Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB
IKARUS anti.virus 2.16.7 - 'ntguard_x64' Local Privilege Escalation
CVE-2017-14961—localwindows_x86-6413 Nov 2017
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kirby CMS < 2.5.7 - Cross-Site Scripting
CVE-2017-16807—webappsphp13 Nov 2017
A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exist
23RISK
open ↗
Exploit-DB
Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload
CVE-2017-16524—webappsphp13 Nov 2017
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBB 1.8.13 - Remote Code Execution
CVE-2017-16780—webappsphp11 Nov 2017
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration fi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBB 1.8.13 - Cross-Site Scripting
CVE-2017-16781—webappsphp11 Nov 2017
The installer in MyBB before 1.8.13 has XSS.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass
CVE-2017-6331—localwindows10 Nov 2017
Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 11 - 'jscript!JsErrorToString' Use-After-Free
CVE-2017-11810—doswindows09 Nov 2017
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window
35RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP 7.1.8 - Heap Buffer Overflow
CVE-2017-16642—dosmultiple09 Nov 2017
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian hand
28RISK
open ↗
Exploit-DB
Ametys CMS 4.0.2 - Password Reset
CVE-2017-16935—webappsphp07 Nov 2017
Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to
23RISK
open ↗
Exploit-DB
ManageEngine Applications Manager 13 - SQL Injection
CVE-2017-16542—webappswindows07 Nov 2017
Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name param
23RISK
open ↗
Exploit-DB
ManageEngine Applications Manager 13 - SQL Injection
CVE-2017-16543—webappswindows07 Nov 2017
Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated
23RISK
open ↗
Exploit-DB
Linux Kernel 4.13 (Ubuntu 17.10) - 'waitid()' SMEP/SMAP/Chrome Sandbox Privilege Escalation
CVE-2017-5123—locallinux06 Nov 2017
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISK
open ↗
Exploit-DB
Avaya IP Office (IPO) < 10.1 - 'SoftConsole' Remote Buffer Overflow (SEH)
CVE-2017-11309—remotewindows05 Nov 2017
Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary co
23RISK
open ↗
Exploit-DB
Avaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow
CVE-2017-12969—doswindows05 Nov 2017
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows r
28RISK
open ↗
Exploit-DB
WordPress Plugin Userpro < 4.9.17.1 - Authentication Bypass
CVE-2017-16562—webappsphp04 Nov 2017
The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers
28RISK
open ↗
Exploit-DB
Logitech Media Server 7.9.0 - 'Radio URL' Cross-Site Scripting
CVE-2017-16568—webappsmultiple03 Nov 2017
Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH)
CVE-2017-16513—doswindows03 Nov 2017
Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations fie
23RISK
open ↗
Exploit-DB
Logitech Media Server 7.9.0 - 'favorites' Cross-Site Scripting
CVE-2017-16567—webappsmultiple03 Nov 2017
Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. T
23RISK
open ↗
Exploit-DB✓ VexDay Proof
tnftp - 'savefile' Arbitrary Command Execution (Metasploit)
CVE-2014-8517—remoteunix03 Nov 2017
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro
50RISK
open ↗
Exploit-DB
GraphicsMagick - Memory Disclosure / Heap Overflow
CVE-2017-16353—dosmultiple03 Nov 2017
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function
28RISK
open ↗
Exploit-DB
GraphicsMagick - Memory Disclosure / Heap Overflow
CVE-2017-16352—dosmultiple03 Nov 2017
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image dir
28RISK
open ↗
Exploit-DB
Debut Embedded HTTPd 1.20 - Denial of Service
CVE-2017-16249—doshardware02 Nov 2017
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST requ
50RISK
open ↗
Exploit-DB
OctoberCMS 1.0.426 (Build 426) - Cross-Site Request Forgery
CVE-2017-16244—webappsphp01 Nov 2017
Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for po
23RISK
open ↗
Exploit-DB
Cisco UCS Platform Emulator 3.1(2ePE1) - Remote Code Execution
CVE-2017-12243—remotelinux01 Nov 2017
A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewal
45RISK
open ↗
Exploit-DB
Vir.IT eXplorer Anti-Virus 8.5.39 - 'VIAGLT64.SYS' Local Privilege Escalation
CVE-2017-16237—localwindows01 Nov 2017
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability be
23RISK
open ↗
Exploit-DB
ZyXEL PK5001Z Modem - Backdoor Account
CVE-2016-10401—remotehardware31 Oct 2017
ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access
28RISK
open ↗
Exploit-DB
Article Directory Script 3.0 - 'id' SQL Injection
CVE-2017-15960—webappsphp30 Oct 2017
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.
23RISK
open ↗
Exploit-DB
MyBuilder Clone 1.0 - 'subcategory' SQL Injection
CVE-2017-15968—webappsphp30 Oct 2017
MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.
23RISK
open ↗
Exploit-DB
Joomla! Component NS Download Shop 2.2.6 - 'id' SQL Injection
CVE-2017-15965—webappsphp30 Oct 2017
The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in
23RISK
open ↗
Exploit-DB
PG All Share Video 1.0 - SQL Injection
CVE-2017-15969—webappsphp30 Oct 2017
PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata
23RISK
open ↗
← previouspage 124 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.