Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

72,018cataloged exploits

32,219CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 20,023GitHub PoC 13,334VulnCheck XDB 8,195Nuclei 4,217Metasploit 3,463✓ verified onlyrecent popular risk

22,786 exploits

Exploit-DB

Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure

CVE-2016-0956—10 Feb 2016

The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows r

35RISK

open ↗

Exploit-DB

Microsoft Windows 7 SP1 (x86) - 'WebDAV' Local Privilege Escalation (MS16-016) (1)

CVE-2016-0051—10 Feb 2016

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window

43RISK

open ↗

Exploit-DB

Yeager CMS 1.2.1 - Multiple Vulnerabilities

CVE-2015-7570—10 Feb 2016

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbou

23RISK

open ↗

Exploit-DB

Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (1)

CVE-2016-0951—09 Feb 2016

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RISK

open ↗

Exploit-DB

Adobe Photoshop CC / Bridge CC - '.iff' Parsing Memory Corruption

CVE-2016-0953—09 Feb 2016

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RISK

open ↗

Exploit-DB

Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (2)

CVE-2016-0952—09 Feb 2016

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RISK

open ↗

Exploit-DB

GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities

CVE-2016-0861—04 Feb 2016

General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica

28RISK

open ↗

Exploit-DB

D-Link DVGN5402SP - Multiple Vulnerabilities

CVE-2015-7245—04 Feb 2016

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot

50RISK

open ↗

Exploit-DB

GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities

CVE-2016-0862—04 Feb 2016

General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica

23RISK

open ↗

Exploit-DB

Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities

CVE-2016-1524—04 Feb 2016

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote

60RISK

open ↗

Exploit-DB

Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities

CVE-2016-1525—04 Feb 2016

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow

60RISK

open ↗

Exploit-DB

D-Link DVGN5402SP - Multiple Vulnerabilities

CVE-2015-7247—04 Feb 2016

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and

28RISK

open ↗

Exploit-DB

D-Link DVGN5402SP - Multiple Vulnerabilities

CVE-2015-7246—04 Feb 2016

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou

28RISK

open ↗

Exploit-DB

Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting

CVE-2014-2045—03 Feb 2016

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISK

open ↗

Exploit-DB

eClinicalWorks (CCMR) - Multiple Vulnerabilities

CVE-2015-4593—02 Feb 2016

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ

23RISK

open ↗

Exploit-DB

eClinicalWorks (CCMR) - Multiple Vulnerabilities

CVE-2015-4592—02 Feb 2016

eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allow

23RISK

open ↗

Exploit-DB

eClinicalWorks (CCMR) - Multiple Vulnerabilities

CVE-2015-4594—02 Feb 2016

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a

23RISK

open ↗

Exploit-DB

eClinicalWorks (CCMR) - Multiple Vulnerabilities

CVE-2015-4591—02 Feb 2016

eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo

23RISK

open ↗

Exploit-DB

Microsoft Internet Explorer 11 - javascript Code Execution

CVE-2015-2419HIGHunder attack01 Feb 2016

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial o

83RISK

open ↗

Exploit-DB

Apple Mac OSX Kernel - Hypervisor Driver Use-After-Free

CVE-2015-7078—28 Jan 2016

Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vector

23RISK

open ↗

Exploit-DB

Apple Mac OSX - 'IOBluetoothHCIUserClient' Arbitrary Kernel Code Execution

CVE-2015-7108—28 Jan 2016

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of serv

23RISK

open ↗

Exploit-DB

Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference

CVE-2015-7068—28 Jan 2016

IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to exe

23RISK

open ↗

Exploit-DB

Apple Mac OSX - 'gst_configure' Kernel Buffer Overflow

CVE-2015-7077—28 Jan 2016

The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial

23RISK

open ↗

Exploit-DB

Apple Mac OSX - 'IOHDIXControllerUserClient::convertClient' Buffer Integer Overflow

CVE-2015-6995—28 Jan 2016

The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to ex

23RISK

open ↗

Exploit-DB

Apple Mac OSX - io_service_close Use-After-Free

CVE-2016-1720—28 Jan 2016

IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau

23RISK

open ↗

Exploit-DB

Apple Mac OSX / iOS - Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities

CVE-2016-1721—28 Jan 2016

The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o

23RISK

open ↗

Exploit-DB

SAP HANA 1.00.095 - hdbindexserver Memory Corruption

CVE-2015-7986—28 Jan 2016

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a deni

23RISK

open ↗

Exploit-DB

Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference

CVE-2015-6996—28 Jan 2016

IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute a

23RISK

open ↗

Exploit-DB

Apple Mac OSX / iOS - Double-Delete IOHIDEventQueue::start Code Execution

CVE-2015-7112—28 Jan 2016

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attacke

23RISK

open ↗

Exploit-DB

Apple Mac OSX - IOBluetoothHCIPacketLogUserClient Memory Corruption

CVE-2015-7047—28 Jan 2016

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.