Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,095cataloged exploits

36,945CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,476Referência 23,442GitHub PoC 15,312VulnCheck XDB 8,970Nuclei 4,393Metasploit 3,502✓ verified onlyrecent popular risk

24,476 exploits

Exploit-DB✓ VexDay Proof

Linux Kernel < 4.10.13 - 'keyctl_set_reqkey_keyring' Local Denial of Service

CVE-2017-7472—doslinux07 Jun 2017

The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumptio

23RISK

Exploit-DB✓ VexDay Proof

Linux Kernel - 'ping' Local Denial of Service

CVE-2017-2671—dosandroid07 Jun 2017

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock a

23RISK

Exploit-DB

Apple Safari 10.1 - Spread Operator Integer Overflow Remote Code Execution

CVE-2017-2536—remotemacos06 Jun 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS

28RISK

Exploit-DB

Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution

CVE-2016-3087—remotemultiple06 Jun 2017

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a

60RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8835—webappscgi06 Jun 2017

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw

50RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8836—webappscgi06 Jun 2017

CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_

23RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8839—webappscgi06 Jun 2017

XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_38

23RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8841—webappscgi06 Jun 2017

Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b30

23RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8840—webappscgi06 Jun 2017

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before f

23RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8837—webappscgi06 Jun 2017

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-

23RISK

Exploit-DB

Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure

CVE-2017-8838—webappscgi06 Jun 2017

XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380h

23RISK

Exploit-DB

Subsonic 6.1.1 - Server-Side Request Forgery

CVE-2017-9413—webappswindows05 Jun 2017

Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attacke

23RISK

Exploit-DB✓ VexDay Proof

DNSTracer 1.8.1 - Buffer Overflow (PoC)

CVE-2017-9430—doslinux05 Jun 2017

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISK

Exploit-DB✓ VexDay Proof

Subsonic 6.1.1 - XML External Entity Injection

CVE-2017-9355—localwindows05 Jun 2017

XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to

28RISK

Exploit-DB

BIND 9.10.5 - Unquoted Service Path Privilege Escalation

CVE-2017-3141HIGHlocalwindows05 Jun 2017

Windows service and uninstall paths are not quoted when BIND is installed

41RISK

Exploit-DB✓ VexDay Proof

Wireshark 2.2.0 < 2.2.12 - ROS Dissector Denial of Service

CVE-2017-9347—dosmultiple05 Jun 2017

In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/d

28RISK

Exploit-DB✓ VexDay Proof

Wireshark 2.2.6 - IPv6 Dissector Denial of Service

CVE-2017-9353—dosmultiple05 Jun 2017

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by vali

28RISK

Exploit-DB

Subsonic 6.1.1 - Cross-Site Request Forgery

CVE-2017-9415—webappswindows05 Jun 2017

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target u

23RISK

Exploit-DB✓ VexDay Proof

Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting

CVE-2017-9414—webappswindows05 Jun 2017

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote atta

28RISK

Exploit-DB

WordPress Plugin Event List < 0.7.8 - SQL Injection

CVE-2017-9429—webappsphp04 Jun 2017

SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitra

23RISK

Exploit-DB

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

CVE-2017-9418—webappsphp03 Jun 2017

SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute ar

23RISK

Exploit-DB

HPE Intelligent Management Center (iMC) 7.2 (E0403P10) - Code Execution

CVE-2017-5815—remotelinux02 Jun 2017

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

35RISK

Exploit-DB

Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection

CVE-2016-6566—webappsjson02 Jun 2017

The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end database

28RISK

Exploit-DB✓ VexDay Proof

WebKit - CachedFrame does not Detach Openers Universal Cross-Site Scripting

CVE-2017-2528—webappsmultiple01 Jun 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The

23RISK

Exploit-DB✓ VexDay Proof

WebKit JSC - 'JSObject::ensureLength' ensureLengthSlow Check Failure

CVE-2017-2521—doslinux01 Jun 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS

23RISK

Exploit-DB✓ VexDay Proof

WebKit JSC - Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope

CVE-2017-2531—dosmultiple01 Jun 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS

23RISK

Exploit-DB✓ VexDay Proof

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine

CVE-2017-8540HIGHunder attackdoswindows30 May 2017

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

93RISK

Exploit-DB✓ VexDay Proof

Microsoft MsMpEng - Use-After-Free via Saved Callers

CVE-2017-8541—doswindows30 May 2017

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

35RISK

Exploit-DB✓ VexDay Proof

IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow

CVE-2017-1092—webappswindows30 May 2017

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RISK

Exploit-DB✓ VexDay Proof

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files

CVE-2017-8538—doswindows29 May 2017

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

35RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.