Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,634cataloged exploits
40,286CVEs with public exploitation
24,696lab-tested
AllReferência 26,110Exploit-DB 24,488GitHub PoC 17,941VulnCheck XDB 10,016Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
Wireshark - 'AirPDcapDecryptWPABroadcastKey' Heap Out-of-Bounds Read (1)
The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before
23RISK
open ↗Exploit-DB✓ VexDay Proof
Wireshark - 'infer_pkt_encap' Heap Out-of-Bounds Read
The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash Sound.setTransform - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - 'TextField' Use-After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash MovieClip.startDrag - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.replaceSel - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.type Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.tabIndex Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash MovieClip.attachBitmap - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.setFormat - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.replaceText - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash MovieClip.duplicateMovieClip - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.htmlText Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.thickness Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.text Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB
Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution
The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspeci
23RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash Selection.SetSelection - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.sharpness Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - TextField.Variable Setter Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RISK
open ↗Exploit-DB
Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 8.1 - 'win32k' Local Privilege Escalation (MS15-010)
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
28RISK
open ↗Exploit-DB✓ VexDay Proof
Google Chrome - Renderer Process to Browser Process Privilege Escalation
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 4
23RISK
open ↗Exploit-DB✓ VexDay Proof
win32k Desktop and Clipboard - Null Pointer Dereference
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.gridFitType Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and
28RISK
open ↗Exploit-DB
QEMU (Gentoo) - Local Privilege Escalation
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
28RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash GradientFill - Use-After-Frees
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and
28RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash MovieClip.lineStyle - Use-After-Frees
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'win32k!OffsetChildren' Null Pointer Dereference
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Zen Cart 1.5.4 - Local File Inclusion
Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files
28RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash TextField.antiAliasType Setter - Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.