Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits
32,195CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecentpopularrisk
20,003 exploits
Referência
CVE-2021-43062
CVE-2021-43062MEDIUM
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0
53RISK
open ↗
Referência
CVE-2017-5799
CVE-2017-5799—
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve
28RISK
open ↗
Referência
CVE-2018-1821
CVE-2018-1821HIGH
IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) a
46RISK
open ↗
Referência
CVE-2010-2033
CVE-2010-2033—
Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Jooml
43RISK
open ↗
Referência
CVE-2010-4719
CVE-2010-4719—
Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r
43RISK
open ↗
Referência
CVE-2010-4719
CVE-2010-4719—
Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r
43RISK
open ↗
Referência
CVE-2016-7866
CVE-2016-7866—
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitatio
28RISK
open ↗
Referência
CVE-2016-7866
CVE-2016-7866—
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitatio
28RISK
open ↗
Referência
CVE-2017-3549
CVE-2017-3549—
Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Sup
28RISK
open ↗
Referência
CVE-2018-8719
CVE-2018-8719—
An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-securit
43RISK
open ↗
Referência
CVE-2025-4978
CVE-2025-4978CRITICAL
Netgear DGND3700 Basic Authentication BRS_top.html improper authentication
53RISK
open ↗
Referência
CVE-2010-2035
CVE-2010-2035—
Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2017-6190
CVE-2017-6190—
Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows
28RISK
open ↗
Referência
CVE-2015-3623
CVE-2015-3623—
XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server
28RISK
open ↗
Referência
CVE-2015-3623
CVE-2015-3623—
XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server
28RISK
open ↗
Referência
CVE-2022-34046
CVE-2022-34046—
An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via vie
43RISK
open ↗
Referência
CVE-2021-43136
CVE-2021-43136—
An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain
28RISK
open ↗
Referência
CVE-2010-1306
CVE-2010-1306—
Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at
43RISK
open ↗
Referência
CVE-2010-1306
CVE-2010-1306—
Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at
43RISK
open ↗
Referência
CVE-2010-1875
CVE-2010-1875—
Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows re
43RISK
open ↗
Referência
Microsoft Windows - GDI+ '.ICO' Remote Division By Zero
CVE-2008-4327—
gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attacke
28RISK
open ↗
Referência
CVE-2010-2351
CVE-2010-2351—
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remo
28RISK
open ↗
Referência
CVE-2019-15039
CVE-2019-15039—
An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in
28RISK
open ↗
Referência
CVE-2021-46379
CVE-2021-46379—
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrust
43RISK
open ↗
Referência
CVE-2019-3924
CVE-2019-3924—
MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The so
28RISK
open ↗
Referência
CVE-2010-1602
CVE-2010-1602—
Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attack
43RISK
open ↗
Referência
CVE-2010-1602
CVE-2010-1602—
Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attack
43RISK
open ↗
Referência
Ruby 1.9 - regex engine Remote Socket Memory Leak
CVE-2008-3443—
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, an
28RISK
open ↗
Referência
CVE-2017-9414
CVE-2017-9414—
Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote atta
28RISK
open ↗
Referência
CVE-2017-9414
CVE-2017-9414—
Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote atta
28RISK
open ↗
← previouspage 121 / 667next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.