Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,432cataloged exploits
34,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,493GitHub PoC 13,618VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
8,198 exploits
VulnCheck XDB
initial-access
CVE-2022-29078—20 Jul 2022
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[
50RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-22205CRITICALunder attackransomware20 Jul 2022
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-33891HIGHunder attack19 Jul 2022
Apache Spark shell command injection vulnerability via Spark UI
100RISK
open ↗
VulnCheck XDB
local
CVE-2022-34918—19 Jul 2022
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buff
38RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-33891HIGHunder attack18 Jul 2022
Apache Spark shell command injection vulnerability via Spark UI
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-36955HIGHunder attackransomware18 Jul 2022
Windows Common Log File System Driver Elevation of Privilege Vulnerability
71RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-35405CRITICALunder attack18 Jul 2022
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-3580MEDIUMunder attackransomware15 Jul 2022
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware15 Jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-30333HIGHunder attackransomware15 Jul 2022
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-46422—14 Jul 2022
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware12 Jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-27850—07 Jul 2022
Bypass of the fix for CVE-2019-0195
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-5902CRITICALunder attackransomware07 Jul 2022
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-0543CRITICALunder attack06 Jul 2022
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware06 Jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware05 Jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware05 Jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-29464CRITICALunder attackransomware05 Jul 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALunder attackransomware04 Jul 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack04 Jul 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALunder attackransomware01 Jul 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
VulnCheck XDB
local
CVE-2022-0847HIGHunder attack30 Jun 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-42237CRITICALunder attackransomware30 Jun 2022
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2022-30190HIGHunder attackransomware29 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALunder attackransomware29 Jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2019-9670CRITICALunder attack28 Jun 2022
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX
100RISK
open ↗
VulnCheck XDB
local
CVE-2015-2291HIGHunder attackransomware28 Jun 2022
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all
71RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALunder attackransomware27 Jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2022-30190HIGHunder attackransomware27 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
← previouspage 184 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.