Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits

40,258CVEs with public exploitation

24,696lab-tested

All Referência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

10,015 exploits

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALunder attackransomware04 Nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

VulnCheck XDB

local

CVE-2023-4911HIGHunder attack04 Nov 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

98RISK

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALunder attackransomware03 Nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

VulnCheck XDB

initial-access

CVE-2023-5360—03 Nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

VulnCheck XDB

initial-access

CVE-2023-28121—03 Nov 2023

An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to s

60RISK

VulnCheck XDB

initial-access

CVE-2023-46747CRITICALunder attackransomware03 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

VulnCheck XDB

initial-access

CVE-2023-22518CRITICALunder attackransomware03 Nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISK

VulnCheck XDB

initial-access

CVE-2023-5360—02 Nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

VulnCheck XDB

initial-access

CVE-2023-5360—02 Nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

VulnCheck XDB

local

CVE-2023-2640HIGH02 Nov 2023

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

61RISK

VulnCheck XDB

initial-access

CVE-2023-46747CRITICALunder attackransomware02 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

VulnCheck XDB

local

CVE-2023-32629HIGH02 Nov 2023

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

56RISK

VulnCheck XDB

initial-access

CVE-2021-36260CRITICALunder attack01 Nov 2023

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

VulnCheck XDB

initial-access

CVE-2023-46747CRITICALunder attackransomware01 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

VulnCheck XDB

initial-access

CVE-2021-22205CRITICALunder attackransomware01 Nov 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

VulnCheck XDB

initial-access

CVE-2014-6271CRITICALunder attack31 Oct 2023

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

VulnCheck XDB

client-side

CVE-2020-9802HIGH31 Oct 2023

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, wa

41RISK

VulnCheck XDB

client-side

CVE-2023-41064HIGHunder attack30 Oct 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

83RISK

VulnCheck XDB

initial-access

CVE-2023-22515CRITICALunder attackransomware30 Oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISK

VulnCheck XDB

local

CVE-2021-43226HIGHunder attackransomware30 Oct 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

71RISK

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMunder attack30 Oct 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISK

VulnCheck XDB

initial-access

CVE-2023-50917—29 Oct 2023

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE:

50RISK

VulnCheck XDB

remote-with-credentials

CVE-2009-3103—29 Oct 2023

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RISK

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALunder attackransomware29 Oct 2023

Unauthenticated sensitive information disclosure

100RISK

VulnCheck XDB

initial-access

CVE-2022-22963CRITICALunder attack28 Oct 2023

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISK

VulnCheck XDB

local

CVE-2023-4911HIGHunder attack28 Oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

98RISK

VulnCheck XDB

initial-access

CVE-2023-3519CRITICALunder attackransomware27 Oct 2023

Unauthenticated remote code execution

100RISK

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALunder attackransomware27 Oct 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

VulnCheck XDB

initial-access

CVE-2023-22515CRITICALunder attackransomware27 Oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISK

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALunder attackransomware27 Oct 2023

Unauthenticated sensitive information disclosure

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.