Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

72,018cataloged exploits
32,219CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,023GitHub PoC 13,334VulnCheck XDB 8,195Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
22,786 exploits
Exploit-DB
Adobe Flash - Object.unwatch Use-After-Free
CVE-2016-0998—29 Mar 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RISK
open ↗
Exploit-DB
Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation
CVE-2016-2288—28 Mar 2016
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file
23RISK
open ↗
Exploit-DB
Apple Mac OSX Kernel - Use-After-Free and Double Delete Due to Incorrect Locking in Intel GPU Driver
CVE-2016-1744—23 Mar 2016
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary co
23RISK
open ↗
Exploit-DB
Apple Mac OSX Kernel - AppleKeyStore Use-After-Free
CVE-2016-1755—23 Mar 2016
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to exe
23RISK
open ↗
Exploit-DB
Apple Mac OSX / iOS - SUID Binary Logic Error Kernel Code Execution
CVE-2016-1757—23 Mar 2016
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code
28RISK
open ↗
Exploit-DB
Apple Mac OSX Kernel - Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver
CVE-2016-1741—23 Mar 2016
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c
28RISK
open ↗
Exploit-DB
Adobe Flash - Shape Rendering Crash
CVE-2016-1002—23 Mar 2016
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577
28RISK
open ↗
Exploit-DB
Adobe Flash - Uninitialized Stack Parameter Access in AsBroadcaster.broadcastMessage UaF Fix
CVE-2016-0999—23 Mar 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RISK
open ↗
Exploit-DB
Adobe Flash - Sprite Creation Use-After-Free
CVE-2016-1000—23 Mar 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RISK
open ↗
Exploit-DB
Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix
CVE-2016-0997—23 Mar 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RISK
open ↗
Exploit-DB
Adobe Flash - Uninitialized Stack Parameter Access in Object.unwatch UaF Fix
CVE-2016-0998—23 Mar 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RISK
open ↗
Exploit-DB
Adobe Flash - Zlib Codec Heap Overflow
CVE-2016-1001—23 Mar 2016
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows an
28RISK
open ↗
Exploit-DB
Apple Mac OSX Kernel - Code Execution Due to Lack of Bounds Checking in AppleUSBPipe::Abort
CVE-2016-1749—23 Mar 2016
IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d
23RISK
open ↗
Exploit-DB
Microsoft Windows 8.1/10 (x86) - Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032)
CVE-2016-0099HIGHunder attackransomware21 Mar 2016
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8
98RISK
open ↗
Exploit-DB
Wildfly - 'WEB-INF' / 'META-INF' Information Disclosure via Filter Restriction Bypass
CVE-2016-0793—20 Mar 2016
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Se
28RISK
open ↗
Exploit-DB
Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)
CVE-2014-6278HIGHunder attack16 Mar 2016
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi
100RISK
open ↗
Exploit-DB
OpenSSH 7.2p1 - (Authenticated) xauth Command Injection
CVE-2016-3115MEDIUM16 Mar 2016
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to
45RISK
open ↗
Exploit-DB
FreeBSD 10.2 (x64) - 'amd64_set_ldt' Heap Overflow
CVE-2016-1885—16 Mar 2016
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1
23RISK
open ↗
Exploit-DB
TeamPass 2.1.24 - Multiple Vulnerabilities
CVE-2015-7562—14 Mar 2016
Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbi
23RISK
open ↗
Exploit-DB
Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Stack Corruption (MS16-026)
CVE-2016-0120—14 Mar 2016
The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window
35RISK
open ↗
Exploit-DB
Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Pool-Based Buffer Overflow (MS16-026)
CVE-2016-0121—14 Mar 2016
The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window
35RISK
open ↗
Exploit-DB
Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) - 'iowarrior' Driver Crash (PoC)
CVE-2016-2188—14 Mar 2016
The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximat
23RISK
open ↗
Exploit-DB
TeamPass 2.1.24 - Multiple Vulnerabilities
CVE-2015-7564—14 Mar 2016
Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co
23RISK
open ↗
Exploit-DB
TeamPass 2.1.24 - Multiple Vulnerabilities
CVE-2015-7563—14 Mar 2016
Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the aut
23RISK
open ↗
Exploit-DB
Microsoft Internet Explorer - Read AV in MSHTML!Layout::LayoutBuilderDivider::BuildPageLayout (MS16-023)
CVE-2016-0108—14 Mar 2016
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
35RISK
open ↗
Exploit-DB
libotr 4.1.0 - Memory Corruption
CVE-2016-2851—10 Mar 2016
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of serv
28RISK
open ↗
Exploit-DB
Exim < 4.86.2 - Local Privilege Escalation
CVE-2016-1531—10 Mar 2016
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
38RISK
open ↗
Exploit-DB
Putty pscp 0.66 - Stack Buffer Overwrite
CVE-2016-2563—10 Mar 2016
Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows r
35RISK
open ↗
Exploit-DB
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'aiptek' Nullpointer Dereference
CVE-2015-7515—09 Mar 2016
The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate at
23RISK
open ↗
Exploit-DB
Exim 4.84-3 - Local Privilege Escalation
CVE-2016-1531—09 Mar 2016
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
38RISK
open ↗
← previouspage 165 / 760next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.