Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,175cataloged exploits
40,155CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,598VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
26,041 exploits
Referência
CVE-2017-17976
CVE-2017-17976—
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
28RISK
open ↗
Referência
CVE-2017-8657
CVE-2017-8657—
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary
35RISK
open ↗
Referência
CVE-2011-4620
CVE-2011-4620—
Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products,
28RISK
open ↗
Referência
CVE-2010-1532
CVE-2010-1532—
Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo
43RISK
open ↗
Referência✓ VexDay Proof
phpBurningPortal 1.0.1 - 'lang_path' Remote File Inclusion
CVE-2006-7102—webappsphp
Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow rem
23RISK
open ↗
Referência
CVE-2010-1583
CVE-2010-1583—
SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN)
23RISK
open ↗
Referência
CVE-2014-8498
CVE-2014-8498—
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager P
28RISK
open ↗
Referência
CVE-2015-2826
CVE-2015-2826—
WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.
28RISK
open ↗
Referência
CVE-2014-1767
CVE-2014-1767—
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind
28RISK
open ↗
Referência
CVE-2023-22809
CVE-2023-22809HIGH
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISK
open ↗
Referência
CVE-2014-9611
CVE-2014-9611—
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via
28RISK
open ↗
Referência
CVE-2017-14095
CVE-2017-14095—
A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to pe
28RISK
open ↗
Referência
CVE-2015-2844
CVE-2015-2844—
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arb
28RISK
open ↗
Referência
CVE-2018-7284
CVE-2018-7284—
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Ce
35RISK
open ↗
Referência✓ VexDay Proof
my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting
CVE-2009-1811—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitr
23RISK
open ↗
Referência
CVE-2009-4732
CVE-2009-4732—
SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magic_quotes_gpc is disabled, allows remote
23RISK
open ↗
Referência
CVE-2016-1757
CVE-2016-1757—
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code
28RISK
open ↗
Referência
CVE-2017-0086
CVE-2017-0086—
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers
35RISK
open ↗
Referência
CVE-2020-36847
CVE-2020-36847CRITICAL
Simple File List < 4.2.3 - Remote Code Execution
75RISK
open ↗
Referência
CVE-2023-22809
CVE-2023-22809HIGH
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISK
open ↗
Referência
CVE-2026-67288
CVE-2026-67288HIGH
FreeRDP before 3.29.0 Denial of Service via smartcard cache
41RISK
open ↗
Referência
CVE-2011-2577
CVE-2011-2577—
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, wh
28RISK
open ↗
Referência
CVE-2014-1767
CVE-2014-1767—
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind
28RISK
open ↗
Referência✓ VexDay Proof
Power Phlogger 2.0.9 - 'config.inc.php3' File Inclusion
CVE-2006-7106—webappsphp
PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers t
23RISK
open ↗
Referência
CVE-2016-1757
CVE-2016-1757—
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code
28RISK
open ↗
Referência
CVE-2008-0506
CVE-2008-0506—
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing
50RISK
open ↗
Referência
CVE-2017-6995
CVE-2017-6995—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISK
open ↗
Referência
CVE-2018-11509
CVE-2018-11509—
ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applicat
28RISK
open ↗
Referência
CVE-2018-5319
CVE-2018-5319—
RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.
28RISK
open ↗
Referência✓ VexDay Proof
PHPenpals 1.1 - 'mail.php?ID' SQL Injection
CVE-2009-1814—webappsphp
SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
← previouspage 155 / 869next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.