Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

72,016cataloged exploits

32,219CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 20,023GitHub PoC 13,332VulnCheck XDB 8,195Nuclei 4,217Metasploit 3,463✓ verified onlyrecent popular risk

22,786 exploits

Exploit-DB

WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities

CVE-2016-6603—10 Aug 2016

ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users v

45RISK

Exploit-DB

vBulletin 5.2.2 - Server-Side Request Forgery

CVE-2016-6483—10 Aug 2016

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Le

28RISK

Exploit-DB

Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery

CVE-2016-7454—09 Aug 2016

CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r204217

23RISK

Exploit-DB

Microsoft Windows 7 (x86/x64) - Group Policy Privilege Escalation (MS16-072)

CVE-2016-3223—08 Aug 2016

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an

28RISK

Exploit-DB

VMware Host Guest Client Redirector - DLL Side Loading (Metasploit)

CVE-2016-5330—06 Aug 2016

Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 t

43RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5676—05 Aug 2016

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillanc

50RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5680—05 Aug 2016

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance

28RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5679—05 Aug 2016

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticat

28RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5674—05 Aug 2016

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR Rea

60RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5677—05 Aug 2016

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.

28RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5678—05 Aug 2016

NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows re

23RISK

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5675—05 Aug 2016

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 th

60RISK

Exploit-DB

Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service

CVE-2016-6504—03 Aug 2016

epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a

23RISK

Exploit-DB

Wireshark 2.0.0 < 2.0.4 - MMSE / WAP / WBXML / WSP Dissectors Denial of Service

CVE-2016-6512—03 Aug 2016

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, whi

23RISK

Exploit-DB

Wireshark 2.0.0 < 2.0.4 - CORBA IDL Dissectors Denial of Service

CVE-2016-6503—03 Aug 2016

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual

23RISK

Exploit-DB

Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - PacketBB Dissector Denial of Service

CVE-2016-6505—03 Aug 2016

epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allo

23RISK

Exploit-DB

Trend Micro Deep Discovery 3.7/3.8 SP1 (3.81)/3.8 SP2 (3.82) - 'hotfix_upload.cgi' Filename Remote Code Execution

CVE-2016-5840—29 Jul 2016

hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote ad

23RISK

Exploit-DB

AXIS (Multiple Products) - 'devtools ' (Authenticated) Remote Command Execution

CVE-2015-8257—29 Jul 2016

The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell

28RISK

Exploit-DB

phpMyAdmin 4.6.2 - (Authenticated) Remote Code Execution

CVE-2016-5734—29 Jul 2016

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to

60RISK

Exploit-DB

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1610—25 Jul 2016

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 befo

28RISK

Exploit-DB

PHP gettext 1.0.12 - 'gettext.php' Code Execution

CVE-2016-6175—25 Jul 2016

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via

28RISK

Exploit-DB

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1611—25 Jul 2016

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.

23RISK

Exploit-DB

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1609—25 Jul 2016

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security

23RISK

Exploit-DB

PHP 5.5.37/5.6.23/7.0.8 - 'bzread()' Out-of-Bounds Write

CVE-2016-5399—25 Jul 2016

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attac

23RISK

Exploit-DB

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1607—25 Jul 2016

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Sec

23RISK

Exploit-DB

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1608—25 Jul 2016

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated u

28RISK

Exploit-DB

NetBSD - 'mail.local(8)' Local Privilege Escalation

CVE-2016-6253—21 Jul 2016

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RISK

Exploit-DB

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

CVE-2016-6186—20 Jul 2016

Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/j

23RISK

Exploit-DB

Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code Execution

CVE-2015-4852CRITICALunder attack20 Jul 2016

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RISK

Exploit-DB

OpenSSH 7.2p2 - Username Enumeration

CVE-2016-6210MEDIUM20 Jul 2016

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static

70RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.