Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,445cataloged exploits
34,432CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,497GitHub PoC 13,627VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
8,198 exploits
VulnCheck XDB
initial-access
CVE-2021-20837—25 Oct 2021
Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-40438CRITICALunder attackransomware24 Oct 2021
mod_proxy SSRF
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-35211CRITICALunder attackransomware24 Oct 2021
Serv-U Remote Memory Escape Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHunder attackransomware23 Oct 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-41773HIGHunder attackransomware23 Oct 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHunder attackransomware20 Oct 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-40449HIGHunder attackransomware20 Oct 2021
Win32k Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-26084CRITICALunder attackransomware20 Oct 2021
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-21234HIGH19 Oct 2021
Directory Traversal
61RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-3980—19 Oct 2021
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to
23RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-36260CRITICALunder attack18 Oct 2021
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2017-11882HIGHunder attackransomware17 Oct 2021
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-40449HIGHunder attackransomware16 Oct 2021
Win32k Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-14847CRITICALunder attack16 Oct 2021
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-11022MEDIUM16 Oct 2021
jQuery has a potential XSS vulnerability
55RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack16 Oct 2021
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-25078HIGHunder attack15 Oct 2021
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticate
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHunder attackransomware15 Oct 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-30858HIGHunder attack14 Oct 2021
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, m
76RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALunder attackransomware14 Oct 2021
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-30858HIGHunder attack14 Oct 2021
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, m
76RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-36749—14 Oct 2021
Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-17519CRITICALunder attack13 Oct 2021
Apache Flink directory traversal attack: reading remote files through the REST API
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-10770—13 Oct 2021
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using
50RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-41773HIGHunder attackransomware13 Oct 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack13 Oct 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-42013CRITICALunder attackransomware13 Oct 2021
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-34486HIGHunder attack12 Oct 2021
Windows Event Tracing Elevation of Privilege Vulnerability
71RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-18818—12 Oct 2021
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-18818—11 Oct 2021
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s
60RISK
open ↗
← previouspage 209 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.