Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
22,786 exploits
Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
CVE-2017-11664—08 Aug 2017
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
23RISK
open ↗
Exploit-DB
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
CVE-2017-11152—08 Aug 2017
Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 all
28RISK
open ↗
Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
CVE-2017-11661—08 Aug 2017
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
28RISK
open ↗
Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
CVE-2017-11662—08 Aug 2017
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appli
23RISK
open ↗
Exploit-DB
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
CVE-2017-11154—08 Aug 2017
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-296
28RISK
open ↗
Exploit-DB
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
CVE-2017-11155—08 Aug 2017
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remot
35RISK
open ↗
Exploit-DB
VMware WorkStation 12.5.5 - Virtual Machine Escape
CVE-2017-4901—08 Aug 2017
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 ha
28RISK
open ↗
Exploit-DB
Unitrends UEB 9.1 - Authentication Bypass / Remote Command Execution
CVE-2017-12478—08 Aug 2017
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of
60RISK
open ↗
Exploit-DB
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
CVE-2017-11153—08 Aug 2017
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allo
28RISK
open ↗
Exploit-DB
Unitrends UEB 9.1 - 'Unitrends bpserverd' Remote Command Execution
CVE-2017-12477—08 Aug 2017
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin
50RISK
open ↗
Exploit-DB
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
CVE-2017-11151—08 Aug 2017
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers
28RISK
open ↗
Exploit-DB
Unitrends UEB 9.1 - Privilege Escalation
CVE-2017-12479—08 Aug 2017
It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR env
28RISK
open ↗
Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
CVE-2017-11663—08 Aug 2017
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
23RISK
open ↗
Exploit-DB
Microsoft Windows - '.LNK' Shortcut File Code Execution
CVE-2017-8464HIGHunder attack06 Aug 2017
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISK
open ↗
Exploit-DB
Tiandy IP Cameras 5.56.17.120 - Sensitive Information Disclosure
CVE-2017-15236—03 Aug 2017
Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to
23RISK
open ↗
Exploit-DB
VirtualBox 5.1.22 - Windows Process DLL Signature Bypass Privilege Escalation
CVE-2017-10204—03 Aug 2017
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version
23RISK
open ↗
Exploit-DB
DNSTracer 1.9 - Local Buffer Overflow
CVE-2017-9430—03 Aug 2017
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o
28RISK
open ↗
Exploit-DB
VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation
CVE-2017-10129—03 Aug 2017
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version
23RISK
open ↗
Exploit-DB
Technicolor TC7337 - 'SSID' Persistent Cross-Site Scripting
CVE-2017-11320—03 Aug 2017
Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker
23RISK
open ↗
Exploit-DB
Horde Groupware 5.2.21 - Unauthorized File Download
CVE-2017-15235—03 Aug 2017
The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication
23RISK
open ↗
Exploit-DB
Nitro Pro PDF Reader 11.0.3.173 - Javascript API Code Execution (Metasploit)
CVE-2017-7442—02 Aug 2017
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory tra
50RISK
open ↗
Exploit-DB
libmad 0.15.1b - 'mp3' Memory Corruption
CVE-2017-11552—01 Aug 2017
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to
23RISK
open ↗
Exploit-DB
SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection
CVE-2017-11494—01 Aug 2017
SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitra
23RISK
open ↗
Exploit-DB
Advantech SUSIAccess < 3.0 - Directory Traversal / Information Disclosure (Metasploit)
CVE-2016-9349—01 Aug 2017
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system
23RISK
open ↗
Exploit-DB
Advantech SUSIAccess < 3.0 - 'RecoveryMgmt' File Upload
CVE-2016-9349—01 Aug 2017
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system
23RISK
open ↗
Exploit-DB
Advantech SUSIAccess < 3.0 - 'RecoveryMgmt' File Upload
CVE-2016-9351—01 Aug 2017
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error
23RISK
open ↗
Exploit-DB
Apple macOS/iOS - 'xpc_data' Objects Sandbox Escape Privilege Escalation
CVE-2017-7047—01 Aug 2017
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS
23RISK
open ↗
Exploit-DB
Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
CVE-2017-11332—31 Jul 2017
The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (div
23RISK
open ↗
Exploit-DB
Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
CVE-2017-11359—31 Jul 2017
The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (d
23RISK
open ↗
Exploit-DB
libao 1.2.0 - Denial of Service
CVE-2017-11548—31 Jul 2017
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic
23RISK
open ↗
← previouspage 128 / 760next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.