Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits

40,258CVEs with public exploitation

24,696lab-tested

All Referência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

24,488 exploits

Exploit-DB✓ VexDay Proof

Oracle VM VirtualBox - 'virtio-net' Guest-to-Host Out-of-Bounds Write

CVE-2017-3575—dosmultiple20 Apr 2017

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISK

Exploit-DB✓ VexDay Proof

Oracle VM VirtualBox - Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation

CVE-2017-3561—dosmultiple20 Apr 2017

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISK

Exploit-DB✓ VexDay Proof

Oracle VM VirtualBox 5.1.14 r112924 - Unprivileged Host User to Host Kernel Privilege Escalation via ALSA config

CVE-2017-3576—locallinux20 Apr 2017

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISK

Exploit-DB✓ VexDay Proof

Dmitry 1.3a - Local Buffer Overflow (PoC)

CVE-2017-7938MEDIUMdoslinux19 Apr 2017

Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cau

33RISK

Exploit-DB

Tenable Appliance < 4.5 - Root Remote Code Execution

CVE-2017-8051—remotelinux18 Apr 2017

Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.

28RISK

Exploit-DB

Microsoft Word - '.RTF' Remote Code Execution

CVE-2017-0199HIGHunder attackransomwareremotewindows18 Apr 2017

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

CVE-2017-0148HIGHunder attackransomwaredoswindows17 Apr 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

CVE-2017-0146HIGHunder attackransomwaredoswindows17 Apr 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

CVE-2017-0144HIGHunder attackransomwaredoswindows17 Apr 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

CVE-2017-0147HIGHunder attackransomwaredoswindows17 Apr 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

CVE-2017-0145HIGHunder attackransomwaredoswindows17 Apr 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

CVE-2017-0143HIGHunder attackransomwaredoswindows17 Apr 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

Exploit-DB✓ VexDay Proof

Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset

CVE-2017-7615—webappsphp16 Apr 2017

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value

60RISK

Exploit-DB

Linux Kernel 4.8.0 UDEV < 232 - Local Privilege Escalation

CVE-2017-7874—locallinux15 Apr 2017

20RISK

Exploit-DB

Mozilla Firefox - Address Bar Spoofing

CVE-2017-5415—localmultiple14 Apr 2017

An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leadin

28RISK

Exploit-DB✓ VexDay Proof

Concrete5 CMS 8.1.0 - 'Host' Header Injection

CVE-2017-7725—webappsphp14 Apr 2017

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call

CVE-2017-0058—doswindows13 Apr 2017

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides

23RISK

Exploit-DB✓ VexDay Proof

Adobe Creative Cloud Desktop Application < 4.0.0.185 - Local Privilege Escalation

CVE-2017-3006—localwindows13 Apr 2017

Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions durin

28RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows Kernel - 'win32kfull!SfnINLPUAHDRAWMENUITEM' Stack Memory Disclosure

CVE-2017-0167—doswindows13 Apr 2017

An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and W

23RISK

Exploit-DB

Cisco Catalyst 2960 IOS 12.2(55)SE1 - 'ROCEM' Remote Code Execution

CVE-2017-3881CRITICALunder attackremotehardware12 Apr 2017

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co

100RISK

Exploit-DB

Cisco Catalyst 2960 IOS 12.2(55)SE11 - 'ROCEM' Remote Code Execution

CVE-2017-3881CRITICALunder attackremotehardware12 Apr 2017

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co

100RISK

Exploit-DB

Brother MFC-J6520DW - Authentication Bypass / Password Change

CVE-2017-7588—webappshardware11 Apr 2017

On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a

35RISK

Exploit-DB✓ VexDay Proof

Apple WebKit - 'JSC::SymbolTableEntry::isWatchable' Heap Buffer Overflow

CVE-2017-2469—dosmultiple11 Apr 2017

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISK

Exploit-DB✓ VexDay Proof

Apple WebKit - 'JSC::B3::Procedure::resetReachability' Use-After-Free

CVE-2017-2470—dosmultiple11 Apr 2017

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISK

Exploit-DB✓ VexDay Proof

Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting

CVE-2017-2480—webappsmultiple11 Apr 2017

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud b

23RISK

Exploit-DB✓ VexDay Proof

Apple WebKit - 'Document::adoptNode' Use-After-Free

CVE-2017-2468—dosmultiple11 Apr 2017

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISK

Exploit-DB

Proxifier for Mac 2.17/2.18 - Privesc Escalation

CVE-2017-7643—localmacos11 Apr 2017

Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra

23RISK

Exploit-DB✓ VexDay Proof

Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Link Element

CVE-2017-2479—webappsmultiple11 Apr 2017

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud b

23RISK

Exploit-DB✓ VexDay Proof

Xen - Broken Check in 'memory_exchange()' Permits PV Guest Breakout

CVE-2017-7228—localmultiple11 Apr 2017

An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The e

23RISK

Exploit-DB

Moxa MXview 2.8 - Denial of Service

CVE-2017-7456—doswindows10 Apr 2017

Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView

28RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.