Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

72,018cataloged exploits
32,219CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,023GitHub PoC 13,334VulnCheck XDB 8,195Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
20,023 exploits
Referência
Printix Client 1.3.1106.0 - Privilege Escalation
CVE-2022-25090—
Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure
28RISK
open ↗
Referência
UltimateHG/CVE-2025-52689-PoC
CVE-2025-52689CRITICAL
Weak Session ID Check in the OmniAccess Stellar Web Management Interface
53RISK
open ↗
Referência
CVE-2022-38580
CVE-2022-38580CRITICAL
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
53RISK
open ↗
Referência
CVE-2015-6023
CVE-2015-6023—
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot
28RISK
open ↗
Referência
CVE-2015-6023
CVE-2015-6023—
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot
28RISK
open ↗
Referência
CVE-2013-1670
CVE-2013-1670—
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbi
28RISK
open ↗
Referência
TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (1)
CVE-2006-2151—
PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab
28RISK
open ↗
Referência
TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)
CVE-2006-2151—
PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab
28RISK
open ↗
Referência
CVE-2018-5407
CVE-2018-5407—
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks
23RISK
open ↗
Referência
CVE-2011-5212
CVE-2011-5212—
SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2014-7221
CVE-2014-7221—
TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and
28RISK
open ↗
Referência
CVE-2014-7222
CVE-2014-7222—
Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (a
28RISK
open ↗
Referência
CVE-2020-13144
CVE-2020-13144—
Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>Ne
28RISK
open ↗
Referência
CVE-2020-11060
CVE-2020-11060HIGH
Remote Code Execution in GLPI
46RISK
open ↗
Referência
CVE-2010-3145
CVE-2010-3145—
Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Mic
28RISK
open ↗
Referência
CVE-2021-38648
CVE-2021-38648HIGHunder attack
Open Management Infrastructure Elevation of Privilege Vulnerability
91RISK
open ↗
Referência
CVE-2009-3250
CVE-2009-3250—
The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated u
28RISK
open ↗
Referência
Sony CONNECT Player 4.x - '.m3u' Local Stack Overflow
CVE-2007-5709—
Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code
28RISK
open ↗
Referência
Drupal 4.7 - 'Attachment mod_mime' Remote Command Execution
CVE-2006-2743—
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple
28RISK
open ↗
Referência
CVE-2009-2254
CVE-2009-2254—
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows
28RISK
open ↗
Referência
gxine 0.5.6 - HTTP Plugin Remote Buffer Overflow (PoC)
CVE-2006-2802—
Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial o
28RISK
open ↗
Referência
CVE-2018-10123
CVE-2018-10123—
p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via reques
28RISK
open ↗
Referência
CVE-2015-5452
CVE-2015-5452—
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
Claroline 1.7.6 - 'includePath' Remote Code Execution
CVE-2006-2868—
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP co
28RISK
open ↗
Referência
CVE-2014-8656
CVE-2014-8656—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d
28RISK
open ↗
Referência
CVE-2014-8656
CVE-2014-8656—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d
28RISK
open ↗
Referência
CVE-2010-4259
CVE-2010-4259—
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application cras
28RISK
open ↗
Referência
CVE-2018-9302
CVE-2018-9302—
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to r
23RISK
open ↗
Referência
CVE-2014-1907
CVE-2014-1907—
Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for Wor
28RISK
open ↗
Referência
CVE-2015-6567
CVE-2015-6567—
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/
28RISK
open ↗
← previouspage 148 / 668next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.