Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits
32,195CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecentpopularrisk
8,182 exploits
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALunder attackransomware04 Jan 2024
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-3460—04 Jan 2024
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-51467—04 Jan 2024
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALunder attackransomware03 Jan 2024
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALunder attack03 Jan 2024
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALunder attackransomware02 Jan 2024
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-49070—02 Jan 2024
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-29357CRITICALunder attackransomware01 Jan 2024
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-1454MEDIUM31 Dec 2023
jeecg-boot qurestSql sql injection
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-35813—31 Dec 2023
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experi
60RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack30 Dec 2023
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-50164—30 Dec 2023
Apache Struts: File upload component had a directory traversal vulnerability
45RISK
open ↗
VulnCheck XDB
local
CVE-2016-5195HIGHunder attack29 Dec 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware29 Dec 2023
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack29 Dec 2023
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM29 Dec 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-51467—29 Dec 2023
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-51467—29 Dec 2023
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-51467—29 Dec 2023
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11447—28 Dec 2023
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
VulnCheck XDB
local
CVE-2022-0847HIGHunder attack28 Dec 2023
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2023-24955HIGHunder attackransomware28 Dec 2023
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
local
CVE-2023-36025HIGHunder attack28 Dec 2023
Windows SmartScreen Security Feature Bypass Vulnerability
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-22986CRITICALunder attackransomware28 Dec 2023
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM28 Dec 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-25194HIGH28 Dec 2023
Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-6553CRITICAL27 Dec 2023
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-43177—27 Dec 2023
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes
60RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack27 Dec 2023
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-32305—26 Dec 2023
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet
60RISK
open ↗
← previouspage 140 / 273next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.