Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

72,018cataloged exploits

32,219CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 20,023GitHub PoC 13,334VulnCheck XDB 8,195Nuclei 4,217Metasploit 3,463✓ verified onlyrecent popular risk

20,023 exploits

Referência

CVE-2019-8387

CVE-2019-8387—

MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.

35RISK

open ↗

Referência

CVE-2011-2543

CVE-2011-2543—

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote

28RISK

open ↗

Referência

CVE-2018-5724

CVE-2018-5724—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore

28RISK

open ↗

Referência

CVE-2018-5724

CVE-2018-5724—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore

28RISK

open ↗

Referência

CVE-2012-3574

CVE-2012-3574—

Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6

28RISK

open ↗

Referência

CVE-2019-6273

CVE-2019-6273—

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

28RISK

open ↗

Referência

CVE-2019-6273

CVE-2019-6273—

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

28RISK

open ↗

Referência

CVE-2014-7279

CVE-2014-7279—

The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equ

28RISK

open ↗

Referência

CVE-2010-3154

CVE-2010-3154—

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attac

28RISK

open ↗

Referência

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5124—

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISK

open ↗

Referência

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISK

open ↗

Referência

DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow

CVE-2008-1912—

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISK

open ↗

Referência

CVE-2019-12744

CVE-2019-12744—

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differe

28RISK

open ↗

Referência

CVE-2019-12744

CVE-2019-12744—

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differe

28RISK

open ↗

Referência

CVE-2019-14750

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RISK

open ↗

Referência

osTicket 1.12 - Persistent Cross-Site Scripting

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RISK

open ↗

Referência

CVE-2019-9768

CVE-2019-9768—

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timesta

28RISK

open ↗

Referência

CVE-2019-9768

CVE-2019-9768—

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timesta

28RISK

open ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (PoC)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISK

open ↗

Referência

VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISK

open ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISK

open ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (2)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISK

open ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RISK

open ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RISK

open ↗

Referência

MailBee WebMail Pro 4.1 - Remote File Disclosure

CVE-2008-0333—

Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET all

28RISK

open ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RISK

open ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RISK

open ↗

Referência

CVE-2023-26068

CVE-2023-26068CRITICAL

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

68RISK

open ↗

Referência

CVE-2020-1380

CVE-2020-1380HIGHunder attack

Scripting Engine Memory Corruption Vulnerability

76RISK

open ↗

Referência

CVE-2019-9189

CVE-2019-9189—

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.