Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,634cataloged exploits
40,286CVEs with public exploitation
24,696lab-tested
AllReferência 26,110Exploit-DB 24,488GitHub PoC 17,941VulnCheck XDB 10,016Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
10,016 exploits
VulnCheck XDB
infoleak
CVE-2023-25157CRITICAL10 Jun 2023
Unfiltered SQL Injection Vulnerabilities in Geoserver
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-34960—09 Jun 2023
A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to ex
60RISK
open ↗
VulnCheck XDB
local
CVE-2023-29336HIGHunder attack09 Jun 2023
Win32k Elevation of Privilege Vulnerability
83RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-2986CRITICAL09 Jun 2023
Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-34362CRITICALunder attackransomware09 Jun 2023
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-35885CRITICAL08 Jun 2023
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALunder attackransomware08 Jun 2023
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack07 Jun 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23488CRITICAL07 Jun 2023
The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabilit
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-2732CRITICAL06 Jun 2023
MStore API <= 3.9.2 - Authentication Bypass
75RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-25157CRITICAL06 Jun 2023
Unfiltered SQL Injection Vulnerabilities in Geoserver
85RISK
open ↗
VulnCheck XDB
client-side
CVE-2021-40444HIGHunder attackransomware05 Jun 2023
Microsoft MSHTML Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-46169CRITICALunder attack05 Jun 2023
Unauthenticated Command Injection
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-9248CRITICALunder attack05 Jun 2023
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-31956HIGHunder attack05 Jun 2023
Windows NTFS Elevation of Privilege Vulnerability
76RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-22911—05 Jun 2023
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-4191MEDIUM05 Jun 2023
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Priv
70RISK
open ↗
VulnCheck XDB
local
CVE-2023-32784HIGH04 Jun 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALunder attackransomware03 Jun 2023
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack03 Jun 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHunder attackransomware03 Jun 2023
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-0441—02 Jun 2023
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-33246CRITICALunder attack01 Jun 2023
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-33690CRITICAL01 Jun 2023
Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Compo
75RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack31 May 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-1675HIGHunder attackransomware30 May 2023
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware30 May 2023
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-33246CRITICALunder attack30 May 2023
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-21839HIGHunder attack29 May 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALunder attackransomware29 May 2023
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
← previouspage 219 / 334next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.