Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,679cataloged exploits

40,329CVEs with public exploitation

24,696lab-tested

All Referência 26,150Exploit-DB 24,488GitHub PoC 17,946VulnCheck XDB 10,016Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

24,488 exploits

Exploit-DB✓ VexDay Proof

WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities

CVE-2015-4065—webappsphp26 May 2015

Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before

23RISK

Exploit-DB✓ VexDay Proof

WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities

CVE-2015-4062—webappsphp26 May 2015

SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remo

38RISK

Exploit-DB✓ VexDay Proof

WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities

CVE-2015-4063—webappsphp26 May 2015

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPres

38RISK

Exploit-DB✓ VexDay Proof

WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities

CVE-2015-4064—webappsphp26 May 2015

SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allo

23RISK

Exploit-DB✓ VexDay Proof

WordPress Plugin GigPress 2.3.8 - SQL Injection

CVE-2015-4066—webappsphp26 May 2015

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow rem

23RISK

Exploit-DB✓ VexDay Proof

Sendio ESP - Information Disclosure

CVE-2014-8391—webappsjsp26 May 2015

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to o

23RISK

Exploit-DB

WordPress Plugin church_admin 0.800 - Persistent Cross-Site Scripting

CVE-2015-4127—webappsphp26 May 2015

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers t

38RISK

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0010—localwindows25 May 2015

The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in M

23RISK

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0059—localwindows25 May 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

28RISK

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0060—localwindows25 May 2015

The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Window

23RISK

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0058—localwindows25 May 2015

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and

23RISK

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0057—localwindows25 May 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

28RISK

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0003—localwindows25 May 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

23RISK

Exploit-DB

Apport (Ubuntu 14.04/14.10/15.04) - Race Condition Privilege Escalation

CVE-2015-1325—locallinux23 May 2015

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ub

23RISK

Exploit-DB✓ VexDay Proof

Fuse 2.9.3-15 - Local Privilege Escalation

CVE-2015-3202—locallinux23 May 2015

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as ro

23RISK

Exploit-DB

WordPress Plugin WP Membership 1.2.3 - Multiple Vulnerabilities

CVE-2015-4038—webappsphp21 May 2015

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an i

23RISK

Exploit-DB

WordPress Plugin WP Symposium 15.1 - '&show=' SQL Injection

CVE-2015-3325—webappsphp21 May 2015

SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to

23RISK

Exploit-DB

WordPress Plugin WP Membership 1.2.3 - Multiple Vulnerabilities

CVE-2015-4039—webappsphp21 May 2015

Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authent

23RISK

Exploit-DB✓ VexDay Proof

Phoenix Contact ILC 150 ETH PLC - Remote Control Script

CVE-2014-9195—remotehardware20 May 2015

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

85RISK

Exploit-DB✓ VexDay Proof

WordPress Plugin FeedWordPress 2015.0426 - SQL Injection

CVE-2015-4018—webappsphp20 May 2015

SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for W

23RISK

Exploit-DB

Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation

CVE-2014-7872—localwindows20 May 2015

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Local Privilege Escalation (MS14-058)

CVE-2014-4113HIGHunder attacklocalwindows_x86-6419 May 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISK

Exploit-DB

BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)

CVE-2008-5753—localwindows18 May 2015

Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary

23RISK

Exploit-DB

Microsoft Windows - 'CNG.SYS' Kernel Security Feature Bypass (MS15-052)

CVE-2015-1674—localwindows18 May 2015

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not pr

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1680—localwindows18 May 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1701HIGHunder attackransomwarelocalwindows18 May 2015

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1678—localwindows18 May 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1679—localwindows18 May 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RISK

Exploit-DB

ElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal

CVE-2015-3337—webappsphp18 May 2015

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1677—localwindows18 May 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.