Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB
VX Search Enterprise 10.1.12 - Remote Buffer Overflow
CVE-2017-15220—remotewindows09 Oct 2017
Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginni
23RISK
open ↗
Exploit-DB
ASX to MP3 converter < 3.1.3.7 - '.asx' Local Stack Overflow (DEP Bypass)
CVE-2017-15083—localwindows08 Oct 2017
20RISK
open ↗
Exploit-DB✓ VexDay Proof
PyroBatchFTP 3.17 - Buffer Overflow (SEH)
CVE-2017-15035—doswindows07 Oct 2017
EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).
23RISK
open ↗
Exploit-DB
Microsoft Windows 10 RS2 (x64) - 'win32kfull!bFill' Pool Overflow
CVE-2016-3309HIGHunder attackransomwarelocalwindows_x86-6406 Oct 2017
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;
76RISK
open ↗
Exploit-DB✓ VexDay Proof
WebKit JSC - 'BytecodeGenerator::emitGetByVal' Incorrect Optimization (2)
CVE-2017-7117—dosmultiple04 Oct 2017
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor
28RISK
open ↗
Exploit-DB
EPESI 1.8.2 rev20170830 - Cross-Site Scripting
CVE-2017-14717—webappsphp03 Oct 2017
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
23RISK
open ↗
Exploit-DB
EPESI 1.8.2 rev20170830 - Cross-Site Scripting
CVE-2017-14712—webappsphp03 Oct 2017
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
23RISK
open ↗
Exploit-DB
Webkit (Chome < 61) - 'MHTML' Universal Cross-site Scripting
CVE-2017-5124—localmultiple03 Oct 2017
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject
23RISK
open ↗
Exploit-DB
Webkit (Safari) - Universal Cross-site Scripting
CVE-2017-7089—localmultiple03 Oct 2017
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Integer Underflow
CVE-2017-14496—dosmultiple02 Oct 2017
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-su
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Qmail SMTP - Bash Environment Variable Injection (Metasploit)
CVE-2014-6271CRITICALunder attackremotelinux02 Oct 2017
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISK
open ↗
Exploit-DB
UCOPIA Wireless Appliance < 5.1.8 - Local Privilege Escalation
CVE-2017-11322—locallinux02 Oct 2017
The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileg
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpCollab 2.5.1 - Arbitrary File Upload
CVE-2017-6090—webappsphp02 Oct 2017
Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authentica
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Lack of free() Denial of Service
CVE-2017-14495—dosmultiple02 Oct 2017
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote
45RISK
open ↗
Exploit-DB
OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'jobRunId' SQL Injection
CVE-2017-14757—webappsjsp02 Oct 2017
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might b
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - 2-byte Heap Overflow
CVE-2017-14491—dosmultiple02 Oct 2017
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut
45RISK
open ↗
Exploit-DB
UCOPIA Wireless Appliance < 5.1.8 - Restricted Shell Escape
CVE-2017-11321—locallinux02 Oct 2017
The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admi
23RISK
open ↗
Exploit-DB
Linux Kernel < 4.14.rc3 - Local Denial of Service
CVE-2017-14489—doslinux02 Oct 2017
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Stack Overflow
CVE-2017-14493—dosmultiple02 Oct 2017
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Heap Overflow
CVE-2017-14492—dosmultiple02 Oct 2017
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Information Leak
CVE-2017-14494—dosmultiple02 Oct 2017
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vect
45RISK
open ↗
Exploit-DB
OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'documentId' SQL Injection
CVE-2017-14758—webappsjsp02 Oct 2017
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might b
23RISK
open ↗
Exploit-DB
phpCollab 2.5.1 - SQL Injection
CVE-2017-6089—webappsphp02 Oct 2017
SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Exploit-DB
Microsoft Excel - OLE Arbitrary Code Execution
CVE-2017-0199HIGHunder attackransomwaredoswindows30 Sep 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISK
open ↗
Exploit-DB
WordPress Plugin WPHRM - SQL Injection
CVE-2017-14848—webappsphp29 Sep 2017
WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.
23RISK
open ↗
Exploit-DB
FileRun < 2017.09.18 - SQL Injection
CVE-2017-14738—webappsphp29 Sep 2017
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize in
23RISK
open ↗
Exploit-DB
Trend Micro OfficeScan 11.0/XG (12.0) - Memory Corruption
CVE-2017-14089—doswindows29 Sep 2017
An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated u
23RISK
open ↗
Exploit-DB
ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download
CVE-2017-15956—webappsphp29 Sep 2017
ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 11.0/XG (12.0) - Man In The Middle Remote Code Execution
CVE-2017-14084—remotewindows28 Sep 2017
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to e
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 11.0/XG (12.0) - Private Key Disclosure
CVE-2017-14083—webappsphp28 Sep 2017
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to d
23RISK
open ↗
← previouspage 128 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.