Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB
Basic B2B Script - SQL Injection
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
23RISK
open ↗Exploit-DB
CPA Lead Reward Script - SQL Injection
CPA Lead Reward Script allows SQL Injection via the username parameter.
23RISK
open ↗Exploit-DB
Ingenious 2.3.0 - Arbitrary File Upload
my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.
23RISK
open ↗Exploit-DB
PHP CityPortal 2.0 - SQL Injection
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
23RISK
open ↗Exploit-DB
PHP Melody 2.6.1 - SQL Injection
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
23RISK
open ↗Exploit-DB
PHPMyFAQ 2.9.8 - Cross-Site Scripting (3)
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
23RISK
open ↗Exploit-DB
phpMyFAQ 2.9.8 - Cross-Site Request Forgery
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
23RISK
open ↗Exploit-DB
HitmanPro 3.7.15 Build 281 - Kernel Pool Overflow
A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in
23RISK
open ↗Exploit-DB
Watchdog Development Anti-Malware / Online Security Pro - NULL Pointer Dereference
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RISK
open ↗Exploit-DB
Watchdog Development Anti-Malware / Online Security Pro - NULL Pointer Dereference
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RISK
open ↗Exploit-DB
PHPMailer < 5.2.21 - Local File Disclosure
An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML docume
23RISK
open ↗Exploit-DB
KeystoneJS 4.0.0-beta.5 - Cross-Site Scripting
A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-be
23RISK
open ↗Exploit-DB
KeystoneJS 4.0.0-beta.5 - CSV Excel Macro Injection
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCS
23RISK
open ↗Exploit-DB
Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection
tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the
23RISK
open ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9 - http api/storage Remote Root (Metasploit)
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of
60RISK
open ↗Exploit-DB
K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read
In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the
23RISK
open ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9 - bpserverd Authentication Bypass Remote Command Execution (Metasploit)
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin
50RISK
open ↗Exploit-DB✓ VexDay Proof
Kaltura < 13.2.0 - Remote Code Execution
The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, wh
60RISK
open ↗Exploit-DB
Linux Kernel 4.14.0-rc4+ - 'waitid()' Local Privilege Escalation
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ayukov NFTP FTP Client < 2.0 - Remote Buffer Overflow
Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.
50RISK
open ↗Exploit-DB
ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service
Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU re
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox < 55 - Denial of Service
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example
28RISK
open ↗Exploit-DB✓ VexDay Proof
Xen - Pagetable De-typing Unbounded Recursion
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recu
23RISK
open ↗Exploit-DB
Check_MK 1.2.8p25 - Information Disclosure
Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, whi
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'RegexHelper::StringReplace' Must Call the Callback Function with Updating ImplicitCallFlags
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker
35RISK
open ↗Exploit-DB
Linux Kernel - 'AF_PACKET' Use-After-Free (2)
net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls
23RISK
open ↗Exploit-DB✓ VexDay Proof
Tomcat - Remote Code Execution via JSP Upload Bypass (Metasploit)
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RISK
open ↗Exploit-DB
TP-Link WR940N - (Authenticated) Remote Code
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated
35RISK
open ↗Exploit-DB
OpenText Documentum Content Server - 'dmr_content' Privilege Escalation
OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iOS 10.2 (14C92) - Remote Code Execution
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue invo
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.