Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,505cataloged exploits
34,478CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,534GitHub PoC 13,648VulnCheck XDB 8,198Nuclei 4,218Metasploit 3,464✓ verified onlyrecentpopularrisk
8,198 exploits
VulnCheck XDB
remote-with-credentials
CVE-2019-19609—29 Aug 2021
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c
35RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-18818—29 Aug 2021
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2019-19781CRITICALunder attackransomware29 Aug 2021
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-6308MEDIUM24 Aug 2021
SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated at
60RISK
open ↗
VulnCheck XDB
client-side
CVE-2021-30551HIGHunder attack22 Aug 2021
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corru
83RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-35464CRITICALunder attackransomware21 Aug 2021
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2018-9995—20 Aug 2021
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISK
open ↗
VulnCheck XDB
local
CVE-2018-19320HIGHunder attackransomware19 Aug 2021
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING
71RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-7269CRITICALunder attack19 Aug 2021
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALunder attackransomware18 Aug 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-31207MEDIUMunder attackransomware18 Aug 2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34523CRITICALunder attackransomware18 Aug 2021
Microsoft Exchange Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34523CRITICALunder attackransomware16 Aug 2021
Microsoft Exchange Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-31207MEDIUMunder attackransomware16 Aug 2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALunder attackransomware16 Aug 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack15 Aug 2021
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-1938CRITICALunder attack14 Aug 2021
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-31207MEDIUMunder attackransomware13 Aug 2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALunder attackransomware13 Aug 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-31207MEDIUMunder attackransomware13 Aug 2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALunder attackransomware13 Aug 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack13 Aug 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34523CRITICALunder attackransomware13 Aug 2021
Microsoft Exchange Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34523CRITICALunder attackransomware13 Aug 2021
Microsoft Exchange Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-36934HIGHunder attack12 Aug 2021
Windows Elevation of Privilege Vulnerability
98RISK
open ↗
VulnCheck XDB
local
CVE-2021-36934HIGHunder attack10 Aug 2021
Windows Elevation of Privilege Vulnerability
98RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-11043HIGHunder attackransomware10 Aug 2021
Underflow in PHP-FPM can lead to RCE
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALunder attackransomware10 Aug 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-31207MEDIUMunder attackransomware10 Aug 2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-12725—10 Aug 2021
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap
60RISK
open ↗
← previouspage 214 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.