Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,184cataloged exploits
37,029CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,476Referência 23,521GitHub PoC 15,321VulnCheck XDB 8,970Nuclei 4,394Metasploit 3,502✓ verified onlyrecentpopularrisk
24,476 exploits
Exploit-DB
Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities
CVE-2016-1524—webappshardware04 Feb 2016
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote
60RISK
open ↗
Exploit-DB
Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities
CVE-2016-1525—webappshardware04 Feb 2016
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RISK
open ↗
Exploit-DB
D-Link DVG­N5402SP - Multiple Vulnerabilities
CVE-2015-7246—webappshardware04 Feb 2016
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RISK
open ↗
Exploit-DB
D-Link DVG­N5402SP - Multiple Vulnerabilities
CVE-2015-7245—webappshardware04 Feb 2016
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot
50RISK
open ↗
Exploit-DB✓ VexDay Proof
GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities
CVE-2016-0861—webappshardware04 Feb 2016
General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica
28RISK
open ↗
Exploit-DB
D-Link DVG­N5402SP - Multiple Vulnerabilities
CVE-2015-7247—webappshardware04 Feb 2016
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and
28RISK
open ↗
Exploit-DB
Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting
CVE-2014-2045—webappshardware03 Feb 2016
Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30
23RISK
open ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4591—webappsjsp02 Feb 2016
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo
23RISK
open ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4592—webappsjsp02 Feb 2016
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allow
23RISK
open ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4593—webappsjsp02 Feb 2016
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ
23RISK
open ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4594—webappsjsp02 Feb 2016
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a
23RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 11 - javascript Code Execution
CVE-2015-2419HIGHunder attacklocalwindows01 Feb 2016
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial o
83RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS Kernel - iokit Registry Iterator Manipulation Double-Free
CVE-2015-7084—dosmultiple28 Jan 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RISK
open ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarAccelerometer Use-After-Free
CVE-2016-1719—dosios28 Jan 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - IOReportHub Use-After-Free
CVE-2016-1719—dosios28 Jan 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities
CVE-2016-1721—dosmultiple28 Jan 2016
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o
23RISK
open ↗
Exploit-DB
SAP HANA 1.00.095 - hdbindexserver Memory Corruption
CVE-2015-7986—webappsmultiple28 Jan 2016
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a deni
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'gst_configure' Kernel Buffer Overflow
CVE-2015-7077—dososx28 Jan 2016
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial
23RISK
open ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarCompass Use-After-Free
CVE-2016-1719—dosios28 Jan 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'IOHDIXControllerUserClient::convertClient' Buffer Integer Overflow
CVE-2015-6995—dososx28 Jan 2016
The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to ex
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS Kernel - IOHDIXControllUserClient::clientClose Use-After-Free/Double-Free
CVE-2015-7110—dosmultiple28 Jan 2016
The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or caus
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow
CVE-2015-7083—dosmultiple28 Jan 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - Hypervisor Driver Use-After-Free
CVE-2015-7078—dososx28 Jan 2016
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vector
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - Unsandboxable Kernel Use-After-Free in Mach Vouchers
CVE-2015-7047—dosmultiple28 Jan 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference
CVE-2015-7106—dososx28 Jan 2016
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - no-more-senders Use-After-Free
CVE-2015-7047—dososx28 Jan 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RISK
open ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarGyro Use-After-Free
CVE-2016-1719—dosios28 Jan 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - io_service_close Use-After-Free
CVE-2016-1720—dososx28 Jan 2016
IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit
CVE-2015-7084—dososx28 Jan 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - IOAccelDisplayPipeUserClient2 Use-After-Free
CVE-2015-7047—dososx28 Jan 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RISK
open ↗
← previouspage 175 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.