Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
Arq 5.9.7 - Local Privilege Escalation
The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper
23RISK
open ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently su
23RISK
open ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 5.0.0 - Local Privilege Escalation
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently su
23RISK
open ↗Exploit-DB
Sera 1.2 - Local Privilege Escalation / Password Disclosure
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial
23RISK
open ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ear
23RISK
open ↗Exploit-DB✓ VexDay Proof
Arq 5.9.6 - Local Privilege Escalation
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges v
23RISK
open ↗Exploit-DB✓ VexDay Proof
Readymade Classifieds Script 1.0 - SQL Injection
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-detail
23RISK
open ↗Exploit-DB✓ VexDay Proof
Techno Portfolio Management Panel - 'id' SQL Injection
Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation
Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and c
23RISK
open ↗Exploit-DB
Ruby < 2.2.8 / < 2.3.5 / < 2.4.2 / < 2.5.0-preview1 - 'NET::Ftp' Command Injection
Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and p
45RISK
open ↗Exploit-DB
Artica Web Proxy 3.06 - Remote Code Execution
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site
23RISK
open ↗Exploit-DB✓ VexDay Proof
MistServer 2.12 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web scrip
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation (Metasploit)
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The is
50RISK
open ↗Exploit-DB
Linux Kernel - 'The Huge Dirty Cow' Overwriting The Huge Zero Page (1)
The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside
23RISK
open ↗Exploit-DB✓ VexDay Proof
QEMU - NBD Server Long Export Name Stack Buffer Overflow
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client
46RISK
open ↗Exploit-DB✓ VexDay Proof
HP iMC Plat 7.2 - Remote Code Execution (2)
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RISK
open ↗Exploit-DB✓ VexDay Proof
Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The is
50RISK
open ↗Exploit-DB✓ VexDay Proof
HP iMC Plat 7.2 - Remote Code Execution
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RISK
open ↗Exploit-DB
WordPress Plugin WooCommerce 2.0/3.0 - Directory Traversal
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco
46RISK
open ↗Exploit-DB
Diving Log 6.0 - XML External Entity Injection
XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled d
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - Incorrect Function Declaration Scope
ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'Inline::InlineCallApplyTarget_Shared' does not Return the return Instruction
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versio
35RISK
open ↗Exploit-DB✓ VexDay Proof
Exim 4.89 - 'BDAT' Denial of Service
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'GlobOpt::OptTagChecks' Must Consider IsLoopPrePass Properly
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versio
35RISK
open ↗Exploit-DB✓ VexDay Proof
ZTE ZXDSL 831CII - Improper Access Restrictions
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to mo
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'BailOutOnTaggedValue' Bailouts Type Confusion
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows a
35RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel - 'mincore()' Uninitialized Kernel Heap Page Disclosure
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, w
23RISK
open ↗Exploit-DB
Linux Kernel (Ubuntu 17.04) - 'XFRM' Local Privilege Escalation
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gai
23RISK
open ↗Exploit-DB✓ VexDay Proof
WebKit - 'WebCore::TreeScope::documentScope' Use-After-Free
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud
23RISK
open ↗Exploit-DB✓ VexDay Proof
WebKit - 'WebCore::Style::TreeResolver::styleForElement' Use-After-Free
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.