - Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig

CVE-2017-13875—dosmacos12 Dec 2017

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graph

23RISK

Exploit-DB✓ VexDay Proof

Yoga Class Script 1.0 - 'list?city' SQL Injection

CVE-2017-17630—webappsphp11 Dec 2017

Yoga Class Script 1.0 has SQL Injection via the /list city parameter.

23RISK

Exploit-DB

Advanced World Database 2.0.5 - SQL Injection

CVE-2017-17640—webappsphp11 Dec 2017

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.